My Contact Privacy Policy

Acurus is the publisher of My Contact. For any privacy question or request, contact us at contact [at] acurus.me.

Your card. The details you enter (your name, title, company, phone numbers, email, address, birthday, websites and social handles) and your choices about what is shared are stored only in the app's local storage on your device. They are never sent to us or to any server we operate.

Your photo. If you add a photo, My Contact asks for access to your camera or photo library only to take or pick it. The cropped photo is saved as a file inside the app on your device. It is never uploaded, and it is never put in any code the app shows.

Camera and photo library. The same camera and photo picker are used to add a document to the Documents wallet (see below). The camera is used only when you tap to take a photo, and the app does not record audio. On iPhone the photo picker needs no permission; the camera asks first. You can also add a PDF or other file from your phone's file picker.

Motion. While the badge is on screen with its turn setting on (it is off by default; you can turn it on in the badge settings), My Contact reads your phone's motion sensor (the accelerometer) to tell when the phone is hanging upside down or held sideways, for example on a lanyard, and turn the badge to face the room. The readings are used on the spot, are not stored, and never leave your phone. The sensor is not read at any other time, including when the badge is not showing.

No analytics or tracking. My Contact does not use analytics, advertising or crash-reporting services, and it does not track you across apps or websites.

My Contact has a locked Documents wallet for files such as an ID, a card or a PDF. You add a document by taking a photo, choosing one from your photos, or choosing a file, and you can give it a title and an expiry date. Nothing in the wallet is uploaded. It is stored only on your phone and is never sent to us or to any server.

Encrypted on your phone. Each document, and the list that holds every title and expiry date, is encrypted with AES-256-GCM before it is written to your phone's storage. The key is made on your phone when you add your first document and is kept in your phone's secure store (the iOS Keychain, or the Android Keystore). On iPhone the key is set to this device only, so a backup does not carry it to another phone.

Locked. The wallet opens only after your phone checks that it is you, with Face ID, Touch ID, your fingerprint or your phone's passcode, each time you open it and again after the app has been in the background. The check is done by your phone. My Contact never receives your face or fingerprint data. A phone with no screen lock at all cannot open the wallet.

Viewing and sharing. To show or share a document, the app has to decrypt it to a temporary copy in the app's cache. That copy is deleted when you close the document or the wallet locks. If you choose Share, the document goes to the app you pick in your phone's share sheet; from there that app's own policy applies.

Backups. On iPhone, the app's files can be included in an iCloud or computer backup. The wallet's files in a backup are encrypted, and because the key is set to this device only, it is not carried to another phone. (Your card details and photo are not part of the wallet and are not encrypted by it.) On Android, My Contact turns off Android's cloud backup for the app, so the wallet is not part of it.

The recovery key. After you add your first document, the app shows you a recovery key (a long code of letters and numbers). You can see it again from the wallet once it is unlocked. If you restore the app to a new phone and its encrypted files arrive without the key, the recovery key is the only way to open them. We do not have your key or your documents, so we cannot recover it for you or open the wallet for you. If you lose the key and the old phone, the documents cannot be opened by anyone, including you, and the only option left is to start the wallet again, which deletes what is in it. Keep the key somewhere safe that is not the same backup.

To deliver fixes without waiting for a store release, My Contact checks for an update each time it opens, and when you return to it after a while. The check goes to Expo (Expo Application Services, run by 650 Industries, Inc.). It includes your platform (iOS or Android), the app's version identifier, the update channel, the ID of the update currently installed, and a random installation ID that the app generates the first time it runs and keeps on your device. If the app failed to start the last time, the next check also includes a short technical error message. Like any server, Expo also sees your IP address when it is contacted.

The installation ID is not your name, your contact details, your advertising ID or an account, and it is not linked to any of them. The app uses it only to deliver updates. Nothing you enter in your card, including your photo, is part of the check. Expo handles this information under its own privacy policy.

My Contact shows codes that other people scan with their own phones. The contact code contains only the details you have chosen to include, and a scan hands those details directly to the person scanning; nothing passes through us. The WhatsApp code and each link's code contain only that number, username or link. What the person who scans does with your details is up to them, so share them with people you trust.

When you open a chat or a link from the app (for example, sending a WhatsApp message or testing a link), My Contact hands it to WhatsApp, your browser or the app concerned, and that service's own privacy policy applies from there.

No one. Because My Contact has no account or analytics and your card never leaves your phone, we never receive your information, so we have nothing to sell or share. The only other party involved is Expo, which receives the update check described above.

You can edit or clear any detail at any time in the app, and choose which details go into your contact code. You can delete any document from the wallet. You can revoke camera or photo library access in your device settings; the app still works without a photo. Deleting the app deletes the files it stored on your device, including your documents and the installation ID used for updates. On iPhone, the wallet's key may stay in the Keychain after the app is deleted; without the files it opens nothing, and a backup made earlier remains under your control in iCloud or on your computer.

My Contact is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

Questions about this policy can be sent to contact [at] acurus.me.