Privacy Policy

Last updated: July 2026

What We Collect

DCard stores the data you enter — your profile information, card design preferences, scanned contacts, smart label contents (titles, descriptions, item lists, locations, photos), and dynamic QR names and target links. When cloud backup is enabled, this data is encrypted in transit (TLS) and stored on our servers so you can restore it on any device.

If you join a product waitlist on our website, we store the email address you submit, used only to contact you about that product.

Scan Data

When someone scans one of your QR codes (your card, a smart label, or a dynamic QR) or taps your NFC tag, our server records the time of the scan, the scanner’s IP address, and their browser user-agent string. We use this to count scans against your plan’s allowance, to show you aggregate analytics (scan counts over time, most-scanned codes, and a device-type breakdown), and to detect abuse.

We do not build profiles of people who scan your codes, do not use scan data for advertising, and do not sell or share it. Scan records are deleted when the associated account is deleted.

Public Pages

Your card page, smart label pages, and dynamic QR redirects are public URLs: anyone who scans the code or has the link can view that content. Only put information on your card and labels that you are comfortable sharing with anyone who encounters the printed code.

Device Identifier

We generate a random device ID on first launch. This ID is hashed (SHA-256) before being sent to our server. We cannot reverse it to identify your device. It is used solely to associate your cloud backup data with your device.

Camera & Contacts Permissions

DCard requests access to your device camera to photograph physical business cards (front and back) for on-device text recognition (OCR), and to scan QR codes. Card images are processed locally using Google ML Kit — no images or extracted text are sent to any external server during OCR. Captured card photos may be stored locally for your reference and uploaded only when cloud backup is enabled.

Contacts permission is requested only when you explicitly choose to save a scanned contact to your device address book. These permissions are optional; the app functions without them but some features will be unavailable.

Images

Profile photos, company logos, and scanned card images (front and back) are stored locally on your device. They are uploaded to our servers only when cloud backup is enabled, stored securely, and never shared with third parties. Smart label photos are stored on our servers so label pages can display them; they are retained for a maximum of one year from upload and then deleted.

Account & Sign-In

When you sign in, authentication is handled by Clerk, our sign-in provider, which processes your email address and (if you use Apple or Google sign-in) the identity your provider shares. We link your signed-in account to your backed-up data so it can follow you across devices.

No Third-Party Tracking

DCard does not use advertising trackers or third-party analytics SDKs, and we do not sell or share your data. The scan analytics described above are first-party: collected by our own servers, shown only to you. Our service providers are limited to Clerk (authentication), Apple and Google (payments), and our hosting infrastructure.

In-App Purchases & Subscriptions

DCard offers optional premium features via subscription (Pro and Business tiers) through the App Store and Google Play. Payment is processed entirely by Apple or Google — we do not collect or store any payment or billing information. Subscription management and refunds are handled through the respective store’s policies.

Data Deletion

You can delete all cloud data at any time from Settings. This permanently removes your profile, contacts, card images, smart labels and their photos, dynamic QRs, scan records, and account from our servers. You can also delete individual scanned contacts, labels, or dynamic QRs within the app. Deleting a label or dynamic QR immediately stops its printed code from working. Uninstalling the app removes all locally stored data.

Children’s Privacy

DCard is not directed at children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the app constitutes acceptance of any changes.

Contact

Questions? Email support@getdcard.com.