Privacy Policy

Effective date: May 28, 2026  ·  Last updated: July 4, 2026

ScanticAI ("we", "our", or "us") is a mobile application developed by Luther Tan. This Privacy Policy explains how we collect, use, and protect information when you use the ScanticAI app on iOS and Android.

1. Information We Collect

Business card images. When you scan a business card, the photo is sent to our secure server for AI-powered text extraction. Images are processed in memory and are not stored on our servers after extraction is complete.

Extracted contact data. The contact information we extract from cards (name, email, phone, job title, company, website, address), along with any voice-note transcripts and meeting notes, is stored locally on your device, protected by your device's own security (passcode/biometric lock and OS-level app sandboxing). It is not uploaded to or retained on our servers, and does not sync across devices.

Account information. When you sign in with a magic link, we store your email address to authenticate your account.

Usage data. We track the number of scans you perform per month solely to enforce your plan's monthly limit. No behavioural or analytics data is collected.

Device permissions used:

• Camera / Photo Library — to photograph or select business cards for scanning
• Microphone — to record optional voice notes that add meeting context to a scanned contact; recordings are processed on our server and not stored after extraction
• Contacts — only when you choose to save a contact to your phone; we never read your existing contacts
• Notifications — to send follow-up reminders you explicitly schedule

2. How We Use Your Information

• Extract contact details from business card images using AI
• Generate AI-drafted follow-up messages personalised to the contact
• Enrich contact profiles with publicly available company information
• Send push notifications for follow-up reminders you schedule
• Track your monthly scan count to manage your subscription quota
• Authenticate your account securely

We do not use your data for advertising, sell it to third parties, or share it with any party except those listed in Section 3.

3. Third-Party Services

• Supabase (supabase.com) — authentication only. We use Supabase to verify your email via magic link; it stores your email address, not your contact data. Supabase is SOC 2 Type II certified.
• RevenueCat (revenuecat.com) — manages in-app subscription purchases. RevenueCat processes payment receipts via Apple App Store. We do not store your payment card details.
• AI Processing — business card images and extracted text are sent to our server (hosted on Railway) for AI analysis using large language models. Data is processed transiently and not retained after the response is returned.
• Expo (Expo Notifications) — handles push notification delivery on iOS and Android.

4. Data Retention

Your contact data, voice-note transcripts, and meeting notes live only on your device — you control them directly. You may delete individual contacts, or erase all of them at once, within the app at any time. Your account (email address) is retained on our authentication provider for as long as you keep an account with ScanticAI. To delete your account and its associated authentication record, contact us at the email below and we will process the deletion within 14 days; uninstalling the app or using in-app data reset removes your local contact data immediately.

5. Data Security

All data in transit is encrypted using TLS. Your contact data, voice-note transcripts, and meeting notes are stored locally on your device, not on our servers — we cannot see or access them. Business card images and voice recordings are processed transiently for AI extraction and are never written to disk on our servers.

6. Children's Privacy

ScanticAI is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or other applicable laws, including the right to access, correct, or delete your personal data. To exercise any of these rights, email us at finaleluther@gmail.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at:
Luther Tan
finaleluther@gmail.com