Privacy Policy

1. What we collect and why

Your email address, to identify your account and sign you in with a one-time code.

Your first and last name, if you choose to add them, to personalise the app and the {{my_name}} variable in your message templates.

The contact details you save: names, phone numbers, emails, companies, titles, socials, addresses, tags and notes. Typed by you, scanned from a card, imported from a file, or imported from your phone’s address book with your permission. This is the core of the app: storing your own rolodex.

Card photos you scan, stored privately so you can see the original. A copy is sent transiently to our AI provider to read the text.

Reminders, follow-up history, templates and any template attachments you add.

Payment records (order id, amount, status) after you pay. We never see or store your card number, UPI PIN or banking credentials; payment happens entirely on Cashfree’s own page.

Anonymous usage analytics, only if enabled. Identified by a one-way hashed id and limited to counts and timings. Never names, emails, phone numbers, note text or search queries. Turn it off in Profile → Settings.

2. What we deliberately do not do

We do not read your device’s contacts unless you explicitly start an import.

We do not read your messages, track your location, or show ads.

We never send a WhatsApp message or email on your behalf. The app opens your messaging app with a draft; you press send.

We do not sell or rent personal data to anyone, ever.

3. Checking whether an email can receive mail

When you scan or type an email address, the app asks public DNS whether that domain accepts mail, so a card misread as “yah00.com” is caught before you waste a follow-up.

Only the domain is sent. “priya@acme.com” leaves your device as “acme.com”. The person’s address itself is never transmitted, and we never contact the address to test it.

4. The people on the cards

When you save someone’s card, you are the one deciding to keep their details, and you are responsible for having a legitimate reason to do so, normally because they handed you the card.

We process that information only to provide the app to you. We do not build a profile of them, market to them, or share their details with anyone else.

If someone asks you to delete their details, you can delete the contact in the app; it is removed from our systems on the schedule in section 6.

5. Who else processes your data

Supabase: database, authentication, file storage and server functions.

Google (Gemini): reads the text on a scanned card. The image is sent for processing and is not used to train their models under the API terms we use.

Cashfree: payment processing, if you upgrade. They receive what is needed to take the payment; we receive only the result.

Cloudflare public DNS: receives email domains only, as described in section 3.

Each of these acts on our instructions for these specific purposes.

6. Keeping and deleting data

Your data stays while your account exists. Deleted contacts sit in Trash for 30 days so you can undo, then are removed.

Deleting your account from Profile → Settings erases your contacts, reminders, templates, card images and attachments. Payment records are kept only as long as tax and accounting law requires.

One narrow exception, so the free tier cannot be reset by deleting and re-registering: we keep a one-way hash of your email address alongside the number of scans used this month. It holds no email, name or contact data, it expires at the end of that month, and if you sign up again within it your remaining free allowance simply continues where it left off.

You can export every contact to an Excel file at any time from Profile → Settings.

7. Security

Traffic is encrypted in transit. Card images and attachments live in private storage that only your account can read.

On phones, your sign-in session is encrypted with a key held in the device keystore.

Database rules restrict every row to its owner, and the app additionally filters every query by your user id, so a single misconfiguration cannot expose another account’s data.

No system is perfectly secure, and we do not claim otherwise.

8. Your rights

You can access, correct, export and delete your data yourself, in the app, without asking us.

Under India’s Digital Personal Data Protection Act, 2023 you may also contact us to exercise your rights, nominate someone to act for you, or complain to the Data Protection Board.

Write to us at the address in section 11.

9. The website

If you give us your email address on www.zamprq.com to hear about the launch, we store that address, which page you gave it on, and the fact that you ticked the consent box. Nothing else. We send you one confirmation email so you know it worked.

We use it once: to tell you when Networthy is available. We do not add it to a newsletter, and we do not pass it to anyone.

The website sets no cookies at all, and stores nothing in your browser. There is no analytics, no advertising and no third-party script on any page, so there is nothing to ask your consent for and no cookie banner to dismiss. If that ever changes we will ask first, and say so here.

Ask us at support@zamprq.com and we will delete it. You do not need an account, and you do not need to explain why.

10. Children

Networthy is not intended for anyone under 18, and we do not knowingly collect their data.

11. Contact

Questions, requests or complaints: email support@zamprq.com. We aim to respond within 30 days.

Zamprq Innovations Pvt. Ltd., India. The same policy is published at https://www.zamprq.com/privacy

If we make a material change to this policy, we will tell you in the app before it takes effect.