privacy

Trackr TCG (“Trackr,” “we,” “us”) operates the Trackr TCG mobile app and the website at trackrtcg.com. This Privacy Policy explains what we collect, why, and what control you have.

When you sign up: your email address and a hashed password (handled by Supabase Auth — we never see your plaintext password). When you sign in with Apple: an opaque user identifier and optionally your name/email if you grant access. You can also use Trackr anonymously (no email) for up to 3 scans; signing up converts that anonymous identity into your permanent account without losing any data.

Cards you scan and save — including the card variant, condition, grade, purchase price, and quantity — are stored against your account. PSA cert numbers you scan are verified against PSA's public lookup and the verified grade is stored alongside the cert number. We never share your collection contents publicly unless you explicitly mark your profile as public (Settings → Edit profile → Public profile).

The image you capture when scanning a card is uploaded to Trackr's storage only when our on-device pHash match cannot identify the card (the “slow path”). The image is used to run a vision model (Claude or Gemini), then deleted from active storage within 7 days. We never use scan images for advertising or train any model on them.

We generate a non-personally-identifiable device fingerprint (per Expo Application's installation ID) and use it to enforce the free scan quota across reinstalls and signed-out sessions. It is not linked to your real identity, advertising ID, or any social profile.

If you subscribe to Trackr Pro, the purchase is processed by Apple (iOS) or Google (Android). We use RevenueCat to receive subscription status (active/canceled/expired) for your account. We never receive your credit card or bank details — those stay with Apple or Google.

We do not run any advertising SDKs. We do not sell, rent, or share your data with advertisers. We do not track your activity outside of the app or the website. We do not collect your contacts, photos library, or location.

• Run the app: store your collection, sync between devices, render market prices. • Improve the product: aggregated, de-identified usage metrics (e.g. “scans per day”). • Communicate with you: transactional emails (subscription receipts, password resets) and, if you opt in, weekly portfolio performance summaries.

We use the following processors, all subject to data-processing agreements:

• Supabase — primary database, auth, and storage. Hosted in the US. • RevenueCat — subscription state management. • Apple Inc. / Google LLC — payment processing for in-app subscriptions. • Anthropic / Google AI — vision models used to identify cards when the local match fails. Images are processed transiently and not retained by these providers beyond their stated retention windows. • Pokemon Price Tracker / Apify — market price data providers we query on your behalf. We send card identifiers, never your account identifiers. • EAS (Expo Application Services) — over-the-air updates and analytics.

You can: (a) export your collection at any time as CSV (Pro feature); (b) edit or delete any saved card (Pro feature — free accounts cannot edit/delete saved cards but can request a full account deletion at any time); (c) request a full export of every byte of data we hold about you by emailing privacy@trackrtcg.com; (d) request permanent deletion of your account and all associated data via the in-app Delete Account button or by emailing privacy@trackrtcg.com.

• Account data: until you delete your account. • Scan images: 7 days, then deleted. • Subscription receipts: 7 years (US tax-law retention requirement). • Aggregated analytics: indefinite, but with no personally-identifiable link back to you.

Trackr is not directed to children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, email privacy@trackrtcg.com and we will delete it.

We may update this policy when we add new product capabilities or change processors. The “Last updated” date at the top of this page always reflects the current version. Material changes (new categories of data, new third parties) will be announced in-app before they take effect.

For any privacy question: privacy@trackrtcg.com. Trackr TCG, operated by Calientalo Media LLC.