Privacy Policy

Last updated 14 October 2026

Ravencard is a digital business card app published by Tyrker Products. This policy explains what the app collects, why, where it is stored and how you remove it. It covers the Ravencard mobile app and this website.

Who is responsible

Tyrker Products is the data controller. For any question or request about your data, write to tyrker.products@gmail.com.

What we collect

Account

Your email address, and a password if you sign up that way. If you use Sign in with Apple you may choose to hide your address, in which case we only ever see Apple's relay address. If you use Google, we receive your email address and nothing else from your Google account. We also store a handle — the short name in your card's public address.

Your card

Everything you type or upload into your card: name, job title, company, biography, phone numbers, email addresses, postal address, website, social links, profile photos, company logo, background image, and your projects with their images, links and documents.

Your card is published. When you share your QR code or link, the card is readable by anyone who has that address. Treat it as public information and put nothing on it you would not print on paper.

Business cards you scan

The photo of each scanned card, the contact details read from it, and anything you add yourself — notes, tags, where you met. When you are signed in, the photo is sent over an encrypted connection, through our server, to Google Cloud Vision, which reads the text and returns it. We keep no copy from that step, and Google processes the image for us as a processor under the Google Cloud terms. When you are signed out or offline, or the service cannot be reached, the text is read on your device by Apple's built-in Vision framework (on iPhone) or Google's on-device ML Kit (on Android) instead. Either way the text is sorted into fields on the phone. The scan and its details are stored in your account so they survive a new phone, and they are private to you.

Contacts you share

You can pass a scanned contact on to someone else: as a contact file or a picture, which go straight from your phone to the app you choose, or as a Ravencard link. For a link we keep a copy of the contact's details from the card (name, title, company, numbers, addresses, website) under a random code, together with your name as the sender. Your notes, where you met and the photo of the paper card are included only if you switch them on. Anyone with the link can see those details and add them to their own contacts or Ravencard account, so share it only with the person you mean to. A link stops working after 30 days, and the copy is deleted with your account.

Bios written with AI

Writing your bio with AI is optional, and the app asks before the first time. When you use it, the keywords you type, together with the name, job title and company on your card, are sent over an encrypted connection, through our server, to Google Gemini, which drafts the bio and returns it. We keep no copy of the keywords or the draft, and Google processes them for us under the paid Gemini API terms, which do not allow it to use them to train its models. To stop the feature being abused we count how many drafts are asked for each day: under your account when you are signed in, otherwise under a one-way code derived from your network address, which we cannot turn back into the address. Those counts are deleted after a week.

Subscription

Purchases are handled by Apple. We never see your card number, billing address or Apple ID. Our subscription provider, RevenueCat, tells us whether your subscription is active and gives us an anonymous customer identifier, device type and country. That is the whole of it.

What we do not collect

• Your phone's address book. The Contacts permission is used only to write a card you chose to save.
• Location. The app never asks for it.
• Advertising identifiers or cross-app tracking, anywhere. Third-party analytics in the app, or on the card pages people open when you share your card.
• Camera or photo access beyond the picture you take or pick in that moment.

Analytics on this website

This website (ravencard.app) can use Google Analytics 4, a service of Google, to count visits and see which pages are useful. It runs only if you choose Accept in the cookie banner. Until you do, no Google script is loaded and no analytics cookie is set; if you choose Decline, that stays true. The mobile app does not use it.

It never runs on card pages (addresses beginning ravencard.app/u/). Someone opening a card you shared came to see you, not us, so we do not measure them. What your card does record for you — that it was viewed or saved and which of its links were tapped — is kept in our own database, without cookies and without identifying the person who opened it.

What it collects

• The pages you view on this website, without the part of the address after a “?”.
• The page that referred you, and when and for how long you visited.
• Your browser, device type, operating system, screen size and language.
• An approximate location (country and city) that Google derives from your IP address. Google Analytics 4 does not log or store the IP address itself.
• Interactions Google measures automatically, such as scrolling to the end of a page or following a link off the site.

