Privacy Policy

1. Information We Collect

1.1 Information You Provide

We may collect information that you voluntarily provide when using the App:

• Card Images: Photos you take of Pokemon cards for identification purposes
• Collection Data: Information about Pokemon cards you save to your collection
• User Preferences: Settings and preferences you configure in the App
• Support Communications: Information you provide when contacting us for support

Important: Pulldex does not require you to create an account. All data is stored locally on your device and synced via your personal iCloud account.

1.2 Information Collected Automatically

When you use the App, we may automatically collect:

• Device Information: Device type, operating system version, and unique device identifiers
• Usage Data: How you interact with the App, features used, and time spent
• Crash Reports: Technical data about app crashes and errors to improve stability
• Performance Data: App performance metrics and diagnostics

1.3 Camera Access

The App requires camera access to scan Pokemon cards. We only access your camera when you actively use the scanning feature. Photos taken for card recognition are:

• Processed locally on your device when possible
• Sent to Ximilar (our recognition service provider) only for identification purposes
• Not stored on our servers or Ximilar's servers after recognition is complete
• Not shared with third parties for advertising purposes
• Never stored or transmitted unless you are actively using the scan feature

1.4 Subscription Information

If you purchase a subscription:

• Payment and subscription management is handled entirely by Apple through the App Store
• We do not collect or store your payment information
• We only receive anonymous subscription status information to enable premium features

2. How We Use Your Information

We use the collected information for the following purposes:

• Card Recognition: To identify Pokemon cards you scan and provide detailed information
• Collection Management: To store and display your saved Pokemon card collection locally and via iCloud
• Pricing Data: To fetch and display current market prices for Pokemon cards (subscription feature)
• Service Improvement: To analyze anonymized usage patterns through Mixpanel and improve the App
• Technical Support: To respond to your inquiries and provide assistance
• Bug Fixes: To identify and resolve technical issues
• Security: To detect and prevent fraud or unauthorized access

3. Third-Party Services

We use the following third-party services to provide features of the App:

3.1 Ximilar (Card Recognition)

We use Ximilar's API to identify Pokemon cards from images. When you scan a card:

• The image is sent securely to Ximilar's servers using encrypted connections
• Ximilar returns card identification data
• Images are not permanently stored by Ximilar after processing
• Ximilar does not use your images for advertising or other purposes

Ximilar's privacy practices are governed by their privacy policy.

3.2 Scrydex (Pricing Data)

We use Scrydex's API to fetch current Pokemon card market prices (available with subscription). When pricing is requested:

• Card identifiers are sent to Scrydex to retrieve pricing information
• No personal information or images are shared with Scrydex
• Pricing data is cached locally to improve performance

Scrydex's privacy practices are governed by their privacy policy.

3.3 Mixpanel (Analytics)

We use Mixpanel to understand App usage and improve user experience. Mixpanel collects:

• Anonymized usage data (which features you use, how often, etc.)
• Device information (type, OS version)
• Anonymous identifiers (not linked to your personal identity)
• App performance metrics

Mixpanel does not collect personally identifiable information. You can learn more about Mixpanel's privacy practices in their privacy policy.

3.4 Apple iCloud

We use Apple iCloud to sync your Pokemon card collection across your devices. When iCloud sync is enabled:

• Your collection data is stored in your personal iCloud account
• Data is encrypted in transit and at rest by Apple
• We do not have access to your iCloud data
• You can disable iCloud sync at any time in your device Settings

iCloud is governed by Apple's iCloud Terms of Service and Privacy Policy.

3.5 Apple App Store and Services

As an iOS app, we integrate with Apple services for:

• App Store distribution and updates
• In-app purchase and subscription management
• Crash reporting and diagnostics (optional)

Apple's privacy practices are governed by their privacy policy.

