Privacy Policy

CardFoil · Effective August 19, 2026

CardFoil ("we", "us") is a card scanning and collection tracking app that scans Pokemon cards for their prices. This policy explains what information the app handles, why, and the choices you have. Questions? Email shrish@cardval.app.

Information we collect

• Account information. If you create an account, we receive your name and email address from the sign-in provider you choose (Apple or Google). Authentication is handled by Clerk, our sign-in provider.
• Saved collections. Cards you choose to save and the collections you create are stored with your account so they sync across your devices.
• Card scans. When you scan a card, we may collect the scan image and related scan data (such as detection results and the card it was identified as) to identify the card, and to maintain and improve our card recognition and the service.
• Device identifier. A random identifier for your device is used to recognize device.
• Purchase status. Subscriptions are billed by Apple. We use RevenueCat to manage subscription status and never see your payment details.
• Usage analytics. We collect general usage information from the app — such as which features are used and basic device details to understand how CardFoil is used and make it better. This is processed by PostHog, our analytics provider. If you sign in, usage may be associated with your account. Analytics data is stored in the United States and is never used for advertising.

What we don't do

• We do not sell your personal information.
• We do not show ads or use advertising trackers.
• We do not track you across other apps or websites.
• We do not collect your location.

How we use information

We use the information above to identify scanned cards, display market prices, sync your collections across devices, enforce free-tier limits, provide Pro subscription features, improve our card recognition, and operate and improve the service.

Service providers

We share data only with the providers needed to run CardFoil:

• Clerk — account authentication
• Apple — payment processing for subscriptions
• RevenueCat — subscription management
• PostHog — product usage analytics (United States)
• Google Cloud — infrastructure and data storage (United States)

We may also disclose information if required by law, to protect our rights or the safety of users, or as part of a business transaction such as a merger or acquisition (in which case this policy will continue to apply to your information).

Data retention and deletion

Your account data is kept while your account is active. You can permanently delete your account and all associated data at any time in the app under Profile → Delete Account, or by emailing us. You can also email us to request a copy of your data or to correct it. Subscriptions are billed through Apple and must be cancelled separately in your device's Settings → Subscriptions.

Security

All communication between the app and our servers uses encrypted connections. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

Children

CardFoil is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected on this page with an updated effective date.

Contact

Email shrish@cardval.app.