Privacy Policy

Where it comes from

• Typed in by a user. Someone added you to their address book, the same way they would in any contacts app.
• Imported from their phone. A user chose to import contacts from their device. They select what to import; nothing is uploaded silently, and the app says what leaves the phone before it asks.
• Sent to us by you. Someone sent you a link asking for your current details and you filled it in. What you entered, and which groups of it you agreed to share, are kept so that returning to the same link lets you change or withdraw it.

Our lawful basis

For contact details a user typed or imported, we rely on legitimate interests (UK/EU GDPR Article 6(1)(f)): people have kept address books for as long as there have been addresses, and a service that syncs one cannot function without holding what is in it. We have weighed that against your interests and concluded it is proportionate because the data is ordinary contact information you have already given to the person holding it, it is visible only to that person, it is never sold, never used to build advertising profiles, and never used to contact you.

For details you sent us yourself through a refresh link, the basis is your consent, given field group by field group at the moment you sent them, and withdrawable from the same link at any time.

If you disagree with our assessment, you have the right to object, and the erasure route below is the fastest way to act on it.

We never message you out of the blue

Cardmunk does not email or notify anyone because a user added them to their address book. When somebody asks you to update your details, the request reaches you through them — their own message, from their own phone. This is a property of how the product is built rather than a setting: there is no code path that sends an unsolicited message to a non-user. The one exception is a mail you ask for yourself, such as the erasure link below.

What the requester sees

Only what you chose. The page you fill in lists each group of fields — work, personal, social, dates — and what it contains in plain words, and you decide which of them that person may see. Your name and organisation are always visible to them, because they already had you in their address book before they asked. Nobody else sees any of it: a refresh link is between you and the person who sent it.

How long we keep it

A contact record lasts as long as the user keeps it, the same as any entry in any address book. A refresh link expires after 30 days and can be revoked before that by whoever sent it. What you sent through one persists so that returning to the link lets you edit or withdraw it — and if you later sign up with the same email address, it becomes your own profile rather than being typed twice.