Privacy Policy
BinderScan · Effective date: [EFFECTIVE DATE] · Last updated: [DATE]
1. Who we are
BinderScan ("BinderScan," "we," "us") is a mobile app that lets collectors scan Pokémon trading cards, catalog them, and see estimated market values. BinderScan is operated by Stoddard Design Lab LLC, [ADDRESS]. This policy explains what information we collect through the app and website at binderscans.com, and how we use, share, and protect it.
BinderScan is an independent tool and is not affiliated with, endorsed by, or sponsored by The Pokémon Company, Nintendo, or any card grading company.
2. Information we collect
Information you provide
- Account information — your email address and, if you sign in with Google or Facebook, the basic profile information they share (such as your email). Passwords are handled by our authentication provider and are not stored by us in readable form.
- Profile information — the display name and profile photo you choose.
- Collection content — photos of the cards you scan, and the card details associated with them (name, set, number, condition, estimated value, and notes).
- Social content — posts and captions you share to the in-app Feed, and any seller/marketplace links you add to your public shops.
- Referrals — the referral code you share or redeem.
- Communications — the content of messages you send us for support or feedback.
Purchases
When you buy scan packs (or any other in-app purchase), payment is processed by Apple through the App Store. We receive confirmation of the purchase and a transaction identifier so we can add the scans to your account. We do not receive or store your payment card or financial account details.
Information collected automatically
We collect a limited amount of technical information needed to run and maintain the app, such as app version, device model and operating-system version (for support and diagnostics), and basic usage and error information. We do not track you across other companies' apps or websites, and we do not use your data for third-party advertising. (See our App Store privacy label and the app's Privacy Manifest for the categories of data we collect, which we keep consistent with this policy.)
3. Card photos & artificial intelligence
Identification. When you scan a card, the photo is sent to a third-party artificial-intelligence service (currently Google's Gemini API) that reads the image and returns the card's identity. The image is transmitted securely and used to perform the scan you requested.
Improving our scanner. We may retain cropped card images from reviewed scans, together with the identification and any correction you made, to measure and improve the accuracy of card recognition and to train future identification models. These are images of trading cards; we do not use them to identify you.
We also send card details (such as name, set, and number) to third-party card-pricing data providers to look up market values. We send card data, not personal information, for this purpose.
4. How we use information
- Provide, operate, and maintain the app and your account;
- Identify your cards and estimate their value, and keep your collection and value history up to date;
- Operate community features such as leaderboards, the Feed, and shops;
- Process purchases, apply scan allowances, and run the referral program;
- Respond to your support requests and send you service-related messages;
- Measure and improve the app, including the accuracy of card identification (see Section 3);
- Detect, prevent, and address fraud, abuse, and security issues; and
- Comply with legal obligations and enforce our Terms.
5. How we share information
We do not sell your personal information. We share information only as described here:
- Service providers who process data on our behalf under contract, including: our hosting, authentication, database, and storage provider (Supabase); the AI identification provider (Google); card-pricing data providers (for example pokemontcg.io and TCGdex); and Apple (for in-app purchases).
- Other users — certain information is public within the app (see Section 6).
- Legal and safety — to comply with law, respond to lawful requests, or protect the rights, property, or safety of BinderScan, our users, or others.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
6. Information others can see
Some information is visible to other BinderScan users by design:
- Your display name and profile photo, and your collection statistics (such as card count, total value, level, and trophies), where they appear on leaderboards and your public profile;
- Anything you deliberately post to the Feed; and
- The shop/marketplace links you choose to make public.
Your email address is never shown publicly. You control what you post to the Feed and which shops are public.
7. Retention & deletion
We keep your account information and collection content for as long as your account is active. You can permanently delete your account and its associated data at any time from the app (Collector Passport → Delete Account). After deletion, we may retain certain information where required for legal, security, or fraud-prevention reasons, and we may retain de-identified or aggregated information (such as anonymized card-price observations and training images of cards) that is not linked to you.
8. Your choices & rights
- Access and update your profile information in the app;
- Delete your account and data from the app;
- Camera and photo permissions can be changed at any time in your device's Settings;
- Depending on where you live, you may have additional rights — for example, under the EU/UK GDPR (access, correction, deletion, portability, objection) or the California CCPA/CPRA (know, delete, correct, and opt out of "sale"/"sharing," which we do not do). To exercise these rights, contact us using Section 13. [Confirm applicable regimes and add required region-specific disclosures with counsel.]
9. Children & age assurance
BinderScan is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it. [If you intend to serve younger users, additional COPPA/age-gating measures are required — review with counsel.]
App-store age signals. To comply with app-store accountability / age-verification laws in certain U.S. states (for example Texas, Utah, Louisiana, and California), your device's app store may share an age category or age-range signal with the app. We use this signal only to apply age-appropriate protections, to decide whether verifiable parental consent is required before you accept our Terms or make a purchase, and to comply with applicable law. We do not use it for advertising or profiling, we do not sell or share it with third parties, and we do not retain the transmitted age-verification data longer than needed to perform the verification (and we delete it afterward where the law so requires). We do not ask you for your date of birth, and age signals are never added to our analytics or marketing records. [COUNSEL REVIEW: confirm this matches the implemented mechanism (e.g., Apple Declared Age Range API), the retention/deletion rule per state (Texas requires deletion after verification), and that no age data flows to processors; align with the App Store Connect App Privacy questionnaire and PrivacyInfo.xcprivacy.]
10. Security
We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International users
BinderScan is operated from, and stores data in, the United States. If you use the app from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your country. [Add transfer mechanism/SCCs if serving the EEA/UK — review with counsel.]
12. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice in the app. Your continued use of BinderScan after an update means you accept the revised policy. For a minor's account, a material change may require us to re-request age verification or renewed parental consent before continued use. [COUNSEL REVIEW: re-consent trigger under applicable app-store accountability laws.]
13. Contact
Questions or requests about this policy or your data: support@binderscans.com [replace with monitored support address].