Privacy Policy

Information we collect

We collect the following categories of information:

• Account information. When you create an account, we collect your email address and any display name or avatar you provide. If you sign in with Google or Apple, we receive the email address and name you authorize them to share.
• Collection data. Cards you add to your portfolio, watchlist, or price alerts, along with any grades, quantities, cost basis, or notes you enter.
• Usage data. Product interactions such as searches, page views, feature clicks, and session duration. We use this to improve the product. On iOS we only collect usage data if you grant permission through the App Tracking Transparency prompt.
• Images. If you use the in-app card scanner, photos you capture or upload are sent to our servers to identify cards. We do not retain these images after identification completes.
• Device and log information. IP address, device type, operating system, app version, and crash logs needed to diagnose issues.

How we use your information

• Provide and maintain the Services, including saving your portfolio and watchlist.
• Send you price alerts and notifications you have enabled.
• Improve the product, understand how features are used, and debug issues.
• Communicate with you about service updates, billing (if applicable), and support requests.
• Detect and prevent fraud, abuse, and security incidents.

Service providers we share data with

We share information with the following third parties strictly to operate the Services:

• Supabase — database, authentication, and file storage.
• PostHog — product analytics and feature usage. On iOS, only activated after you grant App Tracking Transparency permission.
• Vercel — web hosting and delivery.
• Anthropic — powering the Dexter AI assistant. Messages you send to Dexter are transmitted to Anthropic solely to generate a response and are not used to train their models under our enterprise terms.
• Apple and Google — when you use Sign in with Apple or Sign in with Google.

We do not sell your personal information.

Data retention

We retain account and collection data for as long as your account is active. You may delete your account at any time from the profile settings; we remove your personal data within 30 days, except where retention is required by law or needed to resolve disputes. Aggregated, anonymized analytics may be retained indefinitely.

Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate information.
• Delete your account and personal information.
• Port your data to another service.
• Opt out of analytics and tracking. On iOS this is done through the App Tracking Transparency prompt and iOS Settings; on web via your browser's Do Not Track signal.

To delete your account and personal data, use our Data Deletion Request page. For any other privacy request, email grld.tcg.platform@gmail.com.

Children's privacy

GRLD is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced in the app or by email. Continued use after the effective date constitutes acceptance of the updated policy.

Contact us

Questions or concerns? Reach us at grld.tcg.platform@gmail.com.