Privacy Policy

Last updated: March 7, 2026  |  Effective date: March 7, 2026

1. Who We Are

This Privacy Policy applies to all products, services, mobile applications (iOS and Android), web applications, SaaS platforms, websites, and related offerings (collectively, “Services“) provided by KRAFTPIXEL DIGITAL SOLUTIONS PRIVATE LIMITED and its consumer-facing brand KraftPixel Labs (collectively “KraftPixel”, “we”, “our”, or “us”), a company incorporated under the laws of India, with its principal place of business in India.

Apps and products published under the KraftPixel Labs brand — including but not limited to Card Action and any future applications — are fully covered under this policy. References to “KraftPixel” in this document include both KRAFTPIXEL DIGITAL SOLUTIONS PRIVATE LIMITED as the legal entity and KraftPixel Labs as the consumer brand through which products are distributed.

This policy governs how we collect, use, store, share, and protect personal data across all our current and future products, platforms, and business activities — including mobile applications, SaaS tools, subscription services, client software, and websites operated under the kraftpixel.com domain or any associated domain or application.

By accessing or using any of our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration details: name, email address, phone number, date of birth, and password.
• Billing and payment information: processed securely through third-party payment providers (e.g., Apple Pay, Google Pay, Stripe, Razorpay). We do not store full card numbers on our servers.
• Profile information, preferences, and settings you configure within our apps.
• Content you submit, upload, or generate while using our Services (e.g., scanned business card data, contact information, images, messages, templates).
• Communications you send us, including support requests and feedback.
• Identity or address verification documents where required by law or to enable specific features.

2.2 Information Collected Automatically

• Device information: device model, OS version, unique device identifiers, hardware specifications.
• App usage data: features accessed, actions taken, session duration, crash logs, and error reports.
• Log data: IP address, browser type, referring URLs, and timestamps (for web-based Services).
• Location data: only if you explicitly grant permission; used solely for features that require it.
• Camera and microphone data: accessed on-device only when you actively use features that require them (e.g., scanning, recording). No audio or video is transmitted to our servers unless you explicitly initiate such a feature.
• Contact data: accessed only with your explicit permission and used solely to fulfil the feature you requested (e.g., saving a scanned contact). We do not upload your contact list to our servers.
• Purchase and subscription data: entitlement status, subscription tier, trial usage, and transaction history managed through app store platforms (Apple App Store, Google Play) and our subscription management provider (RevenueCat).

2.3 Information from Third Parties

• Authentication providers (e.g., Apple Sign-In, Google Sign-In) if you choose to use them.
• Analytics and crash reporting providers (e.g., Firebase, Sentry).
• Payment and subscription management platforms (e.g., RevenueCat, Stripe, Razorpay).
• Advertising and attribution platforms, subject to your consent and platform privacy settings.

2.4 Sensitive Information

We may collect sensitive personal data (such as biometric data for facial features used in selfie or profile photo features) only with your explicit consent and only to the extent necessary to provide the specific feature. You may withdraw this consent at any time, which will disable the associated feature.

3. How We Use Your Information

• To provide, operate, maintain, and improve our Services.
• To process subscriptions, in-app purchases, and manage your account entitlements.
• To personalise your experience and deliver features you request.
• To communicate with you about your account, updates, security alerts, and support.
• To send promotional communications — only with your consent and with the ability to opt out at any time.
• To detect, prevent, and respond to fraud, security incidents, abuse, and violations of our Terms of Use.
• To comply with applicable laws, regulations, and legal obligations.
• To conduct analytics, research, and product development in aggregate or anonymised form.
• To enforce our agreements, policies, and rights.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

4. Legal Basis for Processing (GDPR / International Users)

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with equivalent data protection laws, we process personal data under the following legal bases:

• Contractual necessity: to fulfil our agreement with you (e.g., delivering the Service you paid for).
• Legitimate interests: to operate, improve, and secure our Services, provided these interests are not overridden by your rights.
• Consent: for optional features such as marketing communications, location access, camera/microphone access, and contact access.
• Legal obligation: to comply with applicable laws and regulatory requirements.

