Privacy Policy

1. Introduction

This Privacy Policy explains how Blenz ("we", "us", "our") collects, uses, and protects your personal information when you use the Oscar application ("App", "Oscar"). This policy applies to all versions of Oscar, including Android and any future iOS release.

By downloading or using Oscar, you agree to the practices described in this policy. If you do not agree, please do not use the App. This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDPA).

2. Information We Collect

2.1 Information you provide

When you create an account or use the App, we may collect:

• Identity information: your name and email address, provided through your Google Account when you choose to sign in with Google
• Phone number: if you choose to authenticate using a mobile number
• Contact data: text information extracted from business cards you scan — including names, phone numbers, email addresses, job titles, companies, and addresses of the individuals whose cards you capture
• Notes and tags: any additional information you add to a contact manually within the App

2.2 Information collected automatically

• Usage data: how you interact with the App — features used, frequency of use, and aggregate statistics about App performance
• Device information: device type, operating system version, and App version, used for troubleshooting and compatibility
• Account and subscription status: whether you are on the Free or Pro tier, subscription renewal dates, and referral programme status

2.3 Payment information

Subscription payments are processed by our third-party payment provider. We do not store your card number, UPI ID, bank account, or other payment credentials. We only receive a transaction confirmation and your subscription status.

3. What We Do Not Collect

We do not collect:

• Card images or photographs of any kind
• Location data
• Your existing device contacts (unless you choose to use the "Add to contacts" feature, which only writes data to your phone — it does not read your contacts)
• Biometric data
• Browsing history or data from other apps

4. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide the core App functionality (contact storage, retrieval, export, sharing)
• Improve the accuracy of contact data through our in-app correction feature
• Process your subscription and manage your plan
• Operate the referral programme and apply rewards
• Send transactional communications (subscription confirmations, account notices)
• Troubleshoot technical issues and monitor App health
• Comply with applicable legal obligations

We do not use your data for advertising. We do not sell, rent, or trade your personal data with third parties for commercial purposes.

5. Device Permissions

Camera

Used to photograph business cards for scanning. We access your camera only when you initiate a scan. No images are stored by Oscar.

Photos / Storage

Used when you choose to select a card image from your photo gallery instead of using the camera. The selected image is processed on-device and not uploaded.

Contacts

Used only if you choose to save a scanned contact directly to your phone's address book using the "Add to device contacts" feature. We write data to your contacts; we do not read or upload your existing contacts.

6. Data Storage and Security

Your account and contact data is stored using secure cloud infrastructure provided by Google (Firebase). Data is encrypted in transit and at rest. We apply reasonable technical and organisational safeguards to protect your information from unauthorised access, loss, or disclosure.

Contact data is stored for as long as your account is active. You can delete individual contacts or your entire account at any time.

7. Third-Party Service Providers

We use the following categories of service providers to operate Oscar:

• Authentication and cloud storage — provided by Google (Firebase), which stores your account data and synced contacts securely
• Text recognition technology — on-device processing; data does not leave your device during this step
• AI-powered data processing — used for optional in-app contact correction; submitted text data is processed for this purpose and not retained by the provider after processing
• Payment processing — handles subscription billing; does not share financial credentials with Blenz
• Analytics — anonymised usage data to help us understand how the App is used and improve it

All service providers are contractually bound to process your data only as instructed by us and in accordance with applicable privacy laws.

8. Sharing Your Contact Data

When you share a contact using Oscar's share feature, the recipient receives the contact's information in the format you select (vCard, SMS, WhatsApp, or email). You control who receives this information. Oscar does not automatically share your contacts with anyone.

Shared contacts may include an attribution note referencing Oscar. This is used for app attribution only — no personal data is transmitted to Blenz during a share.

9. Referral Programme

If you participate in the referral programme, we store your referral code and track which accounts were referred through it, in order to apply the relevant rewards. Referral data is not shared with third parties.

10. Data Retention

We retain your personal data and contact information for as long as your account is active. If you delete your account, your data is permanently removed from our systems within 30 days. Deletion is irreversible — we cannot recover data after this period.

Anonymised, aggregate usage statistics may be retained for analytical purposes after account deletion.

11. Your Rights (India — DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023, and other applicable Indian law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data — contacts can be edited directly in the App
• Delete your data — available via Settings → Account → Delete Account, or by contacting us
• Withdraw consent — you may revoke Google Sign-In access from your Google Account settings; this will affect your ability to use the App
• Grievance redressal — you may raise any privacy concern with our Grievance Officer (see Section 16)
• Nominate a person to exercise your rights on your behalf in the event of your death or incapacity, as permitted under DPDPA

To exercise any of these rights, contact us at connect@blenz.in. We will respond within 7 business days.

12. Children's Privacy

Oscar is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it promptly.

In accordance with DPDPA 2023, we require verifiable parental consent before processing data of individuals under 18 years of age.

13. International Users

Oscar is operated by Blenz, an India-based company. If you access Oscar from outside India, your data may be transferred to and stored in India or other countries where our service providers operate. By using Oscar, you consent to this transfer.

We take steps to ensure that international transfers comply with applicable data protection requirements.

14. iOS (Apple App Store)

When Oscar becomes available on the Apple App Store, the following data practices will apply in addition to this policy:

• Sign in with Apple will be supported as an authentication option
• Data collected and its purpose will be disclosed in the App Store privacy nutrition label, consistent with this policy
• We comply with Apple's App Store Review Guidelines and App Privacy requirements
• If applicable, we will implement Apple's App Tracking Transparency framework before accessing any device advertising identifier

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email. The effective date at the top of this page will reflect the date of the most recent update. Continued use of Oscar after an update constitutes acceptance of the revised policy.

16. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and DPDPA 2023, we have designated a Grievance Officer for privacy-related concerns.