Chasecard (“Chasecard,” “we,” “us,” “our”) is an independent app that helps collectors of
graded trading cards scan cards, look up prices, track a portfolio, and evaluate deals. This
policy describes the information we collect and may collect, how we use and share it, and the
choices you have. By using Chasecard, you agree to this policy. Chasecard is not
affiliated with, endorsed by, or sponsored by Nintendo, The Pokémon Company, or PSA / Collectors
Universe; all trademarks belong to their respective owners.
Information we collect
We collect the categories of information below. Some are collected automatically when you use
the app; some you provide; and some are collected only if you turn on a feature or grant a
permission. As we add features, we may collect additional information within the categories and
purposes described here, and we will update this policy when appropriate.
Account information. When you sign in with Google, Apple, or email, we
receive your email address, your name (if provided), and a unique account identifier. We use
Firebase Authentication (Google) for sign-in.
Your collection data. The cards, grades, quantities, cost basis, and
certification numbers in your portfolio; your deals; and your app settings. We store this on
our servers so it syncs across your devices and cache it on your device for offline use.
Content you provide. Card scan images (see the dedicated
Scan images and model training section below) and any other content, corrections, or
feedback you submit.
Usage and diagnostics. How you interact with the app (for example scans,
searches, taps, and screens viewed), performance data, and crash reports, together with your
app version, session identifiers, and a device or installation identifier. We use Firebase
Analytics and Firebase Crashlytics for this.
Location — only with your permission, and off by default. We do not collect
your location unless you turn on and grant permission to a location-based feature (for example,
finding card shows, expos, and community events near you, connecting you with local collectors,
or tagging where a deal happened). Location is never collected in the background without telling
you, and you can turn it off at any time in your device settings. If you do not grant
permission, the app works without your location.
Identifiers and advertising. We may use device and app identifiers for
analytics, security, and to operate the app. We do not currently use
advertising identifiers or track you across other companies’ apps and websites. If we
introduce advertising or measurement that tracks you across other apps or websites in the
future, we will request your permission through Apple’s App Tracking Transparency prompt where
required and update this policy and our App Store privacy details before doing so.
Communications. If you contact support or take part in a survey or promotion,
we collect what you send us (such as your email and message).
Scan images and model training
Card scanning runs on your device. Whether scan images ever leave your device
is controlled by one switch: Settings → “Improve scanning.”
When “Improve scanning” is OFF (you choose at first scan), scan images are
processed only on your device and are never uploaded.
When it is ON, the scan image and the card identification details for that
scan are uploaded to private, access-controlled storage and used to train, evaluate, and
improve our card-recognition models and scanning features.
Human review. Members of our team may view uploaded scan images to label
them, diagnose recognition mistakes, and check model quality.
Withdrawing. Turn the setting off at any time to stop future uploads.
Images already shared remain in our training data, but when you delete your account we
remove the link between those images and you (they are anonymized).
Scan images are never used for advertising and are not shared with third parties except the
infrastructure providers that store and process them for us.
How we use information
We use the information we collect to:
Provide, operate, secure, and sync the app across your devices;
Identify cards and, with your consent, improve and develop our recognition models and other
features;
Analyze usage, diagnose crashes, and improve performance and reliability;
Develop new products and features (including location-based, community and event features,
and — if introduced — subscription or advertising features);
Operate community and event features — for example surfacing card shows, expos, or meetups
near you (with your location permission) and, with your consent where required, telling you
about events and promotions we think you'll care about;
Communicate with you about the service, respond to support requests, and — where permitted —
send updates or offers you can opt out of;
Protect against fraud, abuse, and security risks, and enforce our terms; and
Comply with legal obligations.
You grant us a worldwide, non-exclusive, royalty-free license to host, store, and use the
content and information you provide to operate, improve, and develop our services and models,
consistent with this policy and your in-app choices.
Card prices and market data
Prices, population figures, and sales history are aggregated from public and licensed market
sources and are provided for informational purposes only. They are estimates, not appraisals or
financial advice.
How we share information
We share information only as described here:
Service providers who process data on our behalf to run the app — for
example Google Firebase (authentication, analytics, crash reporting, model hosting), Cloudflare
(image and data storage), and Railway (backend and database hosting).
With your direction or consent — for example, features you choose to use.
Analytics and, if we introduce it, advertising or measurement partners,
with your permission where required by law or platform rules.
Legal and safety — to comply with law, respond to lawful requests, or
protect the rights, property, or safety of Chasecard, our users, or the public.
Business transfers — in connection with a merger, acquisition, financing,
or sale of assets, subject to this policy.
Aggregated or de-identified information that cannot reasonably identify you,
which we may use and share for any purpose.
We do not sell your personal information, and we do not share it for
cross-context behavioral advertising. If that ever changes, we will provide the notice and opt-out
rights that applicable law requires, and we will honor recognized opt-out preference signals (such
as Global Privacy Control) where the law requires it.
Categories of personal information (U.S. state law)
For readers in states whose privacy laws use statutory categories (California and others), the
information described above maps to these categories:
Identifiers — email address, name (if provided), account identifier, device
or installation identifier. Source: you; automatic. Purpose: account,
operation, security.
Commercial information — your portfolio, cost basis, deals, and settings.
Source: you. Purpose: the product itself (tracking your collection).
Internet or other network activity — app usage, screens viewed,
performance, and crash data. Source: automatic. Purpose: operate, fix, and
improve the app.
Audio/visual information — card scan images, only with the “Improve
scanning” setting on. Source: you. Purpose: recognition-model training and
evaluation.
Geolocation — only if you enable a location feature and grant the OS
permission; off by default. Purpose: the feature you enabled.
