When you create an account, we collect the information you provide directly: email address (via email/password or Google sign-in), username, and date of birth (collected at sign-up to verify you meet our minimum age requirement — see Children's Privacy below); and, if you choose to add them later, your first/last name, country, and an optional profile picture. When you use the Scan feature, photos you capture of your cards are processed on your device and, if you save a card to your Collection or list it on the Market Place, the resulting card image and card data (name, set, condition, self-assigned grade, price) are stored in our database. If you use the Market Place or Friends features, we store your listings, friend connections, messages you send to other Users, and blocks or reports you create. If you subscribe to U.C.M Ultra, our payment processor (Apple, Google, or RevenueCat) shares subscription status and purchase metadata with us — we never receive or store your full payment card number.
The App requests camera access to let you scan physical trading cards, and photo library access to let you attach an existing photo instead of taking a new one, and to save a generated Share Card image back to your device. Camera frames are processed on-device for card detection and are not uploaded anywhere unless you explicitly capture, save, or share a card.
We use the information we collect to: operate your account and Collection; power the Market Place (showing your listings to other Users, and other Users' listings to you); enable Friends and Messages between Users; process and validate subscription purchases; enforce your accepted Terms of Use; send local, on-device notifications you've enabled (such as a daily scan-streak reminder); and improve the App's reliability and card-identification accuracy. We do not sell your personal information to third parties.
Your username, profile picture, country, and any cards you list on the Market Place are visible to other Users of the App. Messages you send are visible to the recipient. Friend requests, friendships, and blocks reflect your own choices and are only visible to the Users involved.
We use the following third-party services to operate the App, each of which processes a limited slice of your data under its own privacy policy: Supabase (account authentication, database storage, and Market Place/Friends/Messages data); Google (Google Sign-In, if you choose that sign-in method); RevenueCat, Apple App Store, and Google Play (subscription purchase processing and entitlement validation); and free card-database APIs (Pokémon TCG, YGOPRODeck, Scryfall, optcgapi.com, tcgcsv.com) that receive only the card name/set text you search for, never your personal account data.
We retain your account data for as long as your account remains active. You may delete individual cards, listings, friendships, or conversations at any time from within the App. To delete your entire account and all associated data, use Profile > Delete Account in the App, which deletes your profile, collection, listings, messages, and friendship data immediately, except where retention is required to comply with legal obligations or resolve disputes. You can also request deletion by contacting us using the email address below.
The App asks for your date of birth when you create an account and blocks account creation if you do not meet the minimum age of 13 (or a higher minimum age required by your country of residence). The App is not directed to children under that age, and we do not knowingly collect personal information from them. If you believe a child has circumvented this age check or otherwise provided us with personal information, contact us using the email address below and we will delete the associated account and data.
If you encounter a listing, message, or User that violates our Terms of Use or applicable law, you can report it directly within the App, or by emailing us at the address in Contact Us below. We review reports and, where warranted, remove the reported content or restrict the reported account. See the Terms of Use's Prohibited Conduct and User Content sections for more detail, including our process for copyright (DMCA) complaints.
We use industry-standard security measures, including encrypted transport (HTTPS) and row-level access controls on our database, to protect your information. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
Depending on your jurisdiction, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us using the email address below.
We may update this Privacy Policy from time to time. Continued use of the App after any such update constitutes acceptance of the revised policy.
For any privacy question, data access or deletion request, content report, or copyright (DMCA) complaint, contact us at [email protected].