Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information. When you create an account or sign in, we collect your email address and, if you sign in with Google, your name and Google account identifier. Authentication is handled through Google Firebase Authentication.
• Business card and contact data. The Service is a business-card organizer. When you scan, import, or manually add a card, we store the information it contains — such as names, job titles, company names, phone numbers, email addresses, postal addresses, websites, notes, and tags — so you can access it across your devices.
• Card images. For single-card scanning, text is recognized on your device and only the extracted text is sent to our servers. The photo itself stays on the phone that scanned the card: it is not uploaded, so it does not appear on your other devices. For bulk upload, the card images you select are sent to our servers to be processed and are not kept once extraction is complete; the details read from them are kept for up to 24 hours so you can review and save them.
• Your phone’s contacts. When you choose to save a card to your phone, the app opens your phone’s own contact form with the details filled in. The app does not read your contact list and does not upload it.
• Usage and device data. We collect a device identifier used to meter scanning for signed-out use, along with limited technical and diagnostic data needed to operate and secure the Service.
• Referral data. If you use the referral program, we record your referral code and the credits associated with successful referrals.

2. Camera and photo permissions

The Service requests access to your camera to scan cards and to your photo library to import existing images. These permissions are used only for those features. You can grant or revoke them at any time in your device settings; some features will not work without them.

3. How we use your information

• To provide, maintain, and improve the Service and its features.
• To extract and structure the data on your cards (see “AI processing” below).
• To authenticate you and keep your account secure.
• To operate the referral and credits program.
• To send transactional messages you request, such as follow-up emails to a contact. These name you as the sender, and replies go to you.
• To detect, prevent, and address abuse, fraud, or technical issues.
• To comply with legal obligations.

4. AI processing

To turn a card into structured contact fields, the recognized text (and, for bulk upload, the image) is processed by an automated extraction service — either a third-party AI provider or our own hosted model. This processing is used solely to structure your card data and is not used to build advertising profiles.

5. How we share information

We do not sell your personal information. We share information only as follows:

• Service providers. We use trusted providers to run the Service, including Google Firebase (authentication, database, and hosting), our AI extraction provider, and an email-delivery provider for messages you send. They may process data only on our instructions.
• Legal and safety. We may disclose information if required by law or to protect the rights, property, or safety of our users or the public.
• Business transfers. If we are involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction.

6. Contact data about other people

When you save a card, it typically contains another person’s details. You are responsible for having a lawful basis to collect and store that information and for using it responsibly. We process it on your behalf so you can organize your own contacts.

7. Data storage and security

Your data is stored using Google Firebase / Google Cloud infrastructure. We protect data in transit with encryption, restrict access on a need-to-know basis, and store authentication secrets in your device’s secure keystore. No method of transmission or storage is completely secure, but we work to protect your information using appropriate safeguards.

8. Data retention

We keep your account and card data for as long as your account is active. A card you delete disappears from your lists straight away and is erased for good within 30 days. Uploaded images used for extraction are retained only as long as needed to process them. When you delete your account, your cards, groups, templates and profile are deleted as soon as you confirm, subject to any retention required by law. Photos of cards kept on your phone are removed when you delete the card, or when you uninstall the app.

9. Your rights and choices

• Access and correction. You can view and edit your cards and profile directly in the app.
• Deletion. You can delete individual cards in the app, or request full account and data deletion at https://mico360.com/delete-account.
• Permissions. You can revoke camera and photo access at any time in your device settings.

Depending on where you live, you may have additional rights under applicable data protection laws. To exercise them, contact us at info@mico360.com.

10. Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. International data transfers

We operate from Muscat, Oman and use global cloud infrastructure, so your information may be processed in countries other than your own. Where required, we take steps to ensure appropriate protection for such transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact us

If you have questions about this Privacy Policy or your data, contact us at info@mico360.com.