This Privacy Policy explains how Stakly – Business Card Scanner ("Stakly," "the App," "we," "our," or "us") collects, uses, stores, and protects your information when you use our mobile application. By downloading, accessing, or using the App, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect information necessary to provide and secure our services:

1.1 Account & Personal Information

When you create an account or update your profile, we collect:

  • First and last name
  • Email address and Phone number
  • Job title and Employer/Company name
  • Authentication Data: Passwords are stored as one-way hashes by our authentication backend. Google account connections use authorization tokens instead of giving Stakly your Google password.

1.2 Business Card & Usage Data

To provide the core functionality of the App, we collect:

  • Images: Captured via your device camera or uploaded from your gallery.
  • OCR Text: Text extracted from business cards and the resulting structured contact information.
  • Device Permissions: With your consent, the App accesses your device's camera and photo library to process images.

1.3 Google Contacts and Google Calendar

Google Contacts and Google Calendar are optional, separately authorized connections. We use your Google account identifier and email address to identify and display the connected account. We do not receive your Google password.

Google Contacts access lets Stakly read names, email addresses, phone numbers, organizations, job titles, addresses and website links so you can preview and import selected contact fields. Imported contacts are stored in your Stakly library. When you review and confirm an export, Stakly sends the selected fields to Google to create or update a contact.

Google Calendar access lets Stakly list calendars you can write to and send reviewed meeting titles, descriptions, times, time zones, locations and attendee email addresses to the calendar you choose. You can confirm creation, updates or cancellation of a meeting. Google may send invitations or update messages to attendees. Stakly also reads existing events to check proposed changes for conflicts. This connection does not change your calendar settings.

Stakly stores encrypted access and refresh tokens, the connected account identifier and label, links between Stakly and Google records, and operation details used to review transfers and track results. Google receives the data you confirm for export or meeting operations.

2. How We Use Your Information

We use the collected information for the following purposes:

  • To scan, extract, and convert business card images into structured contact data.
  • To store, organize, and manage your contacts within your account.
  • To provide secure account authentication and profile management.
  • To improve the performance of our OCR and parsing systems.
  • To maintain and enhance the technical functionality of the App.

We do not sell, rent, or trade your personal data to third parties.

2.1 AI assistance, contact research and sharing

Imported Google contacts can be used by the same contact-management features as other Stakly contacts. Upload for enrichment and AI research are enabled by default in the processing choices and can be disabled through account or contact controls. Import uses the processing choices you select or previously save.

When enrichment and research are enabled, a saved contact with a company or website can trigger automatic public-source research. Stakly sends the contact name, company and website domain through Ronex Services to Brave Search to find possible public sources. AI assistance through Ronex Services uses Google Gemini: relevant contact identity, source-page text, and the fields or notes needed for the selected feature may be processed to produce suggestions, translations, summaries or drafts. Research suggestions require review before they replace saved contact fields. Team sharing and other connected integrations can transfer the fields you choose to the recipients or services involved.

We do not use Google user data for advertising or to train general-purpose AI models. Our Gemini integration uses a project with active paid billing. Under the Gemini Paid Services terms, Google does not use prompts or responses to improve its products; it may retain them for a limited period for safety, abuse prevention and legal obligations. Human access to Google user data is limited to support you authorize, security needs or legal requirements.

Stakly's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

3. Data Storage and Security

Stakly stores account and contact data in its server database and configured file storage. Safeguards include:

  • HTTPS/TLS for data in transit and encryption of stored Google access and refresh tokens.
  • Secure authentication mechanisms and controlled access protocols.

Access controls restrict access to account data. Sharing and connected integrations can provide selected records to other recipients when you use those features. While we implement reasonable safeguards, no method of electronic transmission or storage is 100% secure.

4. Data Retention and Deletion

We retain your data for as long as your account remains active. You may delete your account at any time within the App settings. Upon deletion, we permanently remove:

  • Your profile information and authentication credentials.
  • All stored business card images and extracted contact records.

4.1 Google disconnection and contact deletion

Disconnecting Google Contacts or Calendar in Stakly removes the stored tokens for that connection and cancels pending unconfirmed transfers. It does not delete contacts already imported into Stakly or records already created in Google. You can also revoke access through Google Account connections.

Moving a Stakly contact to trash hides it from the active library and allows recovery; it is not immediate permanent deletion. Configured trash-retention controls or an approved data-deletion request can remove retained contact data. Records previously exported to Google or other services require separate deletion there or the applicable reviewed calendar action. For data and account deletion requests, see our data deletion instructions or contact [email protected].

5. Your Rights

Depending on your jurisdiction, you have the right to access, correct, or delete your personal data. You can manage, edit, or delete your contacts and images directly within the App. For formal data portability or access requests, please contact us via the email below.

6. Children's Privacy

Stakly is not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware of such data collection, we will take immediate steps to delete it.

7. Changes to This Policy

We may update this Privacy Policy periodically. Any updates will be posted within the App or published through the relevant app store listing. Your continued use of the App after updates constitutes acceptance of the revised policy.

8. Contact Information

If you have any questions or requests regarding this Privacy Policy, please contact us at:
Email: [email protected]