Privacy Policy

Last updated: June 28, 2026

CardScan ("we", "us", or "our") operates the CardScan mobile app and web application at cardscan.live. This policy explains how we collect, use, and protect your information.

Information We Collect

We collect the following information when you use CardScan:

• Email address