Privacy policy
Your business cards. On your device.
Updated: 27 September 2026
Controller and contact
Coolblack GmbH
Südfeldwiese 14
32107 Bad Salzuflen
Deutschland / Germany
Local processing in the app
Visitap recognizes business cards using Apple Vision on your device. Card photos, contact details, original text, notes, tasks and event assignments are stored locally in the app. We operate no cloud service for this and cannot access these contents. Optional field assignment and text editing use the local Apple Intelligence model on compatible devices. Dictation requires on-device speech recognition; if unavailable, there is no cloud fallback. Audio recordings are not saved.
Permissions and sharing
The camera is used for scanning; microphone and speech recognition are used for dictation. Photos are selected with the system picker. Contact access is requested for relevant functions. You can change permissions in iOS Settings. Data is sent to a chosen destination only when you save contacts or share it. Your contact account may sync contacts, and device backups may contain app data. Manage these copies with the respective service, whose privacy information applies.
Advertising and purchases
Visitap recommends Coolblack apps. Selection and the scan counter are managed locally. There is no advertising tracking, advertising ID analysis or analytics SDK. External links connect to the respective provider. Apple processes the optional one-time purchase and restoration through StoreKit; Visitap checks entitlement locally. The app does not send us payment data.
Storage and deletion
Delete business cards and their photos individually or all together in Visitap. Apple Contacts, exports and backups are unaffected. Temporary export files are removed on the next app launch once at least 24 hours old, and when all cards are deleted. Uninstalling removes local app storage; manage backups separately.
Operating this website
This website is hosted on our STRATO server in Germany. IP address, request time, requested address and browser information are processed to deliver and secure the site (Article 6(1)(f) GDPR, legitimate interest in secure website operation). STRATO provides hosting. Server logs are rotated daily; at most 14 archived daily files are retained. The website uses no cookies, analytics or advertising tracking. Images and styling load from our own server. Language selection uses links without cookies.
Support requests
When you contact us, we process your email address and the information you provide to reply. The legal basis is Article 6(1)(b) GDPR for contract-related inquiries, otherwise our legitimate interest in answering your request under Article 6(1)(f) GDPR. Providing information is voluntary; without necessary details we cannot reply. We delete information when no longer needed unless statutory retention duties apply. Your chosen email provider processes data under its own terms. Please do not send unnecessary third-party card details or confidential notes.
Your rights
Subject to legal requirements, you may request access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing is based on consent, you may withdraw it for the future. Contact us using the details above. You may complain to a supervisory authority, such as the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (ldi.nrw.de). We cannot access local card data; you can edit, export or delete it in the app.
No automated decisions
We do not use this data for solely automated decisions producing legal or similarly significant effects, or related profiling. Optional local AI assists with editing; you control the results.