Privacy Policy

Who we are and what this covers

Slabbies is operated by the application provider identified on the Slabbies App Store product page (the "App Provider," "we," "us," or "our"). This Privacy Policy explains how we handle information through the Slabbies iOS app, our backend services, and support interactions.

This Policy does not govern websites, marketplaces, grading companies, or other services that you choose to visit or use independently.

App update availability: guest access, the separate photo-processing permission screen, and automatic removal of embedded photo metadata described below are included in the upcoming app update. Older builds may not have these controls or remove embedded metadata. New server-side grading diagnostics already exclude full model responses and report copies. Contact slabbiestcg@gmail.com if a privacy control described here is unavailable in your installed version.

Information we collect

• Account and authentication information: registered accounts use an email address, username, optional display name, account identifier, and authentication records. Sign in with Apple may provide an Apple account identifier and, depending on your choice, your name or an Apple relay email address. Continuing without an account creates a guest session with its own identifier and authentication records, without requiring an email, password, or username.
• Collection information: card identities, quantities, owned or wanted status, purchase details you enter, notes, binder or collection organization, saved grades, valuation snapshots, and related history.
• Scans and images: card photos selected from your library or captured with the camera, including front, back, surface, corner, and edge images; scan timestamps; identification results; and saved scan history. Registered accounts can save collections and scan history, including completed scan images, to private cloud storage and restore them across devices. Guests can identify cards and view prices but cannot save a collection or sync scan history or card-image archives. Identification photos may still be sent for processing after consent; guest authentication, operational records, and voluntarily submitted feedback are described separately below.
• Identification and grading information: card context, AI-generated grading reports, predicted grades, model or provider information, request identifiers, processing time, token-use totals, errors, and other diagnostics used to deliver and evaluate the feature.
• Subscription information: StoreKit product identifier, transaction or entitlement status, renewal or expiration information, and verification records. Apple processes payment details; we do not receive your full payment-card number.
• Optional analytics: if you enable Share product analytics in Profile, we collect account-linked identification outcomes, confidence, corrections, and retake reasons. This setting is off by default.
• Feedback: grading feedback, wrong-match reports, corrected card identifiers, comments, and any photo you separately choose to include with feedback.
• Alerts and settings: price-alert targets, notification preferences, grading preferences, appearance settings, and other app configuration. Price-alert notifications are scheduled locally on your device; Slabbies does not currently use a push-notification token for these alerts.
• Technical and security information: IP address, request time, app or device information, authentication and rate-limit events, crash details, and server logs that may be produced when you connect to our services.

How information is collected

We collect information that you enter, create, scan, import, or submit; information produced when the app performs identification, grading, synchronization, or subscription verification; information Apple provides for authentication and purchases; and limited technical information generated when the app communicates with our services. Card catalog and market providers also return card, listing, and pricing data in response to searches.

How we use information

• Create and secure registered accounts and guest sessions and authenticate requests. Registered accounts provide saved collections, scan history, and cross-device access. Guest sessions provide identification and pricing without personal registration or collection synchronization.
• Identify cards, generate AI-assisted condition and grading estimates, calculate collection values, provide pricing history, and operate price alerts.
• Verify purchases, restore entitlements, enforce plan limits, and provide subscription support.
• Respond to support requests, investigate errors, prevent abuse, protect the service, and comply with law.
• Improve identification and grading quality using optional analytics and feedback that you choose to submit.
• Maintain, debug, and improve app performance and reliability.

Service providers and disclosures

We disclose information only as needed to provide the feature you request, operate the service, protect users, or comply with law. Our current service categories include:

• Apple, for Sign in with Apple, StoreKit subscriptions, device permissions, and system sharing features.
• RevenueCat, for subscription offerings, purchase restoration, and entitlement status. This includes purchase records and the app account identifier used to associate subscriptions with your account.
• Supabase, for authentication, account records, databases, and private image storage, plus infrastructure providers that host and protect the Slabbies backend.
• Scrydex, when fallback visual identification is needed. A card's front image is sent through our backend for this request.
• AI model providers such as Google (Gemini) and Anthropic (Claude), when AI identification or grading is requested. Relevant card images and card context are sent through our backend to the selected provider so it can return a report.
• Card catalog and market-data providers such as Pokemon TCG API, JustTCG/TCGplayer, Cardmarket, eBay, PriceCharting, and Scrydex. These requests generally contain card identifiers or search terms rather than your account profile.
• A destination app or service that you select through an iOS share or export sheet. After you share or export information, the recipient's privacy practices apply.
• Authorities, advisers, or transaction participants when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or complete a reorganization or transfer of the service subject to appropriate protections.

