Privacy Policy
This Privacy Policy describes how Apparent Group ("we", "us", or "our") collects, uses, and discloses your information when you use the TCG Brain mobile application (the "App"). We respect your privacy and are committed to handling your information responsibly and transparently.
1. Information We Collect
Account information
When you create an account or sign in, we collect the information you provide directly, such as your email address, display name, and a unique account identifier. If you sign in with Google or Apple, we receive the basic profile information those providers share with us (email, name, and a stable user ID). We do not receive your password.
User content
When you scan or upload a card, ask a question, or save a card to your collection, we collect the photos, text prompts, and metadata you submit. These are stored in your account so you can access them across devices.
Device and usage information
We collect limited technical data such as device model, operating system version, app version, language, crash diagnostics, and basic usage events (for example, that a scan was performed). This helps us debug issues and improve the App.
Subscription and purchase information
When you purchase or manage a subscription, we receive a transaction receipt and subscription status from Apple or Google through our subscription management provider, Adapty. We do not receive or store your full payment card details. Apple and Google handle the actual payment.
2. Camera and Photo Library Access
The App requests access to your camera and photo library so you can scan trading cards. We only access photos that you explicitly select or capture inside the App. We do not scan, upload, or monitor your photo library in the background. Access is used solely to perform the requested action (a scan, an "ask" query, or saving a card image to your collection).
3. How We Use Information
- To authenticate you and keep your account secure.
- To provide core features: card identification, "ask" question answers, collection management, and price/condition lookups.
- To process and validate your subscription.
- To diagnose crashes, monitor performance, and improve the App.
- To send important transactional emails such as email verification, password resets, and subscription notices.
- To comply with legal obligations and enforce our Terms of Service.
4. Third-Party Services We Use
We use a small number of trusted third-party processors to operate the App. Each processor only receives the information it needs for its function.
- Firebase (Google LLC) - We use Firebase Authentication to sign you in, Firebase Firestore to store account data and your card collection, and Firebase Storage to store card images you save. Firebase may process limited diagnostic data.
- Adapty - Subscription management and entitlement validation. Adapty receives your transaction receipts and a pseudonymous user ID to determine your subscription status.
- DashScope (Alibaba Cloud) - AI-based card identification. Card images and prompts are sent through our Cloud Function proxy to the DashScope model only to compute a response. We do not authorize DashScope to retain your images for training, and our proxy does not store the image after the response is returned.
- SendGrid (Twilio Inc.) - Transactional email delivery (verification, password reset, receipts). SendGrid receives your email address and message content.
- Google Sign-In and Apple Sign-In - Federated authentication. These providers share basic profile information with us when you choose to sign in with them.
5. How We Share Information
We do not sell your personal information. We share information only:
- With the third-party processors listed above, strictly to operate the App.
- If required by law, subpoena, or other valid legal process.
- To protect the rights, property, or safety of our users, ourselves, or others.
- In connection with a merger, acquisition, or sale of assets, in which case we will provide notice before your information is transferred.
6. Data Retention
We retain your account information and user content for as long as your account is active. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce agreements. AI identification requests sent through our Cloud Function proxy are processed in memory and the image is not retained on our servers after the response is generated.
7. Data Security
We use industry-standard safeguards including TLS in transit, encrypted storage at rest through Firebase, and least-privilege server access. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information.
8. Children's Privacy
The App is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
9. Your Rights (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to: access, correct, or delete your personal data; restrict or object to processing; data portability; and withdraw consent at any time. Our legal bases for processing are: performance of a contract (providing the App), legitimate interests (security, debugging, improvement), consent (where required for marketing or optional features), and legal obligation. To exercise these rights, email us at the address below. You also have the right to lodge a complaint with your local supervisory authority.
10. Your Rights (CCPA / California)
If you are a California resident, you have the right to know what personal information we collect, the purposes for which it is used, and the categories of third parties with whom it is shared; to request deletion of your personal information; and to not be discriminated against for exercising these rights. We do not sell personal information as defined by the CCPA. To submit a request, email us at the address below.
11. International Data Transfers
Our processors may store and process information in the United States and other countries. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.
12. Account Deletion
You can delete your account at any time from inside the App under Settings. Deleting your account removes your profile, saved cards, and associated content from our active systems. Subscription billing is managed by Apple or Google; you may need to cancel your subscription separately through your device's subscription settings.
Step-by-step instructions, including how to ask us to delete the account for you, are on the Delete Account page.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, where appropriate, notify you in the App. Your continued use of the App after the update means you accept the revised policy.
14. Contact
If you have questions about this Privacy Policy or want to exercise your rights, contact us at: hello@apparentgroup.co