Privacy Policy
This Privacy Policy describes how Apparent Group ("we", "us", or "our") collects, uses, and discloses your information when you use the TCG Brain mobile application (the "App"). We respect your privacy and are committed to handling your information responsibly and transparently.
1. Information We Collect
Account information
When you create an account or sign in, we collect the information you provide directly, such as your email address, display name, and a unique account identifier. If you sign in with Google or Apple, we receive the basic profile information those providers share with us (email, name, and a stable user ID). We do not receive your password.
User content
When you scan or upload a card, ask a question, or save a card to your collection, we collect the photos, text prompts, and metadata you submit. These are stored in your account so you can access them across devices.
Device and usage information
We collect limited technical data such as device model, operating system version, app version, language, crash diagnostics, and basic usage events (for example, that a scan was performed). This helps us debug issues and improve the App.
Advertising and device identifiers
The App collects device identifiers that are used for advertising measurement and analytics. These are:
- Android advertising ID (AAID) - Google's resettable advertising identifier, collected on Android devices. If you have enabled "Opt out of Ads Personalisation" on your device, we do not collect it.
- Advertising Identifier (IDFA) - Apple's advertising identifier, collected on iOS only if you grant permission when the App Tracking Transparency prompt appears. If you decline, we do not collect it.
- Vendor and device identifiers - the Identifier for Vendor (IDFV) on iOS and the Android ID, which distinguish your installation of the App.
- A pseudonymous account reference - your account identifier and a one-way (SHA-256) hash of your email address. The hash cannot be reversed to recover your email address.
We use these identifiers to measure the performance of our advertising - for example, to understand that an app install, a free trial, or a subscription resulted from a particular campaign - and to produce aggregate analytics about how the App is used. We do not use them to build advertising profiles about you, and the App does not display any advertising.
How to opt out. On Android, open Settings > Privacy > Ads and choose "Delete advertising ID" (or "Opt out of Ads Personalisation" on older versions). On iOS, open Settings > Privacy & Security > Tracking and turn off "Allow Apps to Request to Track", or disable tracking for TCG Brain individually. You can also delete your account at any time, which removes the associated account reference (see section 12).
Subscription and purchase information
When you purchase or manage a subscription, we receive a transaction receipt and subscription status from Apple or Google through our subscription management provider, Adapty. We do not receive or store your full payment card details. Apple and Google handle the actual payment.
2. Camera and Photo Library Access
The App requests access to your camera and photo library so you can scan trading cards. We only access photos that you explicitly select or capture inside the App. We do not scan, upload, or monitor your photo library in the background. Access is used solely to perform the requested action (a scan, an "ask" query, or saving a card image to your collection).
3. How We Use Information
- To authenticate you and keep your account secure.
- To provide core features: card identification, "ask" question answers, collection management, and price/condition lookups.
- To process and validate your subscription.
- To diagnose crashes, monitor performance, and improve the App.
- To measure the performance of our advertising and produce aggregate analytics, using the identifiers described in section 1.
- To send important transactional emails such as email verification, password resets, and subscription notices.
- To comply with legal obligations and enforce our Terms of Service.
4. Third-Party Services We Use
We use a small number of trusted third-party processors to operate the App. Each processor only receives the information it needs for its function.
- Firebase (Google LLC) - We use Firebase Authentication to sign you in, Firebase Firestore to store account data and your card collection, and Firebase Storage to store card images you save. Firebase may process limited diagnostic data.
- Adapty - Subscription management and entitlement validation. Adapty receives your transaction receipts and a pseudonymous user ID to determine your subscription status.
- DashScope (Alibaba Cloud) - AI-based card identification. Card images and prompts are sent through our Cloud Function proxy to the DashScope model only to compute a response. We do not authorize DashScope to retain your images for training, and our proxy does not store the image after the response is returned.
- Meta Platforms, Inc. - Advertising measurement. Where this measurement is enabled, the App reports events such as registering, starting a free trial, or subscribing, together with the device identifiers described in section 1 and the product and price involved, so that Meta can attribute the action to an advertising campaign. The App does not display Meta advertising and does not use the Meta Audience Network.
- ZeptoMail (Zoho Corporation) - Transactional email delivery (verification, password reset, receipts). ZeptoMail receives your email address and message content.
- Google Sign-In and Apple Sign-In - Federated authentication. These providers share basic profile information with us when you choose to sign in with them.
5. How We Share Information
We do not sell your personal information. We share information only:
- With the third-party processors listed above, to operate the App and to measure the performance of our advertising as described in sections 1 and 4.
- If required by law, subpoena, or other valid legal process.
- To protect the rights, property, or safety of our users, ourselves, or others.
- In connection with a merger, acquisition, or sale of assets, in which case we will provide notice before your information is transferred.
6. Data Retention
We retain your account information and user content for as long as your account is active. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce agreements. AI identification requests sent through our Cloud Function proxy are processed in memory and the image is not retained on our servers after the response is generated.
7. Data Security
We use industry-standard safeguards including TLS in transit, encrypted storage at rest through Firebase, and least-privilege server access. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information.
8. Children's Privacy
The App is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
9. Your Rights (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to: access, correct, or delete your personal data; restrict or object to processing; data portability; and withdraw consent at any time. Our legal bases for processing are: performance of a contract (providing the App), legitimate interests (security, debugging, improvement), consent (where required for marketing or optional features), and legal obligation. To exercise these rights, email us at the address below. You also have the right to lodge a complaint with your local supervisory authority.
10. Your Rights (CCPA / California)
If you are a California resident, you have the right to know what personal information we collect, the purposes for which it is used, and the categories of third parties with whom it is shared; to request deletion of your personal information; and to not be discriminated against for exercising these rights. We do not sell personal information as defined by the CCPA. To submit a request, email us at the address below.
11. International Data Transfers
Our processors may store and process information in the United States and other countries. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.
12. Account Deletion
You can delete your account at any time from inside the App under Settings. Deleting your account removes your profile, saved cards, and associated content from our active systems. Subscription billing is managed by Apple or Google; you may need to cancel your subscription separately through your device's subscription settings.
Step-by-step instructions, including how to ask us to delete the account for you, are on the Delete Account page.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, where appropriate, notify you in the App. Your continued use of the App after the update means you accept the revised policy.
14. Contact
If you have questions about this Privacy Policy or want to exercise your rights, contact us at: hello@apparentgroup.co