Privacy Policy
Last updated: September 16, 2026
1. What we collect
- Account and contact information: your name, email address, username, account identifiers, sign-in provider information, and optional profile fields such as bio and avatar. Store claims also include business and contact names, email, an optional phone number, website, and notes you submit.
- Content and social connections: cards, photos, comments, direct and group messages, other content you submit, follows, selected audiences, saves, votes, and store claims. Social connections here mean your relationships within ShareCards.
- Location: precise and approximate location used for maps, place search, and nearby content, plus the places and home locality you select or attach to content. Device location access is optional and controlled through app and device settings.
- Search and usage: search terms, content views, opens, shares, saves, votes, and other product interactions, including their times and categories. Search interaction records retain normalized term hashes linked to your account; hashing does not make those records anonymous.
- Device, SDK, and diagnostic information: device and installation identifiers, push tokens, sign-in session metadata, app/platform information, and usage, performance, and other diagnostic data processed by ShareCards and its service-provider SDKs.
- Support and feedback: the name and feedback text you submit, associated account ID, username, display name, verified email, sign-in providers, account creation time, locale, session platform, and app version. We also receive information you choose to include when contacting support.
2. How we use it
We use this information to provide accounts and sign-in, display community content, deliver messages and notifications, process store claims and reports, respond to feedback, and operate and secure the service. Location, searches, social connections, and interactions also help personalize and rank content.
Usage, device, location, and diagnostic information is also processed for analytics: understanding feature use, measuring performance, diagnosing faults, and improving ShareCards and the operation of integrated services. Account, content, feedback, and interaction records are linked to your account. Some provider SDK measurements are processed without that account linkage; this varies by provider and data type.
We do not sell your personal data and we do not show third-party advertising.
3. Sharing and processors
Content visibility follows the audience and feature in which it appears. Direct and group messages are shared with their participants. We also process submitted feedback and reports to provide support and enforce our rules.
Service providers include DigitalOcean for hosting, databases, media storage, and backups; Mapbox for maps, place search, geocoding, and related location, usage, performance, and diagnostic analytics; Google Sign-In for authentication and associated SDK analytics; Firebase and related Google SDKs for push delivery, installation/device information, diagnostics, and operational analytics; Apple for iOS push delivery and Sign in with Apple; and Resend for transactional email.
Account-linked feedback and its associated metadata are stored in our database and copied to Google Sheets as an operational support record. Website delivery and protection also use Cloudflare. These providers process information in connection with the services they supply.
4. Retention and deletion
Account-associated data is retained while your account exists. Open Profile > Settings > Delete account to request permanent deletion. On acceptance, account access, sessions and registered devices are revoked immediately. The request is eligible for background deletion immediately, without a 30-day waiting period. Background processing removes profile information, authored cards, comments, messages and owned media, and revokes linked Apple tokens. Service failures can delay completion and are retried. Minimal anonymized records may remain where needed for database integrity, security or moderation. Email addresses are released for future signups when final deletion completes.
Feedback is redacted in the database and its current Google Sheets row is updated asynchronously. This does not automatically erase historical spreadsheet versions, provider backups, exports, or copies made by recipients or editors. Those copies may require separate retention or deletion action and may remain after the active account record is removed. There is no single guaranteed 30-day purge deadline covering every historical copy. Contact sharecardsdev@gmail.com with questions about access, retention, or deletion.
5. Your choices
- Location and notification permissions can be changed anytime in Settings or your device settings.
- Private-account mode restricts some profile details and the profile's card listing. Your username, display name, and avatar can remain visible. Card visibility elsewhere follows its audience: an Everyone card can remain visible in community or place views, and a Selected People card remains available to its selected audience.
- You can contact sharecardsdev@gmail.com to ask about access to or a copy of your data. Do not include passwords or sign-in verification codes.
6. Security
Data is encrypted in transit, credentials are stored as salted digests or encrypted values, and production access is restricted. No system is perfectly secure; report concerns to sharecardsdev@gmail.com.
7. Changes
We may revise this notice. The Last updated date identifies revisions to the notice. The version and effective date above identify the app's existing consent version; clarifications to this notice do not by themselves change that version. A future consent-version change may require acknowledgement in the app.