Privacy Policy

Last updated: October 22, 2026

This Privacy Policy explains how Cardes (“Cardes”, “we”, “us”) collects, uses and shares information when you use the Cardes iOS app (the “App”). By using the App, you agree to the practices described here.

1. No sign-up required

You can use the App without creating an account. We do not ask for your name, email address or phone number. The App identifies your installation with a random device identifier that it generates itself; this identifier is not linked to your real-world identity.

2. Information we collect

• Card photos. When you scan or grade a card, the photos you take with your camera or choose from your photo library are uploaded to our servers so the card can be identified and graded. We only access the photos you select; we never read the rest of your library.
• Scan results and collections. Identified cards, grades, prices, your scan history and the collections (folders) you create are stored so they are available when you return to the App.
• AI chat. Messages you send in the AI chat, and the card details attached to a conversation, are stored to keep your chat history.
• Feedback. If you rate a scan result or write feedback, we store what you submit.
• Usage and technical data. We record which features you use and when (for example, the number of scans per day) to enforce usage limits. To prevent abuse we store a one-way hash of your IP address combined with the date; we do not store your raw IP address for this purpose.
• Purchase information. If you subscribe, Apple processes the payment. We receive your subscription status (for example, active or expired) through RevenueCat, but never your payment card details.
• Analytics and advertising data. We use analytics and attribution tools to understand how the App is used and how well our ads perform (see section 4). If you allow tracking in the iOS App Tracking Transparency prompt, these tools may also receive your device's advertising identifier (IDFA). If you decline, the IDFA is not shared.
• Support emails. If you contact us, we receive your email address, your message and any details you include, such as the App version and your device identifier.

3. How we use information

• To identify, grade and price your cards and show your history, collections and chats;
• To provide and verify subscriptions and enforce free and paid usage limits;
• To answer your questions in the AI chat;
• To measure App performance, fix problems and improve features;
• To measure the effectiveness of our advertising campaigns;
• To prevent fraud and abuse and to comply with legal obligations;
• To respond to your support requests.

We do not sell your personal information.

4. Service providers

We share information only with service providers that help us run the App, and only as needed for the services they provide to us:

• Cloudflare hosts our servers and stores your scans, history and photos.
• Ximilar receives card photos to identify and grade cards.
• Google (Gemini) receives AI chat messages and card details to generate answers.
• eBay is queried for card prices; we send card details such as player and set, not your personal information.
• RevenueCat manages subscriptions and receives your device identifier and purchase status.
• Google Firebase (Analytics and Remote Config) receives usage events and device information.
• Adjust and Meta (Facebook SDK) receive install and in-app event data, and the IDFA only if you allow tracking, to measure ad performance.
• Apple processes all payments and subscriptions.

Each provider handles data under its own privacy policy. We may also disclose information if required by law or to protect our rights, our users or the public.

5. Data retention

We keep your scans, photos, collections and chats for as long as you keep using the App, so your history stays available. When you delete your account, we delete this data from our servers. Aggregated or de-identified data that cannot be linked to you may be kept longer.

6. Your choices and rights

• Delete your data: open Settings → Delete Account in the App. This permanently removes your scans, photos, collections, chats and feedback from our servers. You can also email us to ask for deletion.
• Tracking: you can change your tracking choice at any time in iOS Settings → Privacy & Security → Tracking.
• Camera and photos: you can revoke access in iOS Settings at any time.
• Subscriptions: manage or cancel in your Apple ID settings.

Depending on where you live (for example, the EU, UK or California), you may have the right to access, correct, delete or port your personal information, or to object to certain processing. To exercise these rights, contact us at the address below. We will not discriminate against you for exercising them.

7. Security

Data is sent to our servers over encrypted connections (HTTPS) and stored with access controls. No method of transmission or storage is completely secure, but we work to protect your information.

8. International transfers

Our service providers may process your information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for these transfers.

9. Children

The App is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us with information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the date above. Significant changes may also be announced in the App.

11. Contact

Questions or requests about privacy: [email protected]