Privacy Policy

Last updated: June 20, 2026

Business Town (“the app”, “we”) is a digital business-card app that lets you exchange contact cards and share an approximate, privacy-protected location (“your town”) with contacts you choose. This policy explains what we collect, why, and your choices. We do not sell your data, show ads, or track you across other apps or websites.

What we collect

Account info — your email address and the identifier from your sign-in method (Sign in with Apple, Google, or email/password), used to create and secure your account.
Your business card — the name, job title, company, phone, email, website, address, and profile photo you choose to enter. This is shown to people you exchange cards with.
Approximate location (“your town”) — when you enable location sharing, the app determines your location on your device, masks and randomizes it to a wide (~8 km) area before it leaves your phone, and end-to-end encrypts it so that only the contacts you’ve approved can decrypt it and see the masked location. Our servers store only encrypted data and never have access to your real or precise location. Your exact GPS position is never transmitted.
Nicknames you assign to contacts are stored only on your device and are never uploaded or shared.

We do not collect your device’s contacts/address book. The app requests Contacts access only to save a card you choose into your own address book, and to let you pick a contact to update — it does not read or upload your contact list.

How we use data

To provide the core features: card exchange, your contact wallet, and masked-location sharing with people you connect with.
To send account emails (sign-up confirmation, password reset).
We do not use your data for advertising or cross-app tracking.

Who can see your data

Your card is visible to people you exchange cards with.
Your masked location is visible only to contacts you have approved, and only while sharing is enabled and not paused. Because it is end-to-end encrypted, no one else — including us and our hosting provider — can read it.
Your exact GPS position is never transmitted out of your phone.
You can pause sharing at any time, and removing a contact revokes their ability to see your masked location immediately.

Where data is stored

Account and card data, and the encrypted masked location data, are stored using our backend provider, Supabase (hosted in Singapore). Data is transmitted over encrypted connections (HTTPS).

Your choices and rights

Edit or delete your card details anytime in the app.
Pause or stop location sharing anytime in Settings.
Remove contacts to cut off their access.
Delete your account and data — in the app, go to Settings → Delete Account to permanently delete your account and all associated data yourself. You can also contact us at support@businesstown.app and we will delete it for you.
Depending on your region (e.g. GDPR/CCPA), you may have rights to access, correct, or delete your personal data; contact us to exercise them.

Children

Business Town is not directed to children under 13 (or the applicable age in your region) and we do not knowingly collect their data.

Security

We use industry-standard protections including HTTPS in transit and end-to-end encryption (Curve25519 + AES-GCM) for location data, so location content is unreadable to our servers.

Changes

We may update this policy; material changes will be reflected by the “Last updated” date above.

Contact

Questions or data requests: support@businesstown.app