Privacy Policy
Last updated: March 26, 2026
1. Introduction
We value your ("User," "You," or "Your") privacy and recognize the sensitivity of your personal information. We are committed to protecting your personal information and using it only as appropriate to provide you with the best possible service. This Privacy Policy explains the information practices of our mobile application (the "Application").
We comply with applicable data protection laws and regulations, including the EU General Data Protection Regulation ("GDPR") where applicable.
Please note that when using the Application, this Privacy Policy should be read in conjunction with our Terms of Use. By accessing the Application, you acknowledge that the Privacy Policy and the Terms of Use govern your use of the Application.
2. What Information We Collect
Information you provide:
Account registration data (email address, display name, password)
User content you create, share, or post to the Application, including photos or image files and associated metadata
Feedback and support communications
Information collected automatically:
Device information (device model, operating system, language, browser version)
IP address, date and time of requests
App usage analytics (features used, session duration, pages visited)
Device identifiers (for analytics and service improvement)
Camera data (processed on-device for card recognition; images are not stored on our servers unless you explicitly save them)
Cookies and similar technologies:
We use cookies and similar technologies to automatically collect information, measure and analyze usage, and enhance your experience. We obtain consent before using non-essential cookies where required by law. You can manage cookie preferences through your device or browser settings.
3. How We Use Your Information
We use collected information to:
Provide, maintain, and improve the Application's card scanning and collection features
Process card identification and retrieve market pricing data
Manage your account and subscription
Respond to your requests and inquiries
Personalize your experience (with your consent)
Send service notifications and, where permitted, marketing communications
Improve our services and ensure stability and security
Comply with legal obligations
Protect our legal rights and interests
4. Third-Party Services
We integrate with third-party services for functionality, analytics, and payment processing:
Supabase: Authentication and data storage
Replicate: AI-powered card analysis
Public card data APIs: Card information and pricing (Pokemon TCG API, Scryfall, YGOPRODeck)
Apple App Store / Google Play: Subscription management and payment processing — we do not receive or store your financial transaction data
Analytics providers: To understand usage patterns and improve the Application
We do not sell your personal information to third parties for their direct marketing purposes.
5. Data Storage, Transfers, and Security
Your data is stored securely using industry-standard encryption. Authentication tokens are stored in your device's secure keychain. We use Row Level Security to ensure you can only access your own data.
Personal information may be transferred to and stored in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure adequate protection through appropriate safeguards in compliance with GDPR Chapter V requirements.
We maintain security standards and procedures designed to prevent unauthorized access to your data. However, no information security system is impenetrable, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active and as necessary to fulfill the purposes described in this policy. When you delete your account, all associated personal data is permanently removed within 30 days, unless retention is required by law.
7. Your Rights
Depending on your location, you may have the right to:
Access and obtain a copy of your personal information
Correct inaccurate data
Delete your personal information from our records
Object to processing of your personal information
Restrict the processing of your personal data
Data portability (receive your data in a machine-readable format)
Withdraw consent at any time where processing is based on consent
California residents: We do not share your personal data with third parties for their direct marketing purposes. We do not sell personal information.
To exercise any of these rights, please contact us using the details below. We will respond within one month of receipt of your request.
You also have the right to lodge a complaint with a supervisory authority.
8. Children's Privacy
Our Application is intended exclusively for persons over 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that a child under 16 has provided information to us, we will delete that information promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy in the Application.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: wildfusioncards@gmail.com
or:
bagasystudio@gmail.com