YOUR DATA, YOUR CONTROL
Privacy Policy
This policy explains how Card Nest handles account data, scanned business cards, and service information.
Last updated: August 7, 2026
Information we process
Card Nest processes account information you provide, business-card images and contact details you choose to store, and limited technical data required to operate and secure the service.
Google Sign-In
Card Nest offers Google Sign-In as an optional way to authenticate your Card Nest account. When you choose to sign in with Google and authorize the request, Card Nest receives only your basic identity information from Google: your name, your email address, and your profile picture.
- How it is used: this information is used solely to create and authenticate your Card Nest account, to display your name and avatar inside the app, and to associate your saved cards and contacts with your account.
- How it is stored: your Google-provided name and email address are stored in Card Nest’s hosted authentication system (Supabase) alongside your account, protected by per-user access controls. Your Google password is never seen or stored by Card Nest.
- How it is shared: Google authentication data is never sold, never used for advertising, and never shared with third parties. It is used only to operate the Card Nest service for you.
- What is not accessed: Card Nest does not request or receive access to your Gmail, Google Contacts, Google Drive, Google Calendar, or any other Google account data.
You may instead sign in with an email address and password at any time; Google Sign-In is never required.
How information is used
- Provide authentication, cloud backup, search, and synchronization.
- Process business cards with the AI provider you select.
- Protect the service, diagnose failures, and prevent abuse.
AI providers and your keys
Card Nest is designed for bring-your-own-key AI processing. Provider keys belong to you and are intended to remain in secure device storage rather than the Card Nest database.
Storage and security
Hosted Supabase provides authentication, database, and private image storage. User-owned records are protected with Row Level Security. No system can guarantee absolute security, but access is limited by design.
Your choices
You can edit your profile, remove card records, sign out, and request account assistance. Contact the project through its GitHub repository for privacy questions.
Changes
Material changes will be reflected on this page with an updated effective date.