My Cards is operated by My Cards. This policy explains what we collect when you use My Cards, why, and the choices you have. We follow Egypt's Personal Data Protection Law (Law No. 151 of 2020) and the principles of the EU GDPR.
1. What we collect
- Your account: name, email, password (stored only as a secure hash), language, plan and settings. If you turn on two-step sign-in, an encrypted authenticator key.
- Your cards: everything you put on a card (photo, title, company, phone numbers, links…). Cards are public pages by design: anyone with the link or QR code can see them.
- People you save: contacts, meetings, notes, tags and photos of paper business cards you capture. You decide what to save; we store it privately for you.
- Leads: details visitors choose to send you through your card's contact form.
- Card analytics: views, scans, taps and clicks with the device type, browser, source (QR, NFC, link) and referring website. We do not store visitors' IP addresses: we keep only a one-way code to count unique visitors.
- Payments: plan, amount, invoice and the payment reference. Card numbers and wallet details are handled by our payment providers (Paymob, Stripe) and never reach our servers.
- Notifications: if you allow notifications, your browser's push subscription.
2. Why we use it
- To run the service you signed up for: publishing your cards, saving your contacts, sending reminders and notifications (contract).
- To take payments and keep invoices (contract and legal obligation).
- To keep accounts safe, prevent abuse and fix problems (legitimate interest).
- To understand which features help, using aggregated statistics (legitimate interest).
- To send product emails you can switch off in Settings (consent).
We never sell your data and never use the contacts you save to market to them.
3. AI features
When you scan a paper card or ask for a follow-up message, the photo or text is sent to an AI provider to read or write it. The provider receives only what that task needs (the photo, or the meeting notes and names) and returns the result. You can always type details by hand instead.
4. Who we share it with
- Service providers that help us run My Cards: hosting, email delivery, payment providers, AI providers and, when you add a card to your phone's wallet, Apple or Google.
- People you share with: your public card, and your card details when you exchange cards with another member.
- Your team: if you join a company team, its owner and admins can see your team cards and their statistics.
- Authorities, only when the law requires it.
5. How long we keep it
We keep your data while your account is open. When you delete your account, your cards, contacts, meetings and photos are deleted immediately; copies disappear from our backups within 14 days. Invoices are kept, without a link to your account, for as long as tax law requires.
6. Your rights
- Access and copy: Settings → Your data → Download my data (one JSON file).
- Correct: edit your profile, cards and contacts at any time.
- Delete: Settings → Your data → Delete my account.
- Object or ask a question: write to support@tps-egy.com. We answer within 30 days.
7. Security
Connections are encrypted (HTTPS), passwords are hashed, keys and secrets are encrypted at rest, photos of paper cards are stored privately, and you can protect your account with two-step sign-in. We back up data every day.
8. Cookies
We use only the cookies needed to keep you signed in, protect forms and remember your language, plus a first-visit cookie that credits the person or card that invited you. We do not use advertising cookies.
9. Children
My Cards is a professional tool and is not meant for children under 16.
10. Changes
If we change this policy in a meaningful way, we will tell you by email or in the app before the change applies.