Privacy Policy

uKeep (“the app”) is operated by Willowcy (“we”, “us”). This policy explains what data we collect, why, and your rights over it. Questions: hello@ukeep.me.

1. Your account

You can start using the app as a guest, without giving us your name or email. A guest still has an anonymous account on our servers, holding the cards scanned on that phone, so they aren’t lost. To keep your cards on another phone, or after removing the app, create an account by signing in with an email address and password, with Google, or with Apple on iPhone; your guest cards move into it. The data described below is collected for every account, guest or not; see section 6 for how to delete it.

2. Data we collect

• Account info: your email address and display name, once you create an account (a guest has neither). If you sign in with Google, we receive your name, email, and profile photo from your Google account.
• Business card data: the contact details extracted from the cards you scan (names, phone numbers, emails, companies, etc.).
• Usage data: a count of scans performed, to enforce daily limits by plan tier.
• Scan photos: a copy of the photo of each card you scan, kept for 7 days so we can check and improve how well cards are read, then deleted automatically.

3. Device permissions

The app asks for two permissions, each only when you use the feature that needs it. You can decline either one and keep using the rest of the app.

• Camera to photograph a business card when you choose to scan one. The photo is used to read the card (see section 5), and a copy is kept for 7 days to improve scanning (see section 6).
• Contacts to add a card to your phone’s address book, and only when you tap Save to Phone Contacts. Android grants reading and writing contacts together as a single permission, so the app has to request both; it only ever writes. We never read your existing contacts, and nothing from your address book is sent to us or stored.

Your cards are stored in your account. If a card can’t be uploaded straight away, for example with no connection, it is held on your device only until it has been uploaded, and then removed from the device.

4. How we use your data

• To extract contact details from card images using AI.
• To check and improve how well cards are read, using the scan photos we keep for 7 days.
• To sync your cards across your devices and back them up.
• To authenticate you and enforce plan limits.

5. Third-party services

• Supabase – authentication and encrypted cloud database hosting for your account and cards.
• Google Gemini API processes card images to extract text. Google uses the image only to return that text.
• Google Sign-In – optional authentication.
• Sign in with Apple – optional authentication on iPhone.

Your data is your own. We never sell it or share it for advertising.

6. Data retention & deletion

Your cloud data is kept until you delete it. Scan photos are the exception: each one is deleted automatically 7 days after the scan, and straight away if you delete your account or your data first. You can delete your entire account and all associated data at any time from Profile → Delete Account in the app (as a guest, Profile → Delete My Data), or by requesting deletion at hello@ukeep.me. See our account deletion page for details. Locally stored cards are removed when you uninstall the app.

7. Security

Cloud data is protected by row-level security so each user can only access their own records, and is transmitted over encrypted connections.

8. Children

uKeep is not directed to children under 13.

9. Changes

We may update this policy; material changes will be reflected by the “Last updated” date above.

10. Contact

Willowcy – hello@ukeep.me