Card Coin
Privacy Policy
Card Coin (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how information is handled when you use the Card Coin mobile application (the “App”).
Summary
- No Card Coin account — you do not register with us.
- AI estimates only — no bring-your-own-key market API; short-lived token and privacy-oriented device signals for free-tier quota; we do not sell personal data.
- AI model quality (optional preference) — your selected quality tier may be sent with estimate requests so the backend can route the right model.
- Scan to fill (optional) — on-device OCR from a card photo; images are not uploaded for recognition.
- Search history — on your device; delete anytime.
- No advertising SDKs / no third-party analytics in the App.
On your device only
| Data | Purpose | Leaves device? |
|---|---|---|
| Recent search list | History, retry, reload | No |
| Theme / sound / model-quality preferences | Settings | No (quality selection is also sent with each AI request when you run an estimate) |
| Cached AI write-ups (~7 days) | Faster re-lookups | No |
| Scan-to-fill photos (temporary) | On-device OCR to prefill card fields | No (not uploaded for OCR; not saved to search history). Camera/gallery picks may create a short-lived cache file that the App deletes after recognition. |
When you use AI estimates
The App contacts Card Coin’s cloud backend (AWS). That path may process:
- App-generated install / device identifiers (not your name or email) for anonymous quota
- Coarse device signals (e.g. OS, app version) for privacy-preserving quota identity
- Card name, set, year, grade/grader, and category signals you submit — to produce the estimate
- Selected AI model quality tier — to route inference
- Short-lived JWT and remaining free searches
AI inference is performed via xAI (or a successor) under our backend account. Do not enter secrets or personal data into search fields. Free-tier usage is limited on a rolling ~30-day window.
Scan to fill (optional)
If you use Scan to fill, the App reads text from a photo you take or choose (trading card face or similar) using on-device text recognition (Google ML Kit on iOS/Android). That image is used only to suggest form fields (e.g. name, set, year). You can edit those fields before any search. Photos from this flow are not uploaded for OCR, not attached to search history, and not retained as app data after recognition when cleanup succeeds.
How we use information
- Provide AI card price estimates
- Prefill search fields from optional on-device card scans
- Enforce free-tier AI quota and protect the service from abuse
- Route the model quality you select
- Operational reliability (errors, latency logs)
We do not sell personal information or use App data for third-party advertising.
Third-party services
- xAI (via our backend) — AI estimates
- Amazon Web Services — hosts the AI backend
- Google ML Kit — optional on-device text recognition for Scan to fill (no Card Coin upload of the photo)
Retention
- On device: until you delete history, clear app data, or uninstall
- AI cache: about 7 days on device
- Scan-to-fill temp images: deleted after recognition when cleanup succeeds
- Backend quota records: limited rolling window (~35 days), then expire
Security
Tokens use platform secure storage where applicable. Network calls use HTTPS. No measure is perfect.
Children’s privacy
The App is not directed to children under 13. We do not knowingly collect personal information from children under 13.
Your choices
- Skip Scan to fill and type fields manually
- Choose AI model quality when offered
- Delete search history in the App
- Clear app storage / uninstall to remove local data
Changes
We may update this Policy by changing the Effective Date and posting the new version at this URL.
Contact
www.cardcoin.app · Feature Rich · GitHub · Support issues
Card Coin is not affiliated with Pokémon, The Pokémon Company, Nintendo, PSA, BGS, CGC, SGC, or any team, league, or grading company. Sister product to Comic Coin.