No sale or behavioral advertising

We do not sell personal information, use it for third-party behavioral advertising, or share it for cross-context behavioral advertising. Slabbies does not display third-party ads.

Permissions and your choices

• Photo processing: before your first photo scan, Slabbies asks permission to send your selected or captured photos and related card details to its backend, Google (Gemini), Anthropic (Claude), Scrydex when needed, and Supabase for the purposes described above. Choose Not now to keep using features that do not need photo processing. You can withdraw permission in Profile → Photo processing to stop future photo processing. This does not delete previously saved data; use the separate deletion controls to do that.
• Camera and photos: the app removes embedded image metadata, including location, before uploading photos. Visible background details remain part of the image. Slabbies accesses the camera only after permission and receives only images you capture or select through Apple's picker. You can change camera access in iOS Settings.
• Notifications: Slabbies asks for permission in context when you enable alerts. You can disable notifications in iOS Settings without disabling the rest of the app.
• Analytics: Share product analytics is off by default and can be changed in Profile at any time. This setting does not stop operational records required to provide a scan, grading report, subscription, security, or voluntary feedback submission.
• Sharing and exports: you decide whether to export a CSV or share content and which destination receives it.

Retention

Registered-account records, including synced collection, scan, image, analytics, and feedback data, are generally kept while the account exists. Guest authentication, operational, and voluntarily submitted feedback records are generally kept while the guest session exists; guests do not create synced collection or scan archives. Any guest archives created by earlier versions remain associated with that guest identity until deleted. Delete account or Delete guest data removes the corresponding hosted identity, private cloud images, and user-owned database records. Account-linked grading diagnostics are deleted with the account. New operational diagnostics record request timing, usage and outcomes; they do not include full model responses, grading reports, card identifiers or provider error payloads.

Local data remains on your device until you delete it, delete the app, or erase the device. Subscription-verification, security, legal, and fraud-prevention records may be retained for as long as reasonably necessary for those purposes. Residual copies may remain temporarily in protected backups until ordinary backup rotation completes. We may retain aggregated or deidentified information that cannot reasonably be linked back to you.

Access, correction, export, and deletion

You can review and update profile information in the app, export your collection as CSV, remove individual AI grades, erase local data, and use Delete account or Delete guest data in Profile to delete the current hosted identity and its associated cloud data. Guest and registered identities are separate; deleting one does not delete data belonging to the other. Deleting the app alone does not delete hosted guest or registered data. Deleting a Slabbies account also does not cancel an Apple subscription; subscriptions must be managed separately through Apple.

Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability, or information about disclosures, and to appeal or complain to a regulator. We will not discriminate against you for exercising a privacy right. Email slabbiestcg@gmail.com to submit a request that is not available in the app; we may need to verify your identity.

Legal bases

Where applicable law requires a legal basis, we process information to perform our contract with you and provide requested features; with your consent, including optional analytics, notifications, and separately submitted feedback photos; for legitimate interests such as security, debugging, and service improvement that do not override your rights; and to comply with legal obligations. You may withdraw consent for future processing through the controls described above.

Security and international processing

We use reasonable administrative, technical, and organizational safeguards, including authenticated access and private cloud storage. No transmission or storage system can be guaranteed completely secure.

Our providers may process information in the United States and other countries where they operate. Those locations may have different data-protection laws. Where required, we rely on recognized transfer mechanisms and contractual protections.

Children

Slabbies is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information without the authorization required by law, email slabbiestcg@gmail.com so we can investigate and delete it.

Changes to this Policy

We may update this Policy when the app, our providers, or legal requirements change. We will update the effective date and provide additional notice in the app when a change is material.

Contact

For privacy questions or requests, email slabbiestcg@gmail.com. The App Provider identified on the Slabbies App Store product page is responsible for this Policy.