Privacy

Last updated 13 November 2026

This page is a draft. The company details are still being added.

Hellocard makes digital business cards for Apple Wallet. This page explains what Hellocard keeps about you, why, and what you can do about it. Questions go to the contact email shown here once it is added.

What we keep

• Your account. Your email address, your name if you add one, your settings, and your password. Passwords are stored hashed by our sign-in provider; nobody can read them.
• Your cards. Everything you put on a card: name, job title, company, contact details, links, logo, profile photo and cover photo.
• Contacts sent to you. When someone uses Exchange contacts on your card, we keep the details they type (name, email or phone, and optionally company, job title and a note) so you can see them. You can add tags and notes, export them and delete them.
• Card activity. When someone opens your card, saves it to their contacts or taps a link on it, we count it, along with whether they came from your QR code, your Wallet pass or a link, so you can see it in Analytics. We don't record who they are, their IP address or their device.
• Apple Wallet. When a card is added to Apple Wallet, the iPhone gives us a device identifier and a push token. We use them only to update the pass when you edit your card.

Your card is public at its link

Anyone with your card's link or QR code can see what is on it and save it. Only put details on a card that you are happy to share with the people you meet.

Cookies

We use cookies that keep you signed in, and one cookie that remembers which of your cards you are sharing. There are no advertising or tracking cookies, so there is nothing to accept.

Why we use it

We use your details to run your account and cards (to provide the service you signed up for), and to keep Hellocard secure and stop abuse, such as limiting how many contacts one card can receive in a day. We do not sell your details or use them for advertising.

Who helps us run Hellocard

• Supabase: database, sign-in and photo storage, hosted in Frankfurt.
• Vercel: hosts the website, running in Frankfurt.
• Resend: sends sign-in and password emails.
• Apple: delivers updates to your Wallet pass.
• Google: only if you choose to sign in with Google.
• Stripe: will take payments once the Pro plan opens. We never see your full card number.

Some of these companies are based in the United States, so your details may be handled there under their data transfer safeguards.

How long we keep it

We keep your details until you delete them. Deleting a card removes it and its photos. Deleting your account in Settings removes your account, cards, photos and contacts. Copies other people already saved, such as a pass in their Wallet or a contact on their phone, are theirs and we can't remove them.

Your rights

You can ask to see, correct, export or delete what we hold about you, and object to how we use it. Most of this you can do yourself in the app. For anything else, email the contact email shown here once it is added. If you are unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this page in a way that matters, we will tell you by email or in the app before the change applies.