Privacy Policy

Skills. is owned and operated by Kratos Developer ("we", "us", "our"). We run the digital business card and booking platform at myskillscard.xyz and the Skills. apps for iPhone and Android. If you have questions about this policy, contact us at myskillscard@gmail.com.

Information you give us directly:

• Account info: name, email address (which you confirm by clicking a link we email you), password (stored only in hashed form by Firebase Authentication), and a mobile number. Your mobile number is private: it is never shown on your card and only the Skills. team can see it, to confirm you are a real person and to contact you about your account.
• Card content: bio, job title, photo, social links, payment handles, skills tags, business address, media gallery, and welcome video
• Bookings: the services you offer, your availability, and the appointments you accept, including your customers' names, contact details, chosen times, and notes
• Reviews that customers leave for providers
• Networking contacts, leads, and CRM records you add or receive
• Team invitations and team membership
• Feature requests and support messages you send us

Information collected automatically:

• Card visits: the date and time, the approximate city and region (estimated from the visitor's IP address, see Section 08), the referring site, whether the visit came from a QR code, a short browser description, and, if the visitor is signed in, their account ID. The card owner sees these statistics in their dashboard.
• Device fingerprint: a combination of device model, operating system, screen size, timezone, and similar signals, used only to prevent abuse, such as creating multiple accounts on one device to get around plan limits or bans. It does not include your IMEI, serial number, or any hardware identifier restricted by Apple or Google.
• Push notification tokens, if you allow notifications in the app or browser
• Security signals that confirm requests come from the real Skills. website and apps (Google App Check and reCAPTCHA)
• Short-lived rate-limit records that prevent abuse, which store your IP address only in a scrambled (hashed) form

Your phone's contacts: if you choose "Choose from my contacts" when sending your card or your live link, Skills. asks your permission and then shows your phone book only on your device so you can pick who to send to. The names, numbers, and emails you pick are used only to fill in the To: line of your own Messages or Mail app. We never upload, store, or share your contacts, and you can turn this permission off at any time in your phone's settings. We only record how many people you sent your card to, never who they are.

We do not use advertising networks, third-party analytics trackers, or cookie-based tracking.

• To create and display your public Skills. card and booking page
• To take and manage bookings, and to send booking confirmations and reminders
• To send account emails and push notifications (for example, new bookings, leads, and plan changes)
• To process subscriptions and enforce plan limits
• To provide your contacts, leads, CRM, and analytics dashboard
• To prevent fraud, spam, and abuse, and to keep the Service secure
• To improve the platform using aggregated, anonymized usage patterns

We do not sell, rent, or trade your personal data.

Subscription payments are processed by Square. We never see or store your full card number or security code. Square handles payment data under its own privacy policy. We keep only your plan, subscription status, and the Square customer and subscription references needed to manage your account.

Payment handles you add to your card (such as Cash App, Venmo, PayPal, or Zelle links) are shown on your public card. Payments made through those services happen directly between you and the payer, not through Skills.

Skills. uses Google Gemini to power the AI chat assistant on public cards, bio writing, business card scanning, and lead sorting. When a visitor chats with a card, their message and the card's public information (such as services and hours) are sent to Google to generate a reply. If you scan a business card, the photo is sent to Google to read the text.

We do not store AI chat conversations, and they are not linked to the visitor's identity. If a visitor asks the assistant to book an appointment, the booking details they provide are saved like any other booking.

Live streaming is provided by Agora. When you go live, your video and audio are transmitted through Agora's network to your viewers in real time. We do not record or store your live streams.

When you publish a card, the information you choose to include becomes publicly accessible at your card link (for example, myskillscard.xyz/yourname). You can edit or remove any field at any time, and deleting your account removes your public card.

When a visitor shares their contact details with you through your card (lead capture or "reverse share"), those details are stored in your account and shown only to you. Visitors who submit their information are consenting to share it with you as the card owner. We do not use this data for our own marketing.

We use these services to operate Skills. Each receives only the data it needs to do its job and handles it under its own privacy policy:

• Google Firebase and Google Cloud: accounts, database, file storage, website hosting, server functions, push notifications, backups, and security checks (App Check and reCAPTCHA)
• Google Gemini: AI features (see Section 05)
• Square: subscription payments
• Twilio SendGrid and EmailJS: sending emails
• Agora: live video
• Apple Push Notification service: notifications on iPhone
• ipapi.co: when someone views a card, their IP address is sent to ipapi.co to estimate their city and region for the card owner's visit statistics
• Google Fonts, cdnjs, and Unsplash: fonts, code libraries, and some images are loaded from these providers, which receive your IP address as part of normal web requests

Your data is stored with Google Cloud in the United States and is encrypted in transit and at rest. Access is restricted by security rules: only you, and our admin team when needed for support or safety, can read your private data. Your public card fields are readable by anyone, by design.

We take reasonable technical measures to protect your data, but no system is perfectly secure. Please use a strong, unique password for your account.

• Your account data is kept while your account is active.
• When you delete your account, your public card goes offline right away and your data is removed within 30 days.
• Frozen accounts are handled as described in our Terms of Service (Section 06D).
• Database backups are kept for up to 14 days, so deleted data may remain in backups for that long before it is overwritten.
• Rate-limit records are deleted automatically, usually within days.

You have the right to:

• Access: view the data associated with your account through your dashboard
• Edit: update any information on your card at any time
• Delete: remove your account and its data using the delete option in your dashboard or by contacting us
• Export: download your networking contacts as a CSV from your dashboard

To exercise these rights or make any data request, email myskillscard@gmail.com. We respond within 5 business days.

Skills. is not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We'll notify active users of material changes by email or an in-app announcement. The "last updated" date at the top of this page always shows the latest version.