5. Sharing of Information

We may share your personal data in the following circumstances:

• Group entities and affiliates: including between KRAFTPIXEL DIGITAL SOLUTIONS PRIVATE LIMITED and the KraftPixel Labs brand, for operational purposes to deliver Services.
• Service providers and processors: third-party vendors who process data on our behalf under strict data processing agreements (e.g., cloud hosting, analytics, payment processing, customer support tools). They may not use your data for their own purposes.
• App store platforms: Apple App Store and Google Play manage subscription billing and may receive data per their own privacy policies.
• Legal authorities: when required by law, court order, government request, or to protect the rights, property, or safety of KraftPixel, our users, or the public.
• Business transfers: in connection with a merger, acquisition, reorganisation, or sale of assets, your data may be transferred. We will provide notice before your data is subject to a materially different privacy policy.
• With your consent: in any other circumstance where you have given explicit permission.

6. Data Storage and International Transfers

Your personal data is primarily stored and processed in India. Some of our third-party service providers may process data in other countries, including the United States and European Union. Where data is transferred internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or equivalent mechanisms) as required by applicable law.

7. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide our Services. We also retain data as required to comply with legal obligations, resolve disputes, enforce agreements, or for legitimate business purposes such as analytics (in anonymised form).

Upon account deletion, we will delete or anonymise your personal data within a reasonable period, except where retention is required by law or necessary to resolve pending disputes or outstanding obligations.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Deletion (“right to be forgotten”): request deletion of your personal data, subject to legal retention requirements.
• Restriction: request that we limit the processing of your data in certain circumstances.
• Portability: receive your personal data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw consent: at any time, for processing based on consent, without affecting the lawfulness of prior processing.
• California residents (CCPA): you have the right to know, delete, and opt out of sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at info@kraftpixel.com. We will respond within 30 days.

9. Children’s Privacy

Our Services are not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us at info@kraftpixel.com.

10. Security

We implement commercially reasonable technical, administrative, and physical security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include encryption in transit (TLS), secure storage practices, and access controls.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

KraftPixel and KraftPixel Labs will never contact you to ask for your passwords, PINs, OTPs, or banking credentials. If you receive such a request, do not comply and report it to us and to the relevant law enforcement authority immediately.

11. Cookies and Tracking Technologies

Our web-based Services may use cookies, pixels, local storage, and similar technologies to authenticate sessions, remember preferences, analyse usage, and deliver relevant content. You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain features.

Our mobile applications may use device identifiers and third-party SDKs (e.g., analytics, crash reporting) for operational purposes. You may opt out of interest-based advertising through your device’s privacy settings (iOS: Settings → Privacy → Tracking; Android: Settings → Google → Ads).

12. In-App Purchases and Subscriptions

Our apps may offer auto-renewable subscriptions and one-time in-app purchases. Billing is managed by the applicable app store platform (Apple App Store or Google Play). We do not directly process or store your payment card information.

• Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current billing period.
• You can manage or cancel subscriptions through your device’s account settings (iOS: Settings → Apple ID → Subscriptions; Android: Google Play → Subscriptions).
• Cancellation takes effect at the end of the current paid period; no refunds are provided for partial periods unless required by applicable law.
• Free trials, where offered, convert to paid subscriptions unless cancelled before the trial ends. Free trials are available to new subscribers only.

13. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal data.

14. Limitation of Liability

To the maximum extent permitted by applicable law, KraftPixel (including KRAFTPIXEL DIGITAL SOLUTIONS PRIVATE LIMITED and KraftPixel Labs) shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of our Services or from the disclosure of your personal data by third parties beyond our reasonable control. Our total liability in connection with any data privacy matter shall not exceed the amount you paid us in the twelve (12) months preceding the event giving rise to the claim.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. For material changes, we will provide notice through our Services or by other means as required by law. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the revised policy.

16. Grievances and Contact

If you have questions, concerns, or grievances regarding this Privacy Policy or our data practices, please contact our Grievance Officer:

KRAFTPIXEL DIGITAL SOLUTIONS PRIVATE LIMITED
Trading as: KraftPixel Labs
Email: info@kraftpixel.com
Website: https://kraftpixel.com

We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days.

---

© 2026 KRAFTPIXEL DIGITAL SOLUTIONS PRIVATE LIMITED (KraftPixel Labs). All rights reserved.