Privacy Policy — Android

This policy covers the Android version of CardForm distributed on Google Play. The iOS version is a separate build with a separate policy — see the CardForm Privacy Policy for iOS.

Your card details stay on your device. CardForm has no account, no sign-in, and no server of ours. The contact details you put on a business card are stored locally and are never uploaded. The only thing that leaves your phone is the pseudonymous usage analytics described below, which never contains what is written on your cards.

A business card is made of contact details, so CardForm asks you for them. Depending on the card, that can include:

• Your name and job title
• Your company name
• Your phone number, email address, postal address, and website
• A logo or image you choose to add

This information is yours and it stays on your device. It is written into CardForm's own private storage, which no other app can read, and it is never transmitted to Pentarab or to anyone else. We have no copy of it.

The app also stores your saved card designs, which in-app purchases you own, and your app preferences.

If you add a logo or photo, Android's system photo picker opens in a separate process and hands the app only the image you chose. CardForm does not browse your gallery and does not ask for a photo, media, or storage permission.

Exporting writes the finished card — a PNG, a PDF, or an imposed print sheet — as a file you can save or share through the Android share sheet. Printing hands the document to Android's own print system, which sends it to the printer or print service you choose. In both cases CardForm does not upload anything, and once the file leaves the app it is governed by whatever app or service you handed it to.

To understand how the app is used and to improve it, CardForm sends usage events to an analytics service that Pentarab runs itself. It is not Google Analytics, and the data is not passed on to any third party. The events record which screens you open and which actions you take — opening a template, saving a card, exporting a card, and the steps of the purchase flow. This is the complete list of what that service receives:

• The app identifier, the platform, and the app version and build number.
• An install identifier — a random value the app generates on first launch. It is not derived from your device, your Google account, or any advertising identifier, and reinstalling the app produces a new one.
• A session identifier, so one run of the app can be told apart from the next.
• Screen names, and how long each screen was open. The duration is measured from a matching open and close, not guessed from the gap between events.
• The UTC time of each event, plus your time-zone offset so local time can be reconstructed.
• Device information: the operating system and its version, the screen size, and the locale. The device model is not sent.
• A country. This is worked out by the receiving server from the connection itself — the app never sends it, and it is country-level only.

The service does not store your IP address. It is read at the edge only to derive the country and is then discarded. It collects no advertising identifier, no precise location, and no personal identifier such as a name, email address, or phone number. Nothing you create or enter in CardForm is part of an analytics event.

The contents of your cards — your name, phone number, email, address, company, and logo — are never included in an analytics event. Event values are screen names and action names only, and CardForm has no account, so nothing in the analytics stream identifies you.

There are no ads in CardForm, and nothing in the app is used to advertise to you or shared with data brokers. CardForm does not use crash reporting or performance monitoring.

CardForm is free to download; premium export options are unlocked with a subscription. All purchases are processed by Google Play Billing. Pentarab does not receive or store your payment card details, your Google account details, or your billing address. There is no receipt-verification server — your entitlement is confirmed by Google Play and applied on your device.

CardForm does not request camera, microphone, photo, media, storage, location, contacts, or calendar permissions. Choosing an image is handled by the Android system photo picker, and printing is handled by Android's print system, so neither needs a permission from the app.

The one permission the app can ask for is notifications, for a reminder to come back and finish a card. Android shows that prompt once, and only after you have used the app enough for the reminder to be worth offering — never at first launch. Decline it and everything else works exactly the same. The reminder is scheduled on your device; there is no push server, and no information leaves the device because of it. You can revoke the permission at any time in Android Settings > Apps > CardForm > Notifications.

• Everything stays on your device — there is nothing on a server for us to hold, hand over, or lose
• You can edit or delete your profile details and individual cards inside the app
• Uninstalling the app, or clearing its data from Android Settings → Apps → CardForm → Storage, removes everything permanently
• Files you already exported or printed are outside the app — manage those where you saved them
• If you want the analytics associated with your install removed, email us and we will act on it

CardForm is a professional tool and is not directed at children under 13. We do not knowingly collect personal information from children.

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

Questions about this policy? Email us: