EMV Card Studio
EMV Card Studio ("the App") is developed by Kemet Soft ("we", "us", "our"). This Privacy Policy explains how information is handled when you use our App.
EMV Card Studio is an educational and professional tool for reading and analyzing EMV contactless payment cards via NFC technology. The App is designed to operate entirely offline with no data leaving your device.
When you scan an EMV payment card, the App reads and stores the following information locally on your device:
Storage: All card data is stored in an encrypted database on your device using SQLCipher with AES-256 encryption.
The App does not and cannot access:
The App stores your preferences locally on your device:
We do not collect any of the following:
Data stored on your device is used solely to provide the App's core functionality:
Your data is never used for analytics, advertising, profiling, or any purpose beyond the features described above.
The App does not transmit any data over the internet or any other network:
NFC communication occurs only between your device and a physical card held within 4 cm range, using the ISO 14443-4 protocol. This is a local, short-range communication and does not involve the internet.
Cloud backups are disabled (android:allowBackup="false") to prevent sensitive data from being included in Android system backups or Google Drive auto-backup.
You may optionally export card data to a password-encrypted file stored at a location of your choosing. Exported files are under your control.
We do not share your data. We do not have access to your data.
Since all data remains on your device and we have no means to access it, we cannot provide your data to anyone, including in response to legal requests.
The App uses the following open-source libraries for technical functionality:
| Library | Purpose |
|---|---|
| SQLCipher | Database encryption (AES-256) |
| BouncyCastle | Cryptographic operations |
| AndroidX | UI components and framework utilities |
| MPAndroidChart | Data visualization and charts |
| BER-TLV | EMV tag-length-value data parsing |
| EMV-NFC-Paycard-Enrollment | EMV data structure parsing |
None of these libraries collect, transmit, or share your data. They are used exclusively for local, on-device processing.
You have complete access to all data stored by the App through its interface. You can view, search, and browse all scanned cards and their associated data at any time.
You can delete your data at any time using the following methods:
Deletion is immediate and permanent. No data is retained after deletion.
You can export your data for personal use:
You can edit card metadata including categories, favorites, titles, and descriptions within the App.
The App requests the following Android permissions:
| Permission | Purpose | Required |
|---|---|---|
NFC |
Read EMV card data via Near Field Communication | Yes (core functionality) |
VIBRATE |
Provide haptic feedback when a card is detected | Yes (user experience) |
USE_BIOMETRIC |
Optional biometric authentication for App access | No (user choice) |
All permissions are "normal" permissions granted automatically at install time. No runtime permission prompts are required.
EMV Card Studio is not designed for or directed at children under the age of 13. We do not knowingly store data from children. The App is an educational and professional tool intended for developers, security researchers, and payment system professionals.
All data is retained on your device until you choose to delete it. There is no automatic deletion and no server-side retention. You are the sole controller of your data and its lifecycle.
Your data is stored on your device, in your physical location. No cross-border data transfer occurs because no data leaves your device.
| Regulation | Status |
|---|---|
| GDPR (European Union) | Compliant — no data processing by developer; user is the data controller |
| CCPA (California, USA) | Compliant — no data sale or sharing |
| PIPEDA (Canada) | Compliant — no personal information collection |
| LGPD (Brazil) | Compliant — no data processing |
| PDPA (Singapore/Thailand) | Compliant — no data transfer |
We may update this Privacy Policy to reflect changes in legal requirements, App features, or security practices. Material changes will be communicated through:
Continued use of the App after changes constitutes acceptance of the updated policy.
Developer: Kemet Soft
For privacy-related questions or concerns, please open an issue on our GitHub repository or contact us through the channels listed above.
Note: Because we do not have access to any user data, we cannot fulfill data access or deletion requests on your behalf. All data management is performed directly by you through the App.
| Aspect | Detail |
|---|---|
| Data stored | Locally on your device only |
| Encryption | AES-256 (SQLCipher) |
| Internet access | None |
| Data transmission | None |
| Data sharing | None |
| Analytics / Tracking | None |
| Advertisements | None |
| Cloud backup | Disabled |
| User control | Full — view, export, delete anytime |
| Open source | Yes (MIT license) |
Your financial data belongs to you. EMV Card Studio is built from the ground up to keep your data private, secure, and entirely under your control.