4. Data Storage and Security

4.1 Local and iCloud Storage

Your Pokemon card collection and preferences are stored locally on your device and optionally synced via iCloud. This data includes:

• Saved card information and images
• Scan history
• App settings and preferences
• Subscription status

No Account Required: We do not maintain user accounts or store your data on our servers. Everything is stored locally on your device or in your personal iCloud account.

4.2 Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Secure data transmission using HTTPS/TLS encryption
• Secure storage of sensitive data using iOS Keychain
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis

4.3 Data Retention

We retain your data as follows:

• Local/iCloud Data: Stored on your device and iCloud until you delete the App, disable iCloud sync, or manually delete your collection
• Recognition Images: Processed in real-time by Ximilar and not permanently stored anywhere
• Analytics Data: Anonymized usage data retained by Mixpanel for up to 24 months
• Support Communications: Retained only as long as necessary to provide support

5. Your Rights and Choices

You have certain rights regarding your personal information:

5.1 Access and Portability

You can view all Pokemon cards saved in your collection directly in the App. Since all data is stored locally and in your iCloud account, you have complete access to your data at all times.

5.2 Deletion

You can delete:

• Individual cards from your collection within the App
• Your entire card collection from the App settings
• All local App data by uninstalling the App
• iCloud data by disabling iCloud sync or deleting the App's iCloud data from your device Settings

5.3 Camera Permissions

You can revoke camera access at any time through your device's Settings (Settings → Privacy & Security → Camera → Pulldex). Note that the scanning feature will not work without camera access.

5.4 iCloud Sync Control

You can enable or disable iCloud synchronization at any time in your device's Settings. Disabling iCloud will keep your collection stored only on your local device.

5.5 Analytics Opt-Out

You can limit analytics data collection through your device's privacy settings (Settings → Privacy & Security → Analytics & Improvements).

6. Age Requirements and Children's Privacy

Pulldex is rated 16+ on the App Store and is intended for users aged 16 and older. We do not knowingly collect personal information from users under 16 without parental consent.

If you are a parent or guardian and believe your child under 16 has used the App without your consent, please contact us at pavelmiklos1@gmail.com. Since all data is stored locally on the device and in iCloud, you can delete the App and its data from your child's device at any time.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the App, you consent to the transfer of your information to these countries.

We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Since we don't maintain accounts or store your data on our servers, all your personal information (your card collection) is already accessible to you in the App and your iCloud account
• Right to Delete: You can delete your personal information at any time by deleting cards, clearing your collection, or uninstalling the App
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Do Not Sell: We do not sell your personal information to third parties
• Data We Collect: We only collect device information and anonymized analytics through Mixpanel, and card images temporarily for recognition purposes

To exercise these rights, you can manage your data directly in the App or contact us at pavelmiklos1@gmail.com.

9. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: Your personal data (your Pokemon card collection) is always accessible in the App
• Right to Rectification: You can edit or correct your collection data directly in the App
• Right to Erasure: You can delete your data at any time by removing cards or uninstalling the App ("right to be forgotten")
• Right to Restrict Processing: You can disable specific features like iCloud sync or analytics
• Right to Data Portability: Your collection is stored in standard formats in your iCloud account
• Right to Object: You can object to analytics processing by disabling it in your device settings

Legal Basis for Processing: We process your data based on:

• Your consent when using the App's features
• Contractual necessity to provide the services you request
• Legitimate interests in improving the App and providing support

To exercise these rights or for questions, please contact us at pavelmiklos1@gmail.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending an in-app notification for significant changes

We encourage you to review this Privacy Policy periodically for any changes.

11. Data We Share

We want to be transparent about data sharing:

• With Ximilar: Card images temporarily for recognition purposes only
• With Scrydex: Card identifiers (not personal information) to fetch pricing data
• With Mixpanel: Anonymized usage analytics and device information
• With Apple: Anonymous subscription status for feature access; your collection via your iCloud account
• We DO NOT: Sell your data, share it with advertisers, or provide it to any other third parties

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• Developer: Miklos Pavel
• Email: pavelmiklos1@gmail.com

We will respond to privacy inquiries within 30 days.