Summary
CardVera is a business-card scanner and local contact Library operated by CodeFlow Technologies Inc. It does not require a CardVera account.
Card recognition uses Apple Vision on the device. Reviewed card details remain in CardVera’s local storage unless you explicitly export, share, or act on them. The current release does not include advertising, third-party analytics SDKs, tracking, a developer-operated backend, or cloud database sync.
Data CardVera handles on the device
Depending on the features you choose, CardVera can handle:
- Card photographs captured with the camera or selected by you.
- Recognized text and field-level source evidence.
- Reviewed names, organizations, titles, phone numbers, email addresses, websites, postal addresses, working hours, and business identifiers.
- Private notes, meeting context, tags, follow-up dates, and reminder state.
- Optional retained front and back card images.
- Local Apple Contacts identifiers after an explicit Contacts export.
- A local count of successful new Library saves used to apply the free allowance.
This information is used to recognize, review, save, search, compare, export, and act on business-card records. CardVera does not use it for advertising or tracking.
Camera, Photos, Files, and sharing
CardVera accesses the camera only after you choose to scan a card. A photo can also be selected with Apple’s system photo picker.
When you explicitly share one image to CardVera from another app, the Share Extension creates a bounded, privacy-cleaned copy in a local data-protected handoff area. It is not saved as a Library card until you complete the normal crop, review, duplicate, and save flow. The handoff copy remains recoverable until the resulting card is saved or you explicitly discard it.
User-initiated vCard, CSV, and encrypted-backup exports are handed to Apple’s system share or file interface. The destination you select controls the exported copy after it leaves CardVera.
Apple Contacts
Apple Contacts export is optional and requires system permission. CardVera compares only the contacts the system permits it to access. It creates or changes a contact only after you confirm the action. Possible duplicates are shown for review, and existing fields are not silently overwritten.
Deleting a CardVera card does not delete a contact previously exported to Apple Contacts. That contact must be managed separately in Contacts.
Notifications
CardVera requests notification permission only when you enable a follow-up reminder or invoke the corresponding Shortcut. Reminder notifications are scheduled locally. Private meeting context and tags are not placed in notification content.
External actions and services
Calls, directions, websites, booking links, and social links leave CardVera only after you tap the corresponding action. The selected phone carrier, Apple Maps, browser, website, or third-party app then handles that action under its own privacy practices.
CardVera Lifetime
The first 10 successful new Library saves are included free. Recognition attempts, retakes, cancelled reviews, failed saves, and updates to an existing card do not use the allowance. A separate copy counts because it creates a new Library record.
If you choose CardVera Lifetime, Apple processes the one-time in-app purchase through the App Store. CardVera checks the verified App Store entitlement to unlock unlimited new Library saves. The operator does not receive card contents through this purchase flow. Apple may make purchase and account data available to the operator through App Store Connect under Apple’s terms and privacy practices.
Existing Library cards remain available to view, edit, export, back up, and delete without CardVera Lifetime.
Developer collection
The current release does not send readable card, contact, usage, diagnostic, or receipt data to CodeFlow Technologies Inc. It has no developer-operated account or server and includes no advertising or third-party analytics SDK.
Apple system frameworks and services may process data independently under Apple’s terms and privacy policies. Data you explicitly export to another destination is controlled by that destination after export.
Local storage, protection, and backups
CardVera’s live Library uses iOS Data Protection. CloudKit database sync is not configured.
You can choose whether the local storage directory participates in normal iOS, Finder, or iCloud device-backup behavior. This setting does not initiate an upload by itself. Normal device backups are controlled by your Apple and system settings.
Manual Library backups are encrypted with AES-256-GCM using a password you choose. CardVera does not store or transmit that password and cannot recover it.
The live searchable database does not claim separate app-key encryption for every database column.
Retention and deletion
Reviewed cards remain in the local Library until you delete them or delete the app’s local data. Deleting a saved card removes its reviewed details, retained card images, and pending follow-up reminder from CardVera.
Retained images can be removed without deleting the saved card. Deleting CardVera can remove its local Library, subject to copies already present in device backups. Exported files, Apple Contacts records, and data already sent to destinations you selected are not deleted automatically.
Children
CardVera is a general business-card utility and is not directed to children. It does not knowingly operate accounts or collect data from children.
Changes to this policy
This policy will be updated before a release that materially changes CardVera’s data handling, adds a server or analytics SDK, or changes its use of external services or third-party providers. The effective date above will identify the current version.
Contact
Privacy questions and deletion help can be sent to ahmad@codeflowtechnologies.com.
CodeFlow Technologies Inc.