Privacy Policy

Last updated: October 16, 2026

PokéScan: TCG Card Scanner ("PokéScan", "we", "our", or "us") is published by MapleByte. This Privacy Policy explains what information we collect, how we process card scans and collection data, and how you can control or delete your data.

1. Information We Collect

Guest & Optional Account Data: You can use PokéScan immediately as a guest without creating an account. A secure anonymous session token is stored on your device. If you choose to sign in (via Sign in with Apple, Google Sign-In, or email one-time passcode), we process your authentication identifier and email address via Supabase Auth to sync your collection across devices.
Card Scans & Photos: When you photograph or import a trading card to identify it, the cropped card image is transmitted securely to our recognition service to extract visible card details (name, set, number, language, and variant). Temporary scan images are processed transiently for recognition and are not used to train public AI models. Optional personal photos attached to holdings remain stored locally on your device unless cloud photo sync is explicitly enabled.
Collection, Portfolio & Preferences: Cards you save to your collection, custom binders/folders, condition or grading details, purchase costs, wishlists, scan history, and display preferences (such as currency and language) are stored locally on your device and synced to our secure backend database so your portfolio stays backed up.
Subscription & Billing Data (RevenueCat): If you subscribe to PokéScan Pro, subscription status and entitlement identifiers (pokemon_pro) are processed through Apple App Store, Google Play Billing, and RevenueCat. We never receive or store your credit card numbers or payment credentials.
Diagnostics & Support Communications: We may collect basic diagnostic logs and anonymous usage metrics to prevent abuse, enforce scan quotas, and fix crashes. If you contact us by email, we receive your email address and any details you choose to share.

2. How We Use Your Information

To identify Pokémon and trading cards from camera scans or imported photos and match them against catalog records.
To provide estimated market values, graded slab comparisons, set checklists, and portfolio totals in your chosen currency.
To store, back up, and export (CSV/JSON) your card collection, folders, and wishlist.
To verify PokéScan Pro subscription entitlements and manage scan allowances.
To respond to customer support inquiries and maintain service security and reliability.

3. Third-Party Services

We do not sell your personal information to third parties. To deliver core app functionality, PokéScan relies on trusted infrastructure and service providers that process limited data strictly on our behalf:

Apple App Store & Google Play / RevenueCat: For in-app purchase processing, receipt validation, and subscription management.
Supabase: For optional user authentication (Apple, Google, and email OTP sign-in).
Railway & Cloud Infrastructure: For secure API hosting and collection database storage.
AI Vision & Catalog/Pricing Providers: For extracting card text/attributes from scan images and retrieving catalog metadata and market price references.

4. Data Retention & Account Deletion

Collection & Account Data: Your collection records are retained for as long as you maintain your guest session or registered account.
In-App Deletion: You can delete individual holdings, folders, or your entire account and associated server-side collection data at any time directly inside PokéScan under Settings → Account → Delete Account, or by emailing us at support@maplebyte.xyz.
Local Data: Uninstalling the app removes local files, cached images, and device tokens stored on your phone.

5. Camera & Photo Library Permissions

PokéScan requests access to your device Camera and Photo Library solely when you choose to scan a trading card or attach a photo to a card in your collection. You can revoke these permissions at any time in your device system settings.

6. Children's Privacy

PokéScan is a general-audience collector utility and does not knowingly collect personal information from children under 13 (or the applicable age of digital consent in your jurisdiction). If you believe a child has submitted personal data to us, please contact us so we can promptly delete it.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect new features or regulatory requirements. Any updates will be posted on this page with a revised "Last updated" date.

8. Contact Us

If you have any questions about this Privacy Policy, data export, or account deletion, please contact us at:

support@maplebyte.xyz or admin@maplebyte.xyz