Inferences — for example, suggestions drawn from your collection and
activity. Purpose: personalization within the app.
We do not collect: characteristics of protected classifications, biometric identifiers,
precise health or financial account data, or education/employment information.
Additional disclosures for residents of certain U.S. states
Depending on your state (including California, Colorado, Connecticut, Texas, Utah, and
Virginia), you may have the right to know/access, correct,
delete, and receive a portable copy of your personal
information, the right to opt out of sale, sharing, or targeted advertising (we
do none of these today), and the right not to be discriminated against for exercising your
rights.
How to exercise a right: use the in-app tools (Profile → Delete Account;
your data is viewable and editable in the app; CSV export in Portfolio), or email
support@chasecard.io from the address on your
account (that is how we verify you). An authorized agent may submit a request the same way
with proof of authorization.
Timing: we respond within the period your state's law requires (generally
45 days, extendable once with notice). If we decline a request, we will say why, and you may
appeal by replying to our response.
California “Shine the Light”: we do not disclose personal information to
third parties for their own direct marketing.
Data retention
We keep personal information only as long as needed for the purposes above. In practice:
Account, portfolio, deals, settings — until you delete your account (then
removed from our servers).
Consented scan images — retained for model training and evaluation; on
account deletion the link to you is removed (anonymized). Turn “Improve scanning” off to stop
new uploads at any time.
Usage analytics — retained while your account is active; on deletion,
rows are dissociated from your account. Server request logs aggregate and age out on a
rolling basis (currently 14 days).
Crash reports — retained per Firebase Crashlytics’ standard retention
(approximately 90 days).
Support email — kept as long as useful to help you and for our records,
then deleted.
Trial-abuse records — if you verify a phone number for a free trial, we
keep a hashed (unreadable) form of that number even after account deletion, solely to prevent
the same number from claiming multiple free trials.
Account deletion
You can delete your account at any time in the app:
Profile → Delete Account. Deleting your account permanently removes your account
and personal data (your portfolio, deals, and settings) from our servers.
After deletion we may retain information in aggregated or de-identified form, records we are
legally required to keep, and the items listed under Data retention above (anonymized
scan images and the hashed trial-abuse record).
Sign in with Apple. If you signed in with Apple, after deleting
your account in the app you can also fully revoke Chasecard’s access to your Apple ID in
Settings → [your name] → Sign in with Apple → Chasecard → Stop Using Apple ID.
Your choices and rights
Access and update your collection data directly in the app.
Delete your account and personal data in the app (Profile → Delete Account).
Turn scan-image sharing on or off at any time in Settings (“Improve scanning”).
Control permissions — location, camera, photos, and notifications — in your
device settings.
Sign out to remove your data from a device.
Depending on where you live, you may have additional rights (such as to access, correct, delete,
or restrict the use of your personal information, or to opt out of certain sharing). To exercise
any right, contact us at
support@chasecard.io; we will respond as
required by applicable law.
Subscriptions
Chasecard’s scanning and portfolio features are free. If we introduce a paid subscription,
billing is handled by Apple, and we may collect information such as a phone number to verify a free
trial and prevent abuse. We will update this policy before we begin collecting new information for
that purpose.
Text messages (phone verification)
If a feature asks you to verify a phone number (for example, activating a free trial), we send
a one-time verification code by SMS through our authentication provider. These
are transactional messages only — we do not send marketing texts. Message and data rates may
apply. We store a hashed (unreadable) form of the verified number for trial-abuse prevention, as
described under Data retention.
Marketing and community communications
If we introduce newsletters, event announcements (for example, card shows or expos near you),
or promotions, marketing messages are optional: you can opt out of marketing
email via the unsubscribe link in any message, and we send marketing texts only with your consent
— reply STOP to end them. Opting out of marketing never affects transactional
messages about your account or the service.
Do Not Track
Some browsers can send “Do Not Track” signals. There is no common standard for them, but we
honor recognized opt-out preference signals such as Global Privacy Control where the law
requires, as described above — and we do not track you across other companies' apps or websites
today in any case.
Notice to EU and UK users
If you are in the European Union or the United Kingdom: the controller of your personal
information is Chasecard (contact below). We process personal information on these legal bases:
performance of a contract (providing the app, syncing your collection),
consent (scan-image sharing for model training, location, marketing — each
withdrawable at any time in Settings or by contacting us), legitimate interests
(analytics, security, fraud prevention, improving the service — balanced against your rights),
and legal obligation. You have the rights to access, correct, delete, restrict,
object, and port your personal information, to withdraw consent at any time, and to complain to
your local supervisory authority. Data is processed in the United States; where required we rely
on appropriate safeguards such as the European Commission's standard contractual clauses. If we
need to use your personal information for a purpose not compatible with those described here, we
will tell you first and explain the legal basis.
Sensitive information. Please do not send us sensitive personal
information (for example health, biometric, or political information) — the app does not need it
and we do not knowingly collect it.
Security
We encrypt data in transit (HTTPS/TLS), require authentication to access your data on our
servers, and keep uploaded images in private, access-controlled storage. No method of transmission
or storage is completely secure, but we work to protect your information.
Children
Chasecard is not directed to children under 13, and we do not knowingly collect personal
information from children under 13. If you believe a child has provided us information, contact us
and we will delete it. Where the law requires, we may limit how we collect and use information of
users between 13 and 18, or require a parent's consent before collecting it.
International users
We operate from the United States and process information there and in other countries where our
service providers operate. If you use Chasecard from outside the United States, you understand your
information will be processed in the United States.
Changes to this policy
We may update this policy from time to time. We will post the new version here and update the
“Last updated” date above; material changes will also be announced in the app or by email, and
where the law requires, before they take effect.