Privacy Policy

This Privacy Policy explains how ToolZone Labs (ToolZone,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information in connection with the CardKnow mobile application (the “App” or “Service”).

Please read this Privacy Policy carefully before using the App. By using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

This Privacy Policy should be read together with our Terms of Use. The disclosures in our Google Play listing, in-app privacy notices, and Data Safety section should be consistent with this Privacy Policy.

1. Who We Are

The App is provided by ToolZone Lab. Where required by applicable data protection laws, we may act as the data controller of the relevant personal data.

2. Information We Collect

You do not need to create an account to use the core features of the App. We collect information only as necessary to provide, maintain, improve, and protect the Service.

2.1 Information You Provide

When you use AI search, recognition, generation, or other AI-powered features, you may submit text, prompts, images, queries, or other input content. To provide these features, such content may be transmitted to our AI service providers, such as OpenAI or other API providers, for processing.

Please do not upload or submit sensitive personal information through the App, such as government ID information, financial information, health information, passwords, precise addresses, children’s information, or any other content you do not want processed.

Unless necessary to provide the Service, maintain security, troubleshoot issues, or comply with legal obligations, we do not intentionally retain your AI inputs or AI outputs on a long-term basis. Third-party AI service providers may retain certain request and response content for a limited period in accordance with their own policies for safety, abuse monitoring, and service operation.

If you contact us for customer support, feedback, or through social media, we may collect your contact information, issue description, screenshots, device information, and other information necessary to respond to your request.

2.2 Information Collected Automatically

When you use the App, we or our service providers may automatically collect the following information:

• Device information: device type, device model, manufacturer, operating system, operating system version, App version, language settings, and time zone.
• Connection and log information: IP address, mobile carrier, access time, session duration, error logs, diagnostic information, and crash data.
• Approximate location: country, region, city, or time zone inferred from your IP address or device settings. Unless separately disclosed and permitted, the App does not collect precise location data.
• Identifiers: advertising identifiers such as Android Advertising ID, app instance IDs, internal user identifiers, attribution identifiers such as AppsFlyer ID, and similar technical identifiers.
• Usage data: features and screens used, interactions, onboarding completion, trial starts, subscriptions, purchases, error events, and related timestamps.
• Purchase and subscription data: purchase status, subscription status, transaction time, product ID, purchase token, receipt validation result, and related transaction metadata. We do not collect or store your card number or full payment details.

3. How We Use Information

We may use the information we collect for the following purposes:

• To provide and maintain the core features of the App, including AI search, AI recognition, AI generation, and other in-app features.
• To process subscriptions, one-time purchases, receipt validation, purchase restoration, and access to paid features.
• To analyze App performance, fix bugs, improve stability, and optimize user experience.
• To protect security, detect fraud, prevent abuse, and troubleshoot technical issues.
• To measure installs, conversions, subscriptions, and marketing campaign performance.
• To perform advertising attribution, advertising delivery, or advertising measurement where permitted by applicable law and platform policies.
• To respond to customer support requests, feedback, and other communications.
• To comply with legal obligations, enforce our terms, and protect the rights and interests of us, our users, and third parties.

4. In-App Purchases

The App offers subscriptions and one-time purchases through Google Play. Payments are securely processed by Google Play. We do not collect or process your card number, full payment credentials, or other sensitive payment information.

We may receive purchase tokens, subscription status, product IDs, transaction times, and receipt validation results from Google Play and subscription management service providers to confirm your purchase status and provide access to paid features.

5. Third-Party Services and SDKs

We may share necessary data with third-party service providers to provide, analyze, maintain, promote, and improve the App. These service providers should process such data only as needed to provide their services, perform contractual obligations, comply with law, or as otherwise permitted by their published policies.

5.1 Hosting, Infrastructure, and Technical Services

5.2 Analytics and Attribution Services

5.3 Advertising and Marketing Partners

If a particular version of the App does not integrate or enable one of the advertising or marketing services listed above, data will not be collected or shared through that service. You may also reset or limit your advertising identifier or turn off personalized ads through your Android system settings.

5.4 AI Service Providers

We do not authorize third-party AI service providers to use your data to create user profiles for purposes unrelated to providing the Service to us. Their processing of data is also governed by their privacy policies, API policies, or data processing terms.

5.5 Subscription and Payment Management Services

6. Sale of Personal Data

We do not sell your personal data. We also do not sell personal and sensitive user data, as defined by Google Play, to third parties for monetary consideration.

In regions where applicable law may define certain advertising, attribution, or cross-app tracking activities as a “sale” or “sharing,” you may exercise applicable opt-out rights through system privacy settings, advertising identifier settings, or by contacting us.

7. Data Retention and Deletion

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Technical logs, diagnostic data, and security logs are generally retained only as long as necessary for troubleshooting, security auditing, and service operation.
• Purchase and subscription records may be retained as necessary for contract performance, financial auditing, fraud prevention, dispute resolution, and legal compliance.
• Customer support records may be retained as necessary to handle requests, improve the Service, and protect legitimate interests.
• AI request content, if processed or temporarily stored by us, is generally retained only as long as necessary to provide the feature, maintain security, troubleshoot issues, or comply with legal obligations. Retention by third-party AI service providers is governed by their own policies and data processing terms.

You may request access to, correction of, or deletion of personal data related to you by contacting support@cardsknow.com. We will process your request within the period required by applicable law. If certain data must be retained for security, fraud prevention, financial, legal, or compliance reasons, we will restrict further processing where legally appropriate.

If the App provides account creation features in the future, we will provide both in-app and web-based methods for users to request deletion of their account and associated data, and we will provide the required deletion link in Google Play Console.

8. Your Rights and Choices

Depending on the laws applicable in your region, you may have the following rights:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of personal data.
• Request restriction of or object to certain processing activities.
• Withdraw your consent where processing is based on consent.
• Request data portability.
• Lodge a complaint with a data protection authority.

You may also manage App permissions, reset or limit your advertising identifier, turn off personalized ads, clear App data, or uninstall the App through your Android system settings.

9. Security

We use reasonable technical and organizational measures to protect personal data, including encrypted transmission, access controls, logging and monitoring, permission management, and security reviews.

Although we work to protect your information, no internet or electronic storage system can be guaranteed to be completely secure. If a security incident occurs, we will take reasonable steps to investigate, mitigate its impact, and notify affected users and regulators where required by applicable law.

Please download the App only from the official Google Play Store. If you obtain the App from any unofficial source, we cannot guarantee its security, integrity, availability, or proper operation.

10. International Data Transfers

We and our service providers may process and store your information outside your country or region, including in the United States, Singapore, the European Economic Area, or other locations where servers are located. Data protection laws may differ from one jurisdiction to another.

Where required by applicable law, we will take appropriate measures to protect data transferred across borders, such as using contractual terms, data processing agreements, or other lawful transfer mechanisms.

11. Children’s Privacy

The App is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. If you are located in the European Economic Area or the United Kingdom, you must be at least 16 years old, or the lower age permitted by local law, to use the App without parental or guardian consent.

If we become aware that we have collected personal data from a child without the required consent, we will take reasonable steps to delete such information as soon as possible. If you believe that a child has provided personal data to us, please contact us at support@cardsknow.com.

12. Third-Party Links and Services

The App may contain links to third-party websites, services, or platforms. The privacy practices of third-party services are not governed by this Privacy Policy. Please review their privacy policies before using those services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the “Last Updated” date. If changes materially affect your rights or our data processing practices, we will notify you where appropriate through in-app notice, email, or other reasonable means.

14. Contact Us