Privacy Policy
Last updated 10 September 2026
Ravencard is a digital business card app published by Tyrker Products. This policy explains what the app collects, why, where it is stored and how you remove it. It covers the Ravencard mobile app and this website.
The short version. We collect what your card needs and nothing else. We do not sell your data, we do not run advertising, and we do not use third-party analytics or tracking. Your card is public only at the address you choose to share; everything else is private to your account.
Who is responsible
Tyrker Products is the data controller. For any question or request about your data, write to tyrker.products@gmail.com.
What we collect
Account
Your email address, and a password if you sign up that way. If you use Sign in with Apple you may choose to hide your address, in which case we only ever see Apple's relay address. If you use Google, we receive your email address and nothing else from your Google account. We also store a handle — the short name in your card's public address.
Your card
Everything you type or upload into your card: name, job title, company, biography, phone numbers, email addresses, postal address, website, social links, profile photos, company logo, background image, and your projects with their images, links and documents.
Your card is published. When you share your QR code or link, the card is readable by anyone who has that address. Treat it as public information and put nothing on it you would not print on paper.
Business cards you scan
The photo of each scanned card, the contact details read from it, and anything you add yourself — notes, tags, where you met. Text recognition runs on your device using Apple's built-in Vision framework; the image is not sent anywhere to be read. The scan and its details are stored in your account so they survive a new phone, and they are private to you.
Subscription
Purchases are handled by Apple. We never see your card number, billing address or Apple ID. Our subscription provider, RevenueCat, tells us whether your subscription is active and gives us an anonymous customer identifier, device type and country. That is the whole of it.
What we do not collect
- Your phone's address book. The Contacts permission is used only to write a card you chose to save.
- Location. The app never asks for it.
- Advertising identifiers, cross-app tracking, or third-party analytics.
- Camera or photo access beyond the picture you take or pick in that moment.
Device permissions
- Camera — to scan paper business cards and QR codes.
- Photos — to pick pictures for your card and to import a card photo from your library.
- Contacts — to save a scanned card into your phone, one contact at a time, at your request.
- Motion — to tilt the card gently as you move the phone. It is cosmetic and never leaves the device.
Each permission is asked for the first time it is needed and can be revoked in iOS Settings at any time.
Where your data lives
Data is stored with Supabase on servers in the European Union (Frankfurt), and this website is served by Vercel. Access is restricted per account at the database level: your rows are readable only by you, with the single exception of the public card page, which serves only the fields your plan makes visible.
Who else processes it
- Supabase — database, file storage and authentication.
- Vercel — hosting for ravencard.app and the public card pages.
- RevenueCat — subscription status.
- Apple — payments, and Sign in with Apple if you use it.
- Google — only if you choose to sign in with Google.
None of them are permitted to use your data for their own purposes.
How long we keep it
For as long as your account exists. Delete your account and your profile, cards, photos, documents, scanned contacts and stored files are removed from the live database immediately; encrypted backups roll off within 30 days. Subscription records that Apple or tax law requires us to keep are retained separately from your personal data.
Deleting your account
Open the app, go to Settings → Account → Delete account, and confirm. It is permanent and takes effect at once. Full instructions are on the account deletion page. If you cannot reach the app, email tyrker.products@gmail.com from your registered address and we will do it for you within 30 days.
Deleting the app alone does not delete your account, because your card lives in the cloud so it survives a lost phone.
Your rights
Under the GDPR and Turkey's KVKK you may ask for a copy of your data, correct it, delete it, restrict or object to its processing, or receive it in a portable format. Write to tyrker.products@gmail.com and we will answer within 30 days. Most of these you can do yourself inside the app, which is faster.
Children
Ravencard is a professional tool and is not directed at children under 13. We do not knowingly collect their data; if you believe a child has created an account, write to us and we will remove it.
Security
Traffic is encrypted in transit, files are served through short-lived signed links rather than public URLs, and database access is enforced per account. No system is perfect: if a breach ever affects your data we will tell you and the relevant authority without undue delay.
Changes
If this policy changes materially we will update the date at the top and, where the change affects how your data is used, notify you in the app before it takes effect.
Contact
Tyrker Products · tyrker.products@gmail.com