Privacy Policy

Last updated: June 12, 2026

This Privacy Policy explains how Kardo ("we", "us") collects, uses, and protects your information when you use our digital calling card service (the "Service"). By using the Service, you agree to this policy.

1. Information we collect

Account information: your email address and a hashed (encrypted) password.
Card content: information you choose to add — name, title, bio, phone, email, profile photo, colours, and social/website links.
Payment information: the plan you buy, amount, and a payment reference. Online payments are handled by our provider (PayMongo); we never receive or store your GCash login or full card numbers.
Usage data: basic technical data such as your card's view count, and standard server logs (e.g. IP address, browser) used for security and operation.

2. How we use your information

To create and display your digital card;
To operate, maintain, and secure the Service;
To process payments and manage your subscription;
To contact you about your account or payments;
To comply with legal obligations.

3. Your card is public

A published card is intended to be shared and is publicly viewable by anyone with its link. Do not put information on your card that you do not want to be public. Visitors can save the contact details you publish to their own devices.

4. Cookies and sessions

We use a session cookie to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising or third-party tracking cookies.

5. Third-party services

We rely on a few trusted providers to run the Service:

PayMongo — payment processing (GCash). Their handling of payment data is governed by their own privacy policy.
Our web host — stores the Service's data and files.
Google Fonts — used to render fonts.

6. Data retention

We keep your information while your account is active. If you delete your account, we delete your card and related personal data, except records we are required to keep (such as payment records for tax or legal compliance).

7. Security

Passwords are stored hashed, forms are protected against CSRF, and uploads are restricted. No system is perfectly secure, but we take reasonable measures to protect your data.

8. Your rights

You may access and update your information from your dashboard at any time, and you may request deletion of your account and personal data by contacting us. Consistent with the Philippine Data Privacy Act of 2012, you have rights to access, correct, and erase your personal data.

9. Children

The Service is not intended for children under 13 (or the age of digital consent in your country). We do not knowingly collect data from them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

For privacy questions or data requests, email info@kardo.me.