Privacy Policy

Lodi, also referred to as Lodi Card Scanner, is a mobile application for capturing or importing images of business cards, extracting text, structuring contact details, and helping you save those contacts.

This policy describes how the publisher of Lodi collects, uses, stores, and shares information when you use the app and related services. Replace this publisher description with the final legal entity name before publication.

• Account data, such as your email address, authentication tokens, and session details used to sign you in.
• Contact content, such as names, companies, job titles, phone numbers, email addresses, websites, postal addresses, and notes you review or save.
• Raw OCR text extracted from business card images, which may be stored with the related contact record and shown in the app if you enable that setting.
• Business card images, including front and, where supported, back images that you capture or import and choose to save.
• Technical and operational data, such as IP address, device information, request logs, and service diagnostics processed by our backend, hosting, and API providers.
• Optional device contacts data when you explicitly choose to write a scanned contact to your device address book.

• To authenticate your account and keep your saved contacts associated with you.
• To process card images, run on-device OCR, structure contact fields, detect possible duplicates, and present drafts for your review.
• To store contacts and card images in the cloud when you save while signed in.
• To write selected contact details to your device contacts only when you choose that action.
• To operate, secure, debug, and improve the app and backend services.
• To provide optional smart parsing when a Google Gemini API key is configured.

Lodi uses Supabase for authentication, database storage, and object storage. When you are signed in and save a contact, contact fields and associated card images may be uploaded to Supabase and stored under your account.

Card images may be retrieved through access-controlled URLs or signed URLs where supported by the storage layer. Access controls are designed to keep user data scoped to the authenticated account.

Lodi uses on-device text recognition, such as Google ML Kit, to extract text and layout signals from card images. The core OCR step is intended to run on your device.

If smart parsing with Google Gemini is enabled by a user-supplied key or a deployer-controlled build-time key, Lodi may send merged OCR text and, in some workflows, card imagery or image crops to Google for processing. Google processes that data under the terms and policies that apply to the Gemini API.

• Camera permission lets you photograph business cards for scanning.
• Photos, media, or storage permission lets you import existing card images from your device gallery.
• Contacts permission is used to save selected scanned contacts into your phone address book when you explicitly choose to do so. Lodi is not designed to upload your entire address book.

• Supabase provides authentication, database storage, file storage, and related infrastructure.
• Google ML Kit provides on-device OCR capabilities.
• Google Gemini API may provide optional cloud-based smart parsing of OCR text and, in some cases, card imagery.
• Google Play may process information related to app distribution, installs, payments, or platform diagnostics according to Google's policies.

Where privacy laws such as the GDPR apply, the legal bases for processing may include performance of a contract, your consent, compliance with legal obligations, and legitimate interests such as securing, maintaining, and improving the service. Ask qualified counsel to adapt this section to the final publisher, region, and product configuration.

We keep account data, saved contacts, OCR text, and card images for as long as needed to provide the service, comply with legal obligations, resolve disputes, and maintain security. If you delete contacts or request account deletion, we will delete or anonymize associated cloud data where required and technically feasible.

Backups, logs, and provider records may persist for a limited period after deletion according to operational, security, and provider retention practices.

We use reasonable technical and organizational safeguards, including HTTPS in transit, authentication, backend access controls, and account-scoped data access. No system is perfectly secure, and you should review scanned contacts before relying on them.

Lodi is not directed to children. Do not use Lodi if you are under the minimum age required to consent to digital services in your jurisdiction.

Our service providers may process information in countries other than your own. Those countries may have privacy laws that differ from the laws where you live.

• You can review and edit parsed contact details before saving.
• You can choose whether to save a contact to your device address book.
• You can request access, correction, deletion, export, or restriction of your personal data where applicable law provides those rights.
• You can contact us through the Contact / Waitlist page until a dedicated legal contact email is published.

Use the Contact / Waitlist page for privacy requests until a dedicated legal email is published.

We may update this policy as Lodi changes. Material updates will be reflected by changing the Last updated date and, where appropriate, by providing additional notice.