plugdPrivacy Policy
The short version
- Plugd has no account system and no Plugd servers that receive your cards, photos, notes or contacts.
- Everything you scan is stored on your device. Deleting the app deletes it.
- To read a card, the app sends its photos and your voice note directly to the AI provider you choose (Google, OpenAI, Anthropic or OpenRouter), using your own API key. We never see that traffic.
- The app contains no ads, no analytics and no tracking. We do not sell or share personal data.
- Who we are
- Data the app handles
- AI providers
- Permissions
- Sharing
- People on the cards
- Retention & deletion
- Your rights
- This website
- Contact
1. Who we are
Plugd is provided by RepliantAI ("we", "us"). This policy explains what happens to information when you use the Plugd mobile app (the "App") and the website at plugd.repliantai.com (the "Site"). If you have a question, write to vidya@repliantai.com.
2. Data the App handles
The App works on your device. The table below lists what it handles and where that data is kept.
| Data | Why | Where it is kept |
|---|---|---|
| Photos of business cards (front and back) | To read contact details and show you the card | On your device; sent to your chosen AI provider to be read |
| Voice notes you record | To save what you talked about with each contact | On your device; sent to your chosen AI provider to be transcribed |
| Contact details read from cards, QR codes or NFC tags (name, job title, company, email, phone, website, LinkedIn, address) | To build your lead list | On your device only |
| Your own organisation: event names, tags, Hot/Warm/Cold labels, follow-up flags, edits | To organise your leads | On your device only |
| Settings, including the AI provider, model and API keys you enter, and your preferred camera | So the App remembers your choices | On your device only |
What we do not collect. We do not receive any of the data above. The App has no user accounts, no advertising, no analytics or crash-reporting SDKs, and does not collect your location, device identifiers, contacts list or usage statistics.
3. AI providers that read your cards
Plugd uses a third-party AI model to read the text on card photos and to transcribe voice notes. You choose the provider in Settings and add an API key from your own account with that provider. When a card is read, the App sends the card photos (and the voice note, if you recorded one) directly from your device to that provider over an encrypted connection. The request does not pass through any Plugd server.
The provider processes that data under its own terms and privacy policy, which you accepted when you created your key. Depending on your provider account settings, a provider may retain requests for a limited period, for example for abuse monitoring. Please review the policy of the provider you use:
- Google Gemini API: policies.google.com/privacy and the Gemini API Additional Terms
- OpenAI: openai.com/policies/privacy-policy
- Anthropic: anthropic.com/legal/privacy
- OpenRouter: openrouter.ai/privacy
If you do not add a key, the App still saves card photos and notes on your device, but cannot read them.
4. Device permissions
- Camera: to photograph business cards and scan QR codes. Required for scanning.
- Microphone: to record an optional voice note with a card. You can decline and still scan.
- NFC: to read NFC business cards and contact tags when you choose NFC mode.
You can turn these off at any time in your phone's settings.
5. When data leaves your device
Apart from the AI request described in section 3, data leaves your device only when you act:
- Export: when you export to Excel, CSV or contacts (.vcf), the file is handed to your phone's share sheet and goes wherever you send it.
- Save contact, Call, Email, WhatsApp, LinkedIn, Website: these open your phone's own apps with the contact's details filled in.
We do not sell, rent or share personal data with anyone, and we do not use it for advertising.
6. People whose cards you scan
Business cards contain personal data about other people. When you scan a card, you decide what to collect and how to use it, and you are responsible for doing so lawfully, for example by following up only in ways the person would reasonably expect and by respecting anti-spam and marketing laws where you are. Because this data never reaches us, we cannot access, correct or delete it; a person who wants their details removed should ask the user who scanned their card.
7. Retention and deletion
- Data stays on your device until you delete it. Remove a single contact with Remove on that contact.
- Uninstalling the App deletes all of its data from your device, including photos, notes and API keys. Export anything you want to keep first.
- Your phone's own backup (iCloud or Google) may include app data if you have device backups turned on; that is managed by Apple or Google under your backup settings.
- We hold no copy, so there is nothing for us to delete on our side. Step-by-step instructions are on our data deletion page.
8. Security
Data is stored in the App's private storage, protected by your device's security and encryption. Requests to AI providers use HTTPS. Your API keys are stored only on your device and are sent only to the provider they belong to. Keep your phone locked with a passcode, since anyone with access to your unlocked phone can open the App.
9. Children
Plugd is a business tool and is not directed at children. It is not intended for anyone under 16 (or the minimum age of digital consent where you live), and we do not knowingly process children's data.
10. Your rights
Depending on where you live, laws such as the EU and UK GDPR, India's Digital Personal Data Protection Act 2023, and the California Consumer Privacy Act give you rights to access, correct, delete or port your personal data, to object to or restrict processing, and to complain to a data protection authority. Because the App keeps your data on your device, you can exercise most of these rights directly: view and edit everything in the App, export it, or delete it. For data processed by your AI provider, contact that provider. For anything else, email vidya@repliantai.com; we will reply within 30 days.
We do not sell or "share" personal information as those terms are defined under California law, and we do not use automated decision-making that has legal or similarly significant effects on you.
11. This website
The Site has no sign-up, no analytics, no advertising and sets no cookies. Like any website, the server that hosts it may briefly log technical data such as IP address and browser type to deliver pages and keep them secure. The Site loads fonts from Google Fonts, which means your browser connects to Google's servers and Google receives your IP address; see Google Fonts privacy. Links to the App Store and Google Play take you to sites run by Apple and Google under their own policies.
12. Changes to this policy
If we change how Plugd handles data, we will update this page and the effective date above. If a change is significant, such as introducing accounts, cloud sync or analytics, we will tell you in the App before it applies.
13. Contact
RepliantAI
Email: vidya@repliantai.com