1. Scope & the short version
This Privacy Policy explains how ApeXhit LLC handles information in connection with ApeXhit DBC (the "App"). The short version: ApeXhit DBC is built to store your business card data (contact details, photos, logos, theme choices) locally in your own browser/device storage. We do not operate a server-side database that stores your cards, and we do not require you to create an account.
2. Information stored on your device (not sent to us)
The following information is entered by you and stored only in your browser's local storage on your own device — it is not transmitted to or stored on ApeXhit servers as part of normal app operation:
- Card details: name, job title, company, email, phone, website, physical address, and social media links.
- Images: any profile photo and company logo you upload or crop, and any custom background/theme image you upload.
- Slogans or custom text you add to the front of a card.
- Theme selection, QR code color/icon customization, and which card is currently active.
- Backup files you export (JSON) or vCard files (.vcf) you export/import — these are generated and read directly by your browser and saved to your device's downloads/file system, not uploaded to us.
3. Information that involves a network request
A small number of features do make a network request:
- Waffle directory: the in-app app/website directory fetches a public list of live ApeXhit apps and featured businesses from apexhit.org so it can stay up to date. This request does not include your card data, photos, or contact information — it only retrieves the directory listing.
- Camera access (QR scanner): if you use the built-in QR scanner, your browser requests camera permission from your OS. Camera video is processed locally on your device to decode QR codes and is not uploaded to us or stored.
- NFC push: if you use NFC to push your card to another device, the vCard data is transmitted directly, device-to-device, over the NFC radio using your browser's Web NFC API. This transfer does not pass through our servers.
- App hosting & delivery: like any website, our hosting/CDN provider (Vercel) necessarily processes standard connection information (such as IP address and request logs) to deliver the App to your browser and to keep it running securely. We do not currently use any additional analytics, advertising, or tracking scripts inside the App beyond what our hosting provider inherently logs to operate the service; if that changes, we will update this Policy.
4. Cookies & tracking
The App does not currently set marketing or analytics cookies, and does not currently use third-party trackers or advertising pixels. It uses standard browser storage (local storage and, for offline PWA functionality, a service worker cache) purely to save your cards and app preferences on your own device. If we add analytics or similar tools in the future, we will update this Policy and, where required by law, request your consent.
5. How we use information
- To let you create, view, and switch between your business cards, entirely on your device.
- To render QR codes, generate print-ready layouts, and support NFC push, all performed locally in your browser.
- To keep the waffle app/website directory current.
- To operate, secure, and maintain the App's hosting infrastructure, and to diagnose technical issues.
6. How we share information
We do not sell your personal information, and because we do not receive your card data on our servers in the ordinary course of using the App, we generally have nothing of yours to share. Where a network request is involved (Section 3), it is shared only with the service providers necessary to perform that specific function:
- Our hosting/deployment provider (Vercel), which serves the App and necessarily processes standard connection/request data to do so.
- apexhit.org, an ApeXhit-operated site, which supplies the waffle directory listing.
- Authorities, where required to comply with a legal obligation, protect our rights, or respond to a valid legal process.
- A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this Privacy Policy or a materially equivalent one.
7. Data retention & deletion
Because your card data lives in your browser's local storage, it persists until you delete it yourself — using the "Clear All Data" option in Settings, by clearing your browser's site data for the App, or by uninstalling the App. We have no ability to remotely access or delete data stored only on your device, because we do not receive or store it in the ordinary course of App operation.
8. Your rights and choices
Because you hold your own card data locally, you already have direct, immediate control over access, correction, export, and deletion through the App itself (edit any card field, use Export Backup/vCard to obtain a copy, or use Clear All Data to delete everything). If you are a California resident (CCPA/CPRA) or in the EU/UK (GDPR) and have a question about data handled by our hosting provider in connection with delivering the App to you (Section 3), contact us using the details in Section 11 and we will respond within the time required by applicable law.
9. Children's privacy
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through any server-side feature of the App.
10. International use & security
ApeXhit LLC is based in the United States. Because your card data is stored locally on your device, it generally stays wherever your device is located and is not transferred internationally by us. Standard connection data associated with delivering the App (Section 3) may be processed by our hosting provider in the United States or other countries where it operates. We use reasonable administrative, technical, and physical safeguards designed to protect the App's infrastructure, but no method of transmission or storage is 100% secure, and browser local storage security ultimately also depends on the security of your own device.
11. Contact us
Questions about this Privacy Policy can be sent to apexhit00@gmail.com.
12. Changes to this policy
We may update this Privacy Policy from time to time — for example, if we introduce optional cloud backup, accounts, or analytics. The effective date at the top of the Legal Center reflects the latest revision, and any material change that affects how locally-stored data is handled will be called out clearly on that update.