Privacy Notice

• Account data — email address, display name and login credentials (or your Google/Apple identifier if you sign in socially). Used to create and secure your account and to contact you about the Service. Legal basis: performance of our contract with you.
• Collection content — the card photographs you upload and the details recorded about them. Used to provide identification, valuation and collection features. Legal basis: performance of our contract.
• Usage data — scan counts, timestamps, plan entitlements and basic device/browser information including IP address. Used to enforce plan limits, prevent abuse and improve the product. Legal basis: legitimate interests in running and securing the Service.
• Support messages — anything you send us. Used to answer you. Legal basis: legitimate interests.

• Service providers — our hosting, database and storage provider, and the AI providers who process card images to return identifications and value estimates. They act on our instructions only.
• Paddle, our Merchant of Record, for the sale of plans, subscription management, payments, invoicing and tax compliance.
• Professional advisers (legal, accounting) and authorities where we are required to disclose by law.

We do not sell your personal data.

We keep your account data and collection content for as long as your account is open. If you delete your account, we delete your cards, images and profile, and remove or anonymise associated usage records, except where we must keep transaction records to meet legal or tax obligations.

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, to withdraw consent, and to complain to your data protection authority. You can exercise most of these directly in the app, or by contacting us — we respond within one month.

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We use appropriate technical and organisational measures to protect your data, including encrypted transport, private image storage and row-level access controls so that only you can read your own collection.

We use only essential cookies and local storage needed to keep you signed in and to run the checkout. We do not use advertising or cross-site tracking cookies. You can clear them in your browser settings, though doing so will sign you out.