Cardex Privacy Policy

Last updated: March 24, 2026

Cardex ("the App") is a trading card scanner and pricer for Android. This policy explains what data the App collects, how it is used, and your rights.

Data We Collect

Account Information

When you create an account or sign in (via email, Google, or Apple OAuth), we store your email address and optional display name. This is used solely to identify your account and sync your data across devices.

Camera & Photos

The App uses your device camera to scan trading cards. Images are processed on-device for card recognition and are not stored on our servers. When using AI-assisted recognition, cropped card images may be sent to Google Gemini for processing and are not retained.

Voice Recordings

If you use voice search, audio is recorded temporarily, sent to Google Gemini for transcription, and immediately discarded. We do not store voice recordings.

Card Collection Data

Your scanned cards, collections, and price history are stored locally on your device. If signed in, collection data is synced to our servers so you can access it across devices.

Crash Reports

We use Firebase Crashlytics to collect anonymous crash reports. These contain device model, OS version, and stack traces but no personal information, card data, or images.

Analytics

We use Firebase Analytics to collect anonymous usage statistics (screen views, feature usage). No personal information or card data is included.

Purchase Data

In-app purchases are processed through Google Play Billing via RevenueCat. We do not store payment details — these are handled entirely by Google and RevenueCat.

Third-Party Services

• Firebase (Google) — Authentication, crash reporting, analytics, push notifications. Privacy Policy
• RevenueCat — Subscription and purchase management. Privacy Policy
• Google Gemini API — Card recognition and voice transcription. Terms
• TCGPlayer — Card pricing data. Privacy Policy
• PriceCharting — Alternative pricing data. Privacy Policy

Data Storage & Security

• Account credentials are managed by Firebase Auth and are never stored in plain text.
• Sensitive data (scan credits, session tokens) is stored in Android Keystore-backed encrypted storage.
• All network communication uses HTTPS/TLS encryption.
• Card data and AI embeddings are stored locally on your device in an encrypted database.

Your Rights

• Access & Export: You can view all your data within the App.
• Deletion: You can permanently delete your account and all server-side data from Settings > Delete Account. This removes your profile, collections, and preferences from our servers and deletes your Firebase account.
• Opt-out: You can use the App without creating an account. Camera and microphone permissions can be revoked at any time through device settings.

Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted at this URL with an updated date.

Contact

Questions? Email josborn619@yahoo.com.