Privacy Policy

NFC Wizard is a professional NFC toolkit developed by Aishayy. We respect your privacy and have designed the App to collect as little personal information as possible. By using the App, you agree to the practices described in this policy.

Account information (optional). If you create a Cloud Sync account, we collect your email address and an account identifier through Firebase Authentication (email and password only). The display name you enter in the App is stored with your account when Cloud Backup is on. An account is not required to scan or write tags; without one, the App uses an anonymous identifier.

Profile content. If you build a digital business card, we store the contact details you enter (name, title, company, phone number, email, website, and social profile links). This content is used to generate your shareable card.

Tag data. Tags you scan or write — including payloads such as URLs, text records, contacts, and Wi-Fi credentials — are stored locally on your device by default. If you enable Cloud Backup (a Premium feature), your tag library, templates, and settings are synced to our cloud storage so they can be restored or shared across your devices.

Device information. Basic technical information such as device model, operating system version, and app version may be processed when providing cloud services or diagnosing problems you report.

Purchase information. Subscription and one-time purchases are processed by the App Store or Google Play and managed through RevenueCat. We receive a confirmation of your purchase status and an anonymous purchase identifier (or your account ID if you have an account); we do not receive or store your full payment card details.

Usage and diagnostics. The App uses Firebase Analytics to record which screens are opened and basic app events, and Firebase Crashlytics to collect crash and error reports (device model, OS version, app version, and the state of the App when the error happened). Both are linked to your anonymous or account identifier, not to your name or email. See Section 6.

Advertising data. If you use the free version, Google AdMob shows ads and may collect device information, your IP address (from which an approximate location can be inferred), ad interactions, and on Android your device's Advertising ID. The iPhone App does not request permission to track you and does not access the iOS advertising identifier (IDFA). See Section 6.

We do not collect precise location data, contacts from your phone's address book, or health data.

• To provide core App functionality — reading, writing, and managing NFC tags.
• To create and authenticate your account when you sign in.
• To sync backups of your tags, templates, and digital card when Cloud Backup is enabled.
• To create an Apple Wallet or Google Wallet pass of your digital business card when you ask for one.
• To show ads in the free version of the App.
• To understand how the App is used and fix crashes.
• To validate subscription status purchased through the app stores.
• To provide customer support and respond to your requests.
• To improve the App, fix defects, and maintain security.

We do not sell or rent your personal information. Ads in the free version are served by Google AdMob as described in Section 6; Premium and Remove Ads turn them off.

Where the GDPR applies, we process your information based on: performance of a contract (providing the App and any subscriptions you purchase), consent (optional cloud backup, personalized ads where consent is required, and marketing communications), legitimate interests (app security, fraud prevention, crash diagnostics, usage analytics, and service improvement), and compliance with legal obligations.

The App relies on the following service providers:

• Firebase Authentication (Google) — the anonymous session every install uses, and email/password account creation and sign-in. Receives your email address and password when you create an account or sign in.
• Cloud Firestore (Google) — stores your account profile, digital business card content, and (if enabled) synced app data.
• Firebase Analytics, Crashlytics and App Check (Google) — usage analytics, crash reports, and verifying that requests to our cloud services come from the genuine App.
• Google AdMob — serves ads to free users and asks for consent where the law requires it (for example in the EEA and UK). Google's use of data from apps is described at https://policies.google.com/technologies/partner-sites.
• Cloud Functions and Google Wallet (Google) — when you add your card to Apple Wallet or Google Wallet, the card details are sent to our Cloud Function, which creates the pass.
• Apple App Store and Google Play — process all subscription and one-time purchases. Their handling of payment data is governed by their own privacy policies.
• RevenueCat — manages in-app purchase status so Premium and Remove Ads unlock and restore across reinstalls. Receives purchase receipts and an anonymous app user ID (or your account ID if you have an account), never your payment card details.

These providers act as processors on our behalf where applicable. You can review Google's privacy commitments at https://policies.google.com/privacy.

Analytics. The App uses Firebase Analytics to count screen views and basic app events, such as how often a feature is opened. Events are linked to your anonymous or account identifier and are not used for advertising.

Crash reporting. Firebase Crashlytics sends a report when the App crashes or hits an error, with the device model, OS version, app version, and technical details of the error, linked to your anonymous or account identifier.

