Privacy Policy
Last updated: September 15, 2026
uKeep (“the app”) is operated by Willowcy (“we”, “us”). This policy explains what data we collect, why, and your rights over it. Questions: contact@willowcy.com.
1. Your account
An account is required to use the app. You can sign in with an email address and password, or with Google. The data described below is collected for every account; see section 6 for how to delete it.
2. Data we collect when you create an account
- Account info: your email address and display name. If you sign in with Google, we receive your name, email, and profile photo from your Google account.
- Business card data: the contact details extracted from the cards you scan (names, phone numbers, emails, companies, etc.). The card image itself is not stored, it is sent for processing, the text is extracted, and the image is discarded.
- Usage data: a count of scans performed, to enforce daily limits by plan tier.
3. Device permissions
The app asks for two permissions, each only when you use the feature that needs it. You can decline either one and keep using the rest of the app.
- Camera to photograph a business card when you choose to scan one. The photo is used only to read the card (see section 5) and is not stored.
- Contacts to add a card to your phone’s address book, and only when you tap Save to Phone Contacts. Android grants reading and writing contacts together as a single permission, so the app has to request both; it only ever writes. We never read your existing contacts, and nothing from your address book is sent to us or stored.
Your cards are stored in your account. If a card can’t be uploaded straight away, for example with no connection, it is held on your device only until it has been uploaded, and then removed from the device.
4. How we use your data
- To extract contact details from card images using AI.
- To sync your cards across your devices and back them up.
- To authenticate you and enforce plan limits.
5. Third-party services
- Supabase – authentication and encrypted cloud database hosting for your account and cards.
- Google Gemini API processes card images to extract text. The image is transmitted for that purpose only and is not retained by us.
- Google Sign-In – optional authentication.
We do not sell your data or share it for advertising.
6. Data retention & deletion
Your cloud data is kept until you delete it. You can delete your entire account and all associated data at any time from Profile → Delete Account in the app, or by requesting deletion at contact@willowcy.com. See our account deletion page for details. Locally stored cards are removed when you uninstall the app.
7. Security
Cloud data is protected by row-level security so each user can only access their own records, and is transmitted over encrypted connections.
8. Children
uKeep is not directed to children under 13.
9. Changes
We may update this policy; material changes will be reflected by the “Last updated” date above.
10. Contact
Willowcy – contact@willowcy.com
