DuckCard Privacy Policy

Last updated: July 10, 2026

DuckCard is an AI business card scanner and relationship workspace available at https://duckcard.app/. This policy describes the personal information DuckCard processes, why it is processed, and how users can request access, correction, or deletion.

Information DuckCard processes

  • Account data, such as your Google sign-in identifier, display name, email address, and user ID.
  • Images you choose to capture or upload, including business card images, profile screenshots, or resume images. These source images may incidentally contain printed street or postal addresses and other details visible in the original document, which are processed as part of the image you submitted.
  • Contact records you create, including names, companies, roles, email addresses, phone numbers, notes, tags, events, and follow-up context.
  • Contact-profile fields you explicitly choose to make available through a revocable DuckCard sharing link, QR code, or physical NFC tag.
  • If you opt in to exact-ID discovery, the DuckCard ID you choose and the approved fields in your contact profile. DuckCard does not provide public name or email search.
  • Exchange records needed to prevent duplicate imports and record that an authenticated user accepted a contact exchange.
  • Profile reports retain a sanitized snapshot of the reported profile fields (which may include the displayed name, email, phone, and URLs) as evidence for that specific revision, together with hashed participant and sharing-link identifiers. Account blocks use hashed identifiers for moderation and exchange safety.
  • AI-generated outputs, such as extracted card details, relationship notes, follow-up drafts, and workflow preferences saved to your account.
  • Operational and Firebase Analytics data, such as approximate location, device and browser identifiers or characteristics, app interactions, diagnostics, security logs, usage counts, and abuse-prevention signals.

How DuckCard uses information

  • To authenticate your account and provide your private DuckCard workspace.
  • To extract contact information from images you submit and help organize follow-up work.
  • To show approved profile fields to a holder of an active sharing link and, only after explicit acceptance, save a reciprocal exchange.
  • To process reports, enforce blocks in either direction, investigate misuse, and apply the Community and User Content Policy.
  • To generate drafts, summaries, reminders, and relationship context at your request.
  • To maintain security, prevent abuse, troubleshoot issues, and improve reliability and performance.

Service providers

DuckCard uses service providers needed to operate the product, such as hosting, authentication, storage, database, analytics, diagnostics, and AI processing providers. These providers process information only as needed to provide their services to DuckCard.

Sale, sharing, and advertising

DuckCard does not sell personal information. DuckCard does not use contact records for cross-context behavioral advertising. If this changes, this policy will be updated before the change is applied.

DuckCard uses Firebase Analytics to measure product usage and reliability. Analytics processing is separate from the contact-profile sharing consent shown in the app; that checkbox applies only to NFC, QR, and link exchange. You can use available browser or device privacy controls to limit analytics collection.

NFC, QR, and contact sharing

NFC tags and QR codes created by DuckCard contain an opaque, revocable DuckCard HTTPS link rather than your name, email address, phone number, or Firebase user ID. Google account details may be offered as editable profile defaults, but DuckCard does not activate contact sharing until you review the contact profile and confirm sharing consent. A recipient sees a preview and must explicitly accept before DuckCard adds the contact. A reciprocal exchange adds each consenting user's approved profile to the other user's private workspace and performs duplicate checks before creating records.

Revoking a sharing link prevents future previews and exchanges through that link. It cannot remotely remove a contact record that another user previously accepted; that recipient controls records already stored in their own workspace.

Exact DuckCard ID discovery

Exact-ID discovery is off by default. If you enable it, another signed-in user who already knows your exact DuckCard ID can preview your approved contact profile and save a copy to their private workspace. This is a one-way save and does not add the searching user to your contacts. Searches are rate limited, respect account blocks, and do not support discovery by name or email. You can turn discovery off or change your ID from your contact profile; turning it off prevents future results but cannot remove copies another user already saved.

Security and retention

DuckCard uses HTTPS and account-based access controls. Workspace data is retained while your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and maintain security. When data is no longer needed for those purposes, it is deleted or de-identified according to the service's operational retention practices.

Your privacy choices

You may request access, correction, export, or deletion of your DuckCard account and workspace data. To start a request, sign in to DuckCard, open Feedback, choose "Privacy / Security Concern", and describe the request from the Google account connected to your workspace. You can also visit DuckCard account deletion for deletion instructions.

You can also edit your contact profile or revoke its active sharing link in DuckCard at any time without deleting your account. On a shared-profile preview, you can report the profile or block its owner; an immediate unblock action is available from that preview. Blocking stops a new reciprocal exchange but does not delete contacts that were already accepted.

State privacy rights

Depending on where you live, state privacy laws may provide rights to know/access, correct, delete, obtain a portable copy, opt out of certain processing, or appeal a decision about your request. DuckCard will review verified requests consistent with applicable law.

Children

DuckCard is intended for professional networking and is not directed to children. Do not use DuckCard if you are not old enough to consent to the processing of your personal information in your jurisdiction.

Changes

DuckCard may update this policy when the product, service providers, or legal requirements change. The updated date above shows when the current version was published.