Advertising. The free version shows app-open, banner, and interstitial ads from Google AdMob, and offers optional rewarded ads that unlock one use of a Premium feature. Before any ad loads, Google's consent form asks for your choice where the law requires it (for example in the EEA and UK). AdMob may use device information, your IP address, ad interactions, and on Android the Advertising ID to show, limit, and measure ads. On iPhone, the App does not track you across other companies' apps or websites and does not access the IDFA. On Android you can reset your Advertising ID or opt out of ad personalization in your device settings. A Premium subscription or the one-time Remove Ads purchase turns off all ads except rewarded ads, which you only see if you choose to.

Website. If you arrive on this website from a campaign link, the link may carry campaign labels (for example "utm_source=newsletter") or an ad click identifier. If you choose "Accept" in the privacy banner, we store those labels, the page you landed on and the referring site's domain in your browser's local storage for up to 90 days, and attach the campaign labels to events such as tapping the App Store or Google Play button so we can tell which posts and campaigns are useful. When you open Google Play from this site, the campaign labels are passed to Google Play as the install referrer. We never store your name, email address or phone number this way, and the data is not used for advertising. "Accept" also turns on Google Analytics 4, which sets first-party cookies (_ga, _ga_*) and sends page views and the events above to Google so we can measure visits; Google signals and ad personalization are off. Google's handling is described at https://policies.google.com/privacy. If you choose "Reject", no analytics script is loaded, nothing is stored, and campaign labels are only removed from the address bar. You can change your choice at any time with "Cookie settings" in the footer; withdrawing consent deletes the stored data and the analytics cookies.

Premium subscriptions and one-time Remove Ads purchases are made in the App via the App Store or Google Play and billed to your Apple ID or Google account. We never see or store your payment card details. We receive only a token confirming your purchase status so we can unlock paid features.

• NFC — required to read and write NFC tags. This is the core function of the App.
• Camera — used only when you scan a QR code to convert it to an NFC payload.
• Photo library — used only when you pick an image that contains a QR code. The image is decoded on your device and not uploaded.
• Location (optional, off by default) — used only if you turn on "Record where I share" in Card Analytics. The App saves the city where you wrote or shared your card, on your device only.

You can revoke permissions anytime in your device Settings. Core scanning and writing requires NFC access; other features degrade gracefully without camera, photo, or location access.

Locally stored tag data remains on your device until you delete the App or clear its data. Account and cloud-synced data are retained for as long as your account is active. Deleting your account in the App removes its cloud data immediately; if you ask us by email instead, we delete it within 30 days, except where longer retention is required by law. Backup artifacts may persist up to an additional 30 days in encrypted storage before being fully purged.

Data transmitted between the App and our cloud services is encrypted in transit using TLS. Cloud-stored data is protected using Firebase security rules that restrict access to your authenticated account. Sensitive local values are stored using the device's secure storage facilities. No method of transmission or storage is 100% secure, but we apply industry-standard safeguards and review them regularly.

Depending on your location, you may have rights to access, correct, export, or delete your personal information, object to or restrict certain processing, and withdraw consent. To exercise any of these rights, email us at contactus@aishayy.com. You may also:

• Use the App without creating an account.
• Enable or disable Cloud Backup at any time in Settings.
• Delete individual scans and tags locally at any time.
• Delete your account and cloud data in the App (see Section 12).
• Turn off ads with Premium or the one-time Remove Ads purchase.

You can delete your account in the App: Settings → Signed In → Delete Account, then confirm with your password. This permanently deletes your account and everything in Cloud Backup (profile, scan history, digital card, and templates). Data on your phone stays until you delete it or uninstall the App. Deleting your account does not cancel a subscription; manage that in your App Store or Google Play settings. You can also email contactus@aishayy.com from the email address linked to your account and we'll delete it for you. Purchase records held by RevenueCat, Apple, and Google are deleted on request under their own policies.

The App is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at contactus@aishayy.com and we will delete it promptly.

Your information may be processed in the United States and other countries where our service providers operate, which may have different data protection laws than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

We may update this Privacy Policy from time to time. Material changes will be communicated through the App or our website, and the "Last updated" date at the top of this page will always reflect the current version.

Questions about this policy? Email us at contactus@aishayy.com. We aim to respond within one business day.