Privacy Policy
Last updated: 11 November 2026
VC2C is provided by Aravir Technologies Private Limited (CIN U62011AP2026PTC126177), 2A, Yashoda Homes, ISKCON City, Nellore, Andhra Pradesh, India 524003. This policy explains what VC2C does with the information on visiting cards and in your account, why, how long it is kept, and the choices you have. Using VC2C is also covered by our Terms of Use.
Without an Account
You can use VC2C without signing in, and then we receive none of your cards. Card images, recognised text and your notes stay on your device. Text is recognised on your device, and nothing is sent to our servers. Cards aren't sent anywhere unless you sign in or share them. Data is kept in the app's private storage, is not separately encrypted by VC2C, and is left out of phone backups. Protect it with your phone's screen lock or VC2C's App Lock. If you lose your phone or remove the app without syncing or a backup file, your cards can't be recovered.
A backup file is yours to keep. It is saved wherever you choose, such as Files or a drive, and we can't see or recover it. It isn't encrypted, so anyone who gets it can read your cards.
What We Collect When You Sign In, and Why
Sign-in and sync are optional. If you sign in, we store the following, only to sign you in, keep your cards in step across your devices, and keep the service secure:
- Your email address, to send sign-in codes and notices about your account.
- An account ID we create, to keep your cards together.
- Your cards: names, job titles, companies, phone numbers, email addresses, websites and addresses, the images of the cards, and all the text recognised from them.
- What you add to cards: notes, tags, and where you met.
- Contacts you import from a contact or spreadsheet file. They become cards and are treated the same way.
- Security records: sign-in attempts and code requests, with the network address and time.
We do not sell your information, use it for advertising, or track you across other apps and websites.
Kept on Your Device Only
- Reminders are set by your phone and are not sent to us. VC2C asks to show notifications only when you set one.
- App Lock uses your phone's fingerprint, face or screen lock. VC2C never sees your fingerprint or face.
- QR codes on cards are read on your device.
- Your follow-up message and event name stay in the app's settings and are not synced.
Camera, Photos and Contacts
The camera is used to scan cards. Photos are read only when you choose one. VC2C does not read your phone's address book. To save a contact, it opens your phone's own New Contact screen, and you decide whether to save. Importing reads only the file you pick.
Who Else Handles Data
- Our email provider receives your email address to deliver sign-in codes and account notices.
- Our hosting provider runs the server that stores synced data. Off-site backups are encrypted and kept in cloud storage.
- Google ML Kit (Android only) reads card text on your device. Google's scanner component may download once. Google says ML Kit may send it technical data, such as device and app information, performance measurements and a per-installation identifier, to keep the feature working. Card contents and images are not part of this.
- Apple Vision (iPhone) reads card text on your device. Nothing is sent.
These providers work only for us, under our instructions.
How Long We Keep Data
- Synced cards stay until you delete them or your account.
- After a card is deleted, an entry holding only identifiers stays for 30 days, so your other devices can remove the card too.
- A record of deleted cards and accounts, holding only identifiers and dates, stays for about 60 days, so restoring a backup can't bring deleted data back.
- Copies in backups age out within about 30 days.
- When an account is deleted, its address is kept for up to one day, only to send the confirmation email.
- When you replace a card photo or remove a card's back, the old photo is kept on our server for up to two days, so the nightly backup stays complete, and then deleted. Photos of a deleted card or account are deleted at once.
- Sign-in records (email address, network address and time) are kept for up to 30 days, including for codes that were requested but never used.
Your Choices and Rights
- See what we hold about you: write to us, or export your cards in the app.
- Correct a card by editing it in the app. The change syncs.
- Delete a card in the app, or your whole account in the app (Settings, then Account) or here. This removes your account, synced cards, images and sign-in records from our service. Cards on your device and contacts already saved to your phone are not affected.
- Withdraw consent at any time by deleting your account. It doesn't undo what was done before.
- Nominate someone to act for you if you die or can't act: write to us from your account email with their name and email.
- Complain to our Grievance Officer below and, if you are not satisfied, to the Data Protection Board of India.
Please write from your account email so we can confirm it is you.
People on Your Cards
Visiting cards hold information about the people who gave them to you. Keep and use it only in ways those people would reasonably expect. If your details are in someone's VC2C account and you want them removed, write to the Grievance Officer. We will pass the request on, or remove the data where the law requires it.
Children
VC2C accounts are for people aged 18 or over. If we learn that an account belongs to someone under 18, we will delete it.
Security and Breaches
Data is encrypted in transit (HTTPS), and off-site backups are encrypted. If a breach affects your data, we will tell you without delay what happened, what it may mean for you, and what you can do, and we will report it to the authorities as Indian law requires.
Grievance Officer and Contact
Chandrasekhar Reddy Allareddy, Grievance Officer
Aravir Technologies Private Limited
2A, Yashoda Homes, ISKCON City, Nellore, Andhra Pradesh, India 524003
Email: hello@aravir.in
Write about your data, your rights or any complaint about VC2C. We acknowledge complaints within 24 hours and resolve them within 15 days.
Changes
When this policy changes, the date at the top changes. For important changes, we will tell signed-in users by email or in the app.