Privacy policy

Cimni is a free app for digital business cards run by wfm.hr (Vinkovci, Croatia). Here is what we store and why.

What we store

• Account: username (when you log in with Google or email, this is your email address), name and email address, and an encrypted password (if you don't log in with Google). When you sign up by email we temporarily keep the name, address, encrypted password and an encrypted confirmation code, for at most 15 minutes until confirmation, and unconfirmed records are deleted after one day at the latest. Similarly, for a forgotten password we temporarily keep the address, an encrypted code and the IP address, for at most 15 minutes, and the records are deleted after one day at the latest. If you send an inquiry, we keep the name, email, text of the inquiry and the IP address until we handle it and delete it. If you save a design in the card designer or send it with an inquiry, we keep that design (including images you added) together with your card. If you save a design in the card designer or send it with an inquiry, we keep that design (including images you added) together with your card.
• Google sign-in: from Google we only receive your name, email address and a unique account identifier. We do not receive your Google password, contacts, emails or anything else, and we do not ask for them.
• Cards: everything you enter on a card yourself (name, company, phones, email, addresses, links, photo) and what you choose for its look.
• Counters and statistics: how many times a card and the home page were opened and how many times a contact was saved. Unique visitors are counted anonymously through a daily irreversible digest (hash) that is deleted after 2 days, so it cannot be traced back to a person or an IP address. The owner's own views and bots are not counted.
• Security log: the IP address and time of login attempts, to protect against bots and password guessing. It is deleted after 30 days. The same applies to the record of too frequent opening of non-existent links (protection against address guessing).
• Sent emails: when you send a card by email, we store the recipient address and the time of sending (because of the daily limit and abuse protection).

What is public

A card you turn on is available to anyone who has its link, QR code or NFC card. So only put on it what you want others to see. You can turn the card off or delete it at any time. Search engines must not index it.

Cookies

We only use three cookies: one keeps you logged in (lasts up to 30 days), another remembers that you read the privacy notice (1 year), and a third remembers your chosen language (1 year). We have no ads, no analytics and no third-party tracking. The Google sign-in button loads Google's script, so Google then sees that you opened the sign-in page, under Google's own rules.

Who we share data with

With nobody. We don't sell data or give it to advertisers. It is stored on a server in Croatia, on wfm.hr's hosting.

Your rights

You can change your data in the app at any time. You can delete the account yourself on the Profile page, which permanently deletes the account, all cards and photos. For questions, access to your data or help, write to the contact listed on wfm.hr.

Last updated: 13 October 2026 · Privacy · Terms of use