Privacy policy
1. What Kado is
Kado is a contact-management app: you scan business cards, organize the people you meet, and set follow-up reminders. This policy explains what data the app handles, where it goes, and the choices you have. We do not sell personal data, and the app contains no advertising or analytics trackers.
2. Data we handle
- Account. When you sign in with Apple, Google, or LINE we receive an account identifier and your email address when the provider supplies one (LINE accounts may not include an email — we ask for one in the app). We also store your app settings (language, plan).
- Contacts you add. The information on business cards you scan or type: names, companies, titles, phone numbers, email addresses, postal addresses, LINE IDs, websites — plus the tags, stages, follow-up dates, and notes you attach, and the card photos you scan.
- Payments. Subscriptions are processed by Apple. We receive your subscription status only — never card or bank details.
- Diagnostics. Error reports and a small sample of performance measurements are sent to Sentry. We configure it not to collect personal data, remove common personal fields (emails, phone numbers, tokens, auth headers) from report metadata, and keep only an opaque account identifier — though the text of an error can occasionally include information you entered.
Business cards contain other people's information. You add it as the keeper of your own address book, and we store it solely to provide the service to you.
3. Card scanning
Cloud scanning (default): the card photo is sent to Google Cloud (text recognition) and the recognized text to Anthropic (structured extraction) through our servers, solely to produce your contact entry.
On-device mode (supported iPhones): recognition and extraction run entirely on your phone, and contacts are stored in your personal iCloud. In this mode your contacts and card photos never pass through or get stored on Kado's servers.
4. LINE integration (optional)
If you connect LINE, we link your LINE user ID to your account so that cards you send to Kado's LINE official account are scanned into your contacts through the same pipeline described above.
5. Google Calendar sync (optional)
If you connect Google Calendar, Kado creates a dedicated "Kado Follow-ups" calendar in your Google account and keeps it in step with your follow-up dates.
- What leaves Kado: the contact's name, the follow-up date and time, and a link back to the contact in Kado. That link contains an opaque contact identifier. Notes, phone numbers, emails, and every other detail stay in Kado — they are never sent to Google.
- Changes you make in Google Calendar are never applied to your Kado contacts silently — Kado asks you to review them first.
- Kado's use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.
If you disconnect, you choose whether the calendar is kept (it stops updating and is renamed) or deleted. Kado retains an encrypted copy of the sync credential for at most 30 days — typically much sooner — solely to finish removing notification channels, apply your calendar decision, and revoke its own access; it is then purged. You can also revoke Kado's access at any time in your Google Account security settings.
6. Opening addresses in map apps
When you export selected contacts as a route, their postal addresses and the visit order you arranged are embedded in a Google Maps web address and handed to Google when it opens. On the web (or when the Maps app is not installed), that web address also appears in your browser history like any visited page. This happens only when you tap Export, only for the contacts you selected, and Google processes it under Google's own privacy policy.
Opening a single contact's address in Apple Maps or Google Maps likewise sends that one address to the map provider you chose.
7. Share links
Creating a share link makes that contact card viewable by anyone who has the link, until the link expires or you revoke it. Share nothing you would not forward.
8. Service providers
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, file storage |
| Zeabur | App and share-link hosting (Osaka, Japan) |
| Google Cloud | Scan text recognition; Google Maps when you export or open addresses; Google Calendar follow-up sync, if you connect it |
| Anthropic | Scan text extraction |
| Apple | Sign-in, subscriptions, push notifications; iCloud in on-device mode |
| LINE | Sign-in and card intake, if you connect it |
| Sentry | Crash reports (personal identifiers removed) |
9. Retention and deletion
- Delete any contact at any time; deletion is immediate.
- Delete your account in Settings — this removes your account and contacts from our systems. Step-by-step instructions, including what to do if you can no longer sign in.
- If a subscription ends, your contacts remain; paid-plan customizations beyond the free plan (such as custom tags and stages) are kept for 30 days (so re-subscribing restores them), then permanently deleted.
- On-device-mode data lives in your own iCloud and is governed by your Apple account.
10. Your rights
You can access and correct your data in the app, download an individual contact as a vCard file (its core card fields), and delete contacts or your entire account as described above. Privacy questions and requests: support@rippo.app.
11. Security, children, changes
Data is encrypted in transit; database access is scoped per account. Kado is a business tool and is not directed at children. If this policy changes, the new version is posted here with its effective date.