Last updated: 3 October 2026
DigiCard is a business card you hand to people. A card is therefore meant to be readable by whoever you give it to — that is the product, not a leak. Everything built on top of a card is the opposite: your contacts list, your private notes and your conversations are visible only to you.
There are no ads and no advertising SDKs. Nothing about you is sold or shared for advertising. The app does record how it is used and when it crashes, through Firebase, so that the parts people struggle with can be fixed — what that covers is set out below.
There are two ways in, and they collect different amounts.
Either way, Firebase Authentication issues a user ID. Your name and photo, if there is one, are used to pre-fill the card editor when you make your first card, and are written to a profile document so that someone you are chatting with can see who they are talking to.
| What | Where | Who can read it |
|---|---|---|
| Your cards — name, job title, company, tagline, phone, email, website, address, social handles, layout and colour | cards/{cardId} | Anyone with the link. See below. |
| Photos and background images you upload for a card — cropped and re-compressed on your phone before upload | Cloudflare R2, under your user ID | Anyone with the link to a card that uses it, like the rest of the card. Image addresses are random and not listed anywhere. |
| Your saved templates — a name, a layout, a colour and a background | users/{yourId}/presets | Only you. A template becomes visible only once you put it on a card. |
| Your profile — display name, photo URL, email | users/{yourId} | Any signed-in DigiCard user |
| Your contacts and your private notes about them | users/{yourId}/connections | Only you. Not even the person the note is about. |
| Invites you send — which of your cards the link opens, when it was sent, and the account and card of whoever joined from it | invites/{inviteId} | Anyone with the invite link can open it, like a card. Only you can list the invites you sent. |
| Messages | chats/{chatId}/messages | Only the two people in that conversation |
| Which card you are currently sharing, and your NFC toggle | Your phone only | Only you — this never leaves the device |
A card link has to open for someone who does not have DigiCard and is not signed in. That is the entire point of putting it on a QR code or an NFC sticker. So a card can be read by anyone who has its address. What protects it is the address itself: card IDs are 20 random characters, so a card is unguessable rather than secret — the same security model as a paper card you hand out. Do not put anything on a card that you would not hand to a stranger.
Card links are also not indexed by search engines: the public renderer sends noindex for every card page.
Saving someone's card writes only into your contacts list. Nobody can add themselves to your list, and nobody can add you to theirs without you handing them a card first. This is enforced by the database's security rules, not just by the app.
DigiCard uses Google Analytics for Firebase and Firebase Crashlytics to learn where the app is confusing or broken. They record:
This data is processed by Google under the Firebase privacy and security terms, is used only to improve DigiCard, and is not used for advertising. Analytics event data is kept for no longer than 14 months; crash reports for 90 days.
DigiCard uses Google Cloud Firestore, Firebase Authentication, Google Analytics for Firebase and Firebase Crashlytics. Data is encrypted in transit (TLS) and at rest by Google, and is processed under Google Cloud's privacy notice. Card photos and background images you upload are stored in Cloudflare R2, encrypted at rest, under Cloudflare's privacy policy. The developer can technically access the database as its owner but does not read user cards, notes or messages.
In the app: Settings → Delete account and data. This immediately and permanently deletes every card you have made, your contacts list, your private notes, your profile and your DigiCard sign-in. Cards you have handed out stop working for the people holding them.
Messages you have already sent stay in the other person's conversation, in the same way a sent email stays in the recipient's inbox. Once your profile is deleted those messages no longer carry your name, email or photo — only an account ID that no longer resolves to anyone.
If you cannot reach the app, request deletion at digicard-370bc.web.app/delete-account.
DigiCard is intended for working adults and is not directed at children under 13.
If this policy changes in a way that affects what is collected or who can read it, the date at the top changes and the new version is published here before the change ships.