Privacy Policy

Who we are and what this covers

Slabbies is operated by the application provider identified on the Slabbies App Store product page (the "App Provider," "we," "us," or "our"). This Privacy Policy explains how we handle information through the Slabbies iOS app, our backend services, and support interactions.

This Policy does not govern websites, marketplaces, grading companies, or other services that you choose to visit or use independently.

Information we collect

• Account and authentication information: email address, username, optional display name, account identifier, and authentication records. Sign in with Apple may provide an Apple account identifier and, depending on your choice, your name or an Apple relay email address.
• Collection information: card identities, quantities, owned or wanted status, purchase details you enter, notes, binder or collection organization, saved grades, valuation snapshots, and related history.
• Scans and images: card photos selected from your library or captured with the camera, including front, back, surface, corner, and edge images; scan timestamps; identification results; and saved scan history. For signed-in accounts, completed scan images and records are uploaded to private cloud storage so they can be restored across devices.
• Identification and grading information: card context, AI-generated grading reports, predicted grades, model or provider information, request identifiers, processing time, token-use totals, errors, and other diagnostics used to deliver and evaluate the feature.
• Subscription information: StoreKit product identifier, transaction or entitlement status, renewal or expiration information, and verification records. Apple processes payment details; we do not receive your full payment-card number.
• Optional analytics: if you enable Share product analytics in Profile, we collect account-linked identification outcomes, confidence, corrections, and retake reasons. This setting is off by default.
• Feedback: grading feedback, wrong-match reports, corrected card identifiers, comments, and any photo you separately choose to include with feedback.
• Alerts and settings: price-alert targets, notification preferences, grading preferences, appearance settings, and other app configuration. Price-alert notifications are scheduled locally on your device; Slabbies does not currently use a push-notification token for these alerts.
• Technical and security information: IP address, request time, app or device information, authentication and rate-limit events, crash details, and server logs that may be produced when you connect to our services.

How information is collected

We collect information that you enter, create, scan, import, or submit; information produced when the app performs identification, grading, synchronization, or subscription verification; information Apple provides for authentication and purchases; and limited technical information generated when the app communicates with our services. Card catalog and market providers also return card, listing, and pricing data in response to searches.

How we use information

• Create and secure your account, authenticate sessions, and provide cross-device collection and scan history.
• Identify cards, generate AI-assisted condition and grading estimates, calculate collection values, provide pricing history, and operate price alerts.
• Verify purchases, restore entitlements, enforce plan limits, and provide subscription support.
• Respond to support requests, investigate errors, prevent abuse, protect the service, and comply with law.
• Improve identification and grading quality using optional analytics and feedback that you choose to submit.
• Maintain, debug, and improve app performance and reliability.

Service providers and disclosures

We disclose information only as needed to provide the feature you request, operate the service, protect users, or comply with law. Our current service categories include:

• Apple, for Sign in with Apple, StoreKit subscriptions, device permissions, and system sharing features.
• RevenueCat, for subscription offerings, purchase restoration, and entitlement status. This includes purchase records and the app account identifier used to associate subscriptions with your account.
• Supabase, for authentication, account records, databases, and private image storage, plus infrastructure providers that host and protect the Slabbies backend.
• Scrydex, when fallback visual identification is needed. A card's front image is sent through our backend for this request.
• AI model providers such as Google (Gemini) and Anthropic (Claude), when AI identification or grading is requested. Relevant card images and card context are sent through our backend to the selected provider so it can return a report.
• Card catalog and market-data providers such as Pokemon TCG API, JustTCG/TCGplayer, Cardmarket, eBay, PriceCharting, and Scrydex. These requests generally contain card identifiers or search terms rather than your account profile.
• A destination app or service that you select through an iOS share or export sheet. After you share or export information, the recipient's privacy practices apply.
• Authorities, advisers, or transaction participants when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or complete a reorganization or transfer of the service subject to appropriate protections.

No sale or behavioral advertising

We do not sell personal information, use it for third-party behavioral advertising, or share it for cross-context behavioral advertising. Slabbies does not display third-party ads.

Permissions and your choices

• Photo processing: before your first scan, we ask permission to send your selected or captured card photos and card details to our backend and the providers named in the photo-processing notice. You may decline and keep browsing, or turn off future photo processing in Profile. This does not delete previously saved scans; account deletion and local-data controls are separate.
• Camera and photos: Slabbies accesses the camera only after permission and receives only images you capture or select through Apple's picker. You can change camera access in iOS Settings.
• Notifications: Slabbies asks for permission in context when you enable alerts. You can disable notifications in iOS Settings without disabling the rest of the app.
• Analytics: Share product analytics is off by default and can be changed in Profile at any time. This setting does not stop operational records required to provide a scan, grading report, subscription, security, or voluntary feedback submission.
• Sharing and exports: you decide whether to export a CSV or share content and which destination receives it.

Retention

Account records and synced collection, scan, image, analytics, and feedback data are generally kept while your account is active. Account deletion removes the account, private cloud images, and user-owned database records. Operational grading telemetry may be retained without your account identifier to measure reliability, prevent abuse, and improve the service.

Local data remains on your device until you delete it, delete the app, or erase the device. Subscription-verification, security, legal, and fraud-prevention records may be retained for as long as reasonably necessary for those purposes. Residual copies may remain temporarily in protected backups until ordinary backup rotation completes. We may retain aggregated or deidentified information that cannot reasonably be linked back to you.

Access, correction, export, and deletion

You can review and update profile information in the app, export your collection as CSV, remove individual AI grades, erase local data, and delete your Slabbies account and associated cloud data from Profile. Deleting the app alone does not delete a hosted account. Deleting a Slabbies account also does not cancel an Apple subscription; subscriptions must be managed separately through Apple.

Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability, or information about disclosures, and to appeal or complain to a regulator. We will not discriminate against you for exercising a privacy right. Use the support contact on the App Store product page to submit a request that is not available in the app; we may need to verify your identity.

Legal bases

Where applicable law requires a legal basis, we process information to perform our contract with you and provide requested features; with your consent, including optional analytics, notifications, and separately submitted feedback photos; for legitimate interests such as security, debugging, and service improvement that do not override your rights; and to comply with legal obligations. You may withdraw consent for future processing through the controls described above.

Security and international processing

We use reasonable administrative, technical, and organizational safeguards, including authenticated access and private cloud storage. No transmission or storage system can be guaranteed completely secure.

Our providers may process information in the United States and other countries where they operate. Those locations may have different data-protection laws. Where required, we rely on recognized transfer mechanisms and contractual protections.

Children

Slabbies is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information without the authorization required by law, contact us through the App Store product page so we can investigate and delete it.

Changes to this Policy

We may update this Policy when the app, our providers, or legal requirements change. We will update the effective date and provide additional notice in the app when a change is material.

Contact

For privacy questions or requests, use the support contact identified on the Slabbies App Store product page. The App Provider listed there is responsible for this Policy.