This notice describes how personal data is processed in connection with the purchase, activation and use of the Business Scanner app.
Images, documents, business cards and extracted data are normally stored on the user's device.
Optional AI features send online only the data required for the processing chosen by the user.
The controller of data relating to purchase, licence, support and online services for Business Scanner is:
KFIVE di Chiozza Giovanni S.a.s.To manage purchases, trial periods, activation, licence checks and technical support, KFIVE may process:
These data are used to provide the service, verify licence validity, manage quotas, prevent abuse, provide support and comply with administrative, accounting and tax obligations.
Providing data essential to the licence is necessary. Without such data it may not be possible to activate or use the app.
Business Scanner may process and store on the device:
When used exclusively locally, these data remain within the app area on the device and are not transmitted to KFIVE, Supabase or Google.
KFIVE cannot access content stored exclusively on the device.
Storage and protection of local data also depend on the device, operating system, security settings and any backup systems used by the user.
Business Scanner uses optical character recognition technologies to extract text from images.
Business-card recognition is designed to run locally on the device using Google ML Kit or equivalent technologies.
When processing is performed locally, the image and recognized text are not transmitted to KFIVE.
OCR may produce inaccurate or incomplete results because of image quality, lighting, language, typeface or document layout, among other factors.
The user must always verify results before saving, exporting, sharing or using them.
When local recognition is not sufficient, the user may choose the “Ask AI for help” function.
The function may be used to:
The AI function is not activated automatically.
Before sending, the app informs the user that selected content will be transmitted online and indicates any AI-credit consumption.
When the user selects “Send to Gemini”, the strictly necessary document, image or text is transmitted automatically to the Gemini service on Google Cloud Vertex AI. The Google Cloud project and paid commercial service are registered to KFIVE.
KFIVE:
The flow is automated. KFIVE may still process technical metadata necessary for licence management, credits, security and service operation.
This metadata may include:
Metadata must not contain the text of the business card or document.
Google states in its Google Cloud commercial terms that it does not use customer data to train or improve AI models without prior customer authorization or instruction. Processing is also governed by the Google Cloud Data Processing Addendum applicable to the KFIVE project.
Logging of request and response content is kept disabled. Google may nevertheless perform temporary technical processing required to provide the service, maintain security and prevent abuse, under the applicable terms.
The Business Scanner licence may include a specified quantity of AI credits.
The number of available credits may depend on:
The app records credits used and the remaining allowance without intentionally storing the content of processed documents.
Once the allowance is exhausted, AI functions may be suspended until renewal, purchase of additional credits, upgrade to a higher plan, or activation of other methods that may be provided.
Exhaustion of AI credits does not prevent use of the app's local functions.
Prices, quantities, duration and methods of using credits are described in the commercial plan and licence conditions.
KFIVE uses Supabase for certain technical functions, including:
Business-card images, documents, PDFs and OCR text are not normally stored on Supabase.
KFIVE adopts configurations and technical measures intended to limit processed data to what is necessary for service operation.
Data relating to purchase, licence and app operation are processed to:
Applicable legal bases are:
Acknowledging this notice does not constitute general consent to all processing described.
Use of the AI function is optional and is requested through a specific user action.
KFIVE may use technical providers that process data only to the extent necessary to provide their respective services.
These currently include:
Personal data are not sold to third parties.
When technically available for the model used, KFIVE configures the AI service through endpoints located in the European Union.
Some providers or subprocessors may nevertheless be established or operate outside the European Economic Area.
Any international transfers are carried out on the basis of safeguards provided by law, including where applicable:
Data stored locally remain on the device until deleted by the user, app data are erased, the app is uninstalled, or the data are independently exported or transferred by the user.
Uninstalling may not delete copies contained in device backups or services selected by the user.
Licence, customer and support data are retained for the period necessary to perform the contract and subsequently to comply with administrative, accounting, tax and rights-protection obligations.
Content sent to the AI function is processed for the time necessary to perform the request, without prejudice to temporary technical processing, security activities or provider obligations.
Metadata relating to credit consumption may be retained for the time necessary to manage the licence, reporting and abuse prevention.
KFIVE adopts technical and organizational measures appropriate to the risk to protect data against unauthorized access, loss, alteration or disclosure.
No computer system can guarantee absolute security.
The user should protect the device with an access code, biometric authentication where available, security updates and appropriately protected backup systems.
Business Scanner may request access to:
Permissions can be managed from Android or iOS settings. Revoking a permission may prevent some functions from working.
Business Scanner may allow the user to export or share data by email, vCard, CSV, JSON, PDF or other applications.
When the user starts a share operation, data are transmitted to the recipient or service chosen by the user.
KFIVE does not control subsequent use of data independently exported or shared by the user.
The user decides which business cards, documents, images and PDFs to capture, store, process, export or share.
The user is responsible for verifying:
The user must not send without appropriate safeguards:
Business Scanner uses automated systems that may produce incomplete, inaccurate or outdated results.
The user must verify all data against the original document before saving, using, exporting, sharing, entering it into other systems or making decisions based on the results.
Business Scanner must not be used as the sole source for legal, tax, financial, medical or other decisions capable of producing significant consequences.
Where KFIVE acts as controller, the data subject may exercise, where applicable, the rights under Articles 15–22 GDPR, including access, rectification, erasure, restriction, portability, objection and withdrawal of any consent.
Requests may be sent to info@kfive.it.
For data stored exclusively on the device, KFIVE does not possess a copy and cannot materially access, modify or erase it. These operations must be carried out by the user through the app or device settings.
The data subject may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
This notice may be updated to reflect legal, technical, commercial or functional changes.
In the event of material changes, the user may be asked to review the new version.
Version: 1.0 — Last updated: 05/08/2026
This website publishes the notice and does not record whether the user has read it. Acknowledgement is handled directly by the Business Scanner app, which records only the notice version, date and time, and the licence or installation identifier.
Acknowledgement does not constitute general consent to optional processing. Any specific consent is requested separately when required.