We have switched off Google signals, advertising features and ad personalisation, so this data is not linked to your Google account or used to show you ads. It is not combined with your Ravencard account.

Cookies

Only after you accept, Google Analytics sets two first-party cookies on ravencard.app:

• _ga — a random identifier that tells one browser from another. Expires after 2 years.
• _ga_<ID> — keeps track of the current visit. Expires after 2 years.

Your choice itself is remembered in your browser's local storage (not a cookie) for up to 12 months, and is never sent to us or to Google. After that we ask again.

How long it is kept

Visit-level data is kept in Google Analytics for 2 months and then deleted automatically. Aggregated reports (for example, the number of visits to a page in a month) contain no identifiers and may be kept longer.

Legal basis, and Google's role

The legal basis is your consent (GDPR Art. 6(1)(a)). Google processes this data for us as a processor, under Google's data processing terms, and may do so on servers outside the European Union, including in the United States, under the safeguards those terms provide. See Google's privacy policy and how Google uses information from sites that use its services.

Saying no, or changing your mind

Choose Decline in the banner and nothing is loaded. To change an earlier answer at any time, open Cookie settings and choose again; withdrawing consent stops analytics at once and deletes the cookies above from your browser. Withdrawing does not affect visits measured before you did. You can also block or delete cookies in your browser's settings, or install Google's opt-out browser add-on.

Device permissions

• Camera — to scan paper business cards and QR codes.
• Photos — to pick pictures for your card and to import a card photo from your library.
• Contacts — to save a scanned card into your phone, one contact at a time, at your request.
• Motion — to tilt the card gently as you move the phone. It is cosmetic and never leaves the device.

Each permission is asked for the first time it is needed and can be revoked in iOS Settings at any time.

Where your data lives

Data is stored with Supabase on servers in the European Union (Frankfurt), and this website is served by Vercel. Access is restricted per account at the database level: your rows are readable only by you, with the single exception of the public card page, which serves only the fields your plan makes visible.

Who else processes it

• Supabase — database, file storage and authentication.
• Vercel — hosting for ravencard.app and the public card pages.
• Google — website analytics (Google Analytics 4), only if you accept it; see Analytics on this website.
• RevenueCat — subscription status.
• Google — Cloud Vision, to read the text on business cards you scan while signed in.
• Google — Gemini, to draft your bio when you ask for it.
• Apple — payments, and Sign in with Apple if you use it.
• Google — sign-in, only if you choose to sign in with Google.

None of them are permitted to use your data for their own purposes.

How long we keep it

For as long as your account exists. Delete your account and your profile, cards, photos, documents, scanned contacts and stored files are removed from the live database immediately; encrypted backups roll off within 30 days. Subscription records that Apple or tax law requires us to keep are retained separately from your personal data.

Deleting your account

Open the app, go to Settings → Account → Delete account, and confirm. It is permanent and takes effect at once. Full instructions are on the account deletion page. If you cannot reach the app, email tyrker.products@gmail.com from your registered address and we will do it for you within 30 days.

Deleting the app alone does not delete your account, because your card lives in the cloud so it survives a lost phone.

Your rights

Under the GDPR and Turkey's KVKK you may ask for a copy of your data, correct it, delete it, restrict or object to its processing, or receive it in a portable format. Write to tyrker.products@gmail.com and we will answer within 30 days. Most of these you can do yourself inside the app, which is faster.

Children

Ravencard is a professional tool and is not directed at children under 13. We do not knowingly collect their data; if you believe a child has created an account, write to us and we will remove it.

Security

Traffic is encrypted in transit, files are served through short-lived signed links rather than public URLs, and database access is enforced per account. No system is perfect: if a breach ever affects your data we will tell you and the relevant authority without undue delay.

Changes

If this policy changes materially we will update the date at the top and, where the change affects how your data is used, notify you in the app before it takes effect.

Contact

Tyrker Products · tyrker.products@gmail.com