Privacy Policy

Who we are

Proflio is a business-card wallet app developed by Ones N Zeros ("we", "us", "our"). This policy explains what information Proflio handles, where it is kept, and what you can do about it.

An earlier version of Proflio stored everything only on your device. Proflio now uses a cloud account so your cards are backed up and available when you change phones. This policy describes how that works.

Information you give us when you sign up

Creating a Proflio account requires:

• Your name
• Your email address — this identifies your account and is where password-reset emails are sent
• Your phone number
• A password

Your password is handled entirely by Google Firebase Authentication. It is never stored in our database and we never see it, even when you reset it.

The cards you save

Everything you put into Proflio is stored in your account so it is there on your next device:

• Business-card details you scan or type: name, job title, company, phone numbers, email, website, address and your own notes
• Photos of the cards you scan
• The categories you create and which cards belong to them

Much of this is other people's contact information. You are responsible for having a legitimate reason to keep it — ordinarily, that someone handed you their card.

Where your data is stored

Proflio runs on Google Firebase. Your account details and cards are held in Cloud Firestore, and your card photos in Cloud Storage, both operated by Google on our behalf as our data processor. We do not run any other server, and your data is not sent anywhere else.

Each account's data sits under its own path, and our server-side security rules permit reading or writing it only when the request comes from that signed-in account. One user cannot reach another user's cards.

Camera, photos and card scanning

Proflio asks for camera and photo-library access only so you can capture or pick a photo of a business card. Reading the text off that card happens entirely on your phone, using Google ML Kit's on-device text recognition — the image is not sent to a server to be read.

If you keep the card after scanning it, the photo is then uploaded to your account's private storage along with the card's details, so it is still there on your next device.

App lock (PIN)

The PIN that unlocks Proflio is separate from your account password and stays on your device. We store only a salted cryptographic hash of it, in your phone's encrypted keystore — never the PIN itself, and never on our servers. Because of that we cannot recover or reset it for you.

How your data is protected

• Everything travels between the app and Google's servers over an encrypted connection (TLS)
• Google encrypts stored data at rest
• Security rules enforced on the server, not just in the app, restrict every card and photo to the account that owns it
• Your password is managed by Firebase Authentication and never stored by us

No system is perfectly secure, but we do not store payment details or government identifiers, so there is none of that to lose.

What we don't do

• We do not sell, rent or trade your data, ever
• We do not share it with third parties, other than Google as the hosting provider described above
• We run no advertising and include no advertising SDKs
• We collect no analytics, usage tracking or crash reporting
• We do not read your saved cards, or use them to train anything
• We do not read your phone's own contacts, your location, or anything else on your device

How long we keep it

We keep your account and cards for as long as your account exists. There is no separate retention period and nothing is archived for later use — when you delete something, we delete it.

Deleting your account removes your cards, photos, categories, profile and sign-in immediately from our live systems. Residual copies in Google's encrypted backups are rotated out within 30 days.

Your choices and rights

• See and correct your data — every card and category is visible and editable in the app
• Delete individual items — delete any card or category at any time
• Delete everything — Settings › Delete Account erases your account and all its contents permanently. Step-by-step instructions are on our account deletion page.

Depending on where you live you may also have rights to object to processing or to receive a copy of your data. Contact us and we will help.

Children's privacy

Proflio is a professional tool intended for adults and is not directed at children under 13. We do not knowingly create accounts for children. If you believe a child has registered, contact us and we will delete the account.

Changes to this policy

If we change how data is handled — new features, a different provider, anything that affects what we collect — we will update this policy and revise the effective date above before that change ships.

Contact us

Questions about this policy, or about your data, go to [email protected]. We aim to reply within 7 days.