DuckCard 隱私權政策

最後更新：2026 年 7 月 10 日

DuckCard 是位於 https://duckcard.app/ 的 AI 名片掃描與人脈管理工作區。本政策說明 DuckCard 處理哪些個人資訊、處理目的， 以及使用者如何要求存取、更正或刪除資料。

DuckCard 處理的資訊

  • 帳戶資料，例如 Google 登入識別碼、顯示名稱、電子郵件地址與使用者 ID。
  • 你選擇拍攝或上傳的圖片，包括名片、個人檔案截圖或履歷圖片。這些來源圖片可能附帶原始文件中可見的街道、郵寄地址或其他資訊，並會作為你提交圖片的一部分進行處理。
  • 你建立的聯絡人紀錄，包括姓名、公司、職稱、電子郵件、電話、備註、標籤、活動與跟進脈絡。
  • 你明確選擇透過可撤銷的 DuckCard 分享連結、QR Code 或實體 NFC 標籤提供的聯絡輪廓欄位。
  • 若你主動開啟精確 ID 搜尋，則包括你選擇的 DuckCard ID 與已核准的聯絡輪廓欄位。DuckCard 不提供公開姓名或電子郵件搜尋。
  • 用於防止重複匯入，以及記錄已驗證使用者接受聯絡交換所需的交換紀錄。
  • 輪廓檢舉會保留遭檢舉版本的淨化欄位快照作為證據；其中可能包含顯示名稱、電子郵件、電話與網址，並搭配雜湊處理的參與者與分享連結識別碼。帳戶封鎖也使用雜湊識別碼維護檢舉與交換安全。
  • AI 產生的內容，例如擷取的名片資料、人脈備註、跟進草稿與儲存在帳戶中的工作流程偏好。
  • 營運與 Firebase Analytics 資料，例如概略位置、裝置與瀏覽器識別碼或特徵、應用程式互動、診斷、安全紀錄、使用次數與防濫用訊號。

DuckCard 如何使用資訊

  • 驗證帳戶並提供你的私人 DuckCard 工作區。
  • 從你提交的圖片擷取聯絡資訊，協助整理後續跟進。
  • 向有效分享連結的持有人顯示你已核准的輪廓欄位，並且只在明確接受後儲存雙向交換。
  • 處理檢舉、雙向執行封鎖、調查濫用，並執行社群與使用者內容政策。
  • 依你的要求產生草稿、摘要、提醒與人脈脈絡。
  • 維護安全、防止濫用、排除問題，並改善可靠性與效能。

服務供應商

DuckCard 使用營運產品所需的服務供應商，例如託管、驗證、儲存、資料庫、分析、診斷與 AI 處理服務。 這些供應商只會在向 DuckCard 提供服務所需的範圍內處理資訊。

出售、分享與廣告

DuckCard 不出售個人資訊，也不會將聯絡人紀錄用於跨情境行為廣告。若日後改變，DuckCard 會在套用變更前更新本政策。

DuckCard 使用 Firebase Analytics 衡量產品使用情況與可靠性。分析資料處理與應用程式內的聯絡輪廓分享同意彼此獨立； 該勾選框只適用於 NFC、QR Code 與連結交換。你可以使用瀏覽器或裝置提供的隱私控制限制分析資料收集。

NFC、QR Code 與聯絡資訊分享

DuckCard 產生的 NFC 標籤與 QR Code 只包含不透明、可撤銷的 DuckCard HTTPS 連結，不直接包含姓名、 電子郵件、電話或 Firebase 使用者 ID。Google 帳戶資料可以作為可編輯的預填值；但在你檢查聯絡輪廓並確認分享同意前， DuckCard 不會啟用聯絡分享。接收者會先看到預覽，並須明確接受後 DuckCard 才會新增聯絡人。 雙向交換會把雙方同意提供的輪廓加入對方的私人工作區，並在建立紀錄前執行重複檢查。

撤銷分享連結會阻止日後透過該連結預覽或交換，但無法遠端移除其他使用者先前已接受的聯絡紀錄； 接收者可自行管理其工作區中已儲存的副本。

精確 DuckCard ID 搜尋

精確 ID 搜尋預設為關閉。開啟後，已登入且已知道你完整 DuckCard ID 的使用者，才可以預覽你核准的聯絡輪廓， 並把副本儲存到自己的私人工作區。此流程是單向儲存，不會把搜尋者加入你的聯絡人。搜尋設有次數限制、會套用帳戶封鎖， 且不支援以姓名或電子郵件探索。你可以在聯絡輪廓中關閉搜尋或變更 ID；關閉後會阻止日後搜尋結果， 但無法移除其他使用者先前已儲存的副本。

安全與保留期限

DuckCard 使用 HTTPS 與帳戶存取控制。工作區資料會在帳戶有效期間，或為提供服務、遵守法律義務、解決爭議、 防止濫用與維護安全所需期間保留。資料不再為上述目的所需時，會依服務的營運保留程序刪除或去識別化。

你的隱私選擇

你可以要求存取、更正、匯出或刪除 DuckCard 帳戶與工作區資料。若要提出要求，請登入 DuckCard、開啟「回饋」、 選擇「隱私／安全疑慮」，並使用連結至工作區的 Google 帳戶說明要求。你也可以前往 DuckCard 帳戶刪除說明。

你也可以隨時編輯聯絡輪廓或撤銷有效分享連結，而不必刪除帳戶。在共享輪廓預覽中，你可以檢舉輪廓或封鎖其擁有者， 也可以立即解除封鎖。封鎖會阻止新的雙向交換，但不會刪除先前已接受的聯絡人。

地區隱私權利

依居住地而定，當地隱私法律可能賦予你知情／存取、更正、刪除、取得可攜副本、退出特定處理， 或對請求決定提出申訴的權利。DuckCard 會依適用法律審查經驗證的請求。

兒童

DuckCard 用於專業人脈交流，並非以兒童為對象。若你尚未達到所在地法律允許你同意處理個人資訊的年齡，請勿使用 DuckCard。

政策變更

產品、服務供應商或法律要求變更時，DuckCard 可能更新本政策。上方更新日期表示目前版本的發布時間。