Privacy Policy

Overview

CarteDex is a trading card game (TCG) card scanner and collection manager. The App is local-first: you can use it without an account and your collection stays on your device. If you sign in, you can enable cloud backup and shared collections.

Information We Collect

• • Account and authentication: If you sign in with Google, Firebase Authentication provides a unique user ID and your email address.
• • Collection data: Cards you add or scan, including card ID, name, set, number, image URL, rarity, type, reverse-holo flag, quantity, and timestamps.
• • Shared collections metadata: If you create or join a shared collection we store the collection name, owner UID and email, member UIDs, and join requests (requester UID/email and timestamp).
• • CardTrader token (optional): If you add a CardTrader bearer token for price lookups, it is stored locally on your device and used only to call CardTrader APIs.
• • Diagnostics: Basic crash or diagnostic data may be collected by platform services.

Camera Access and On-Device Processing

Camera access is used to scan cards. Images are processed on-device using a local machine-learning model and are deleted immediately after processing. We do not upload or store camera images on our servers.

How We Use Information

• • Authenticate you and secure your session.
• • Store your collection locally and, if enabled, back it up to Firebase.
• • Enable shared collections you explicitly create or join.
• • Fetch card details and images from third-party card databases.
• • Provide optional price lookups via CardTrader when you supply a token.

Where Data Is Stored

• • On-device: Local SQLite databases store your collection. App settings (including selected shared collection and any CardTrader token) are stored in local app preferences.
• • Cloud (optional): If you sign in and enable cloud features, your collection data and shared-collection metadata are stored in Firebase (Google Cloud).

Sharing of Information

We do not sell your personal information. We share data only to provide the App's features. If you join a shared collection, other members can access the shared collection data; the collection owner's email is stored with the collection to identify the owner.

Third-Party Services

The App relies on third-party services to provide core functionality:

• • Firebase (Authentication, Firestore) - Privacy Policy
• • Google Sign-In / Google Play Services - Privacy Policy
• • RevenueCat for subscription status and purchase entitlement management - Privacy Policy
• • Google Mobile Ads for advertising and consent management - Privacy Policy
• • TCGdex API for card metadata and images.
• • CardTrader API for optional price data when you provide a token.

These services may receive your IP address and standard request metadata.

Legal Bases for Processing (GDPR)

• • Contract performance: To provide core app features, including managing your collection and shared collections.
• • Consent: For optional features such as Google sign-in, cloud backup/restore, and CardTrader price lookups when you choose to enable them.
• • Legitimate interests: To maintain app security, prevent abuse, and improve stability and performance.

Your GDPR Rights

If you are located in the European Economic Area, you have the right to:

• check_circle Access your data
• check_circle Correct inaccuracies
• check_circle Request deletion
• check_circle Data portability

To exercise these rights, contact us at info@tech52apps.com. You can also use the account deletion flow described at Account Deletion. You also have the right to lodge a complaint with your local data protection authority.

International Transfers

If you enable cloud features, your data may be processed by Google Firebase on servers outside your country. Google applies appropriate safeguards for international data transfers as described in their privacy documentation.

Data Retention and Deletion

Local collection data remains on your device until you remove it or uninstall the App. Cloud data is retained while you use cloud features. You can delete your account in the App or request deletion using the public instructions at Account Deletion.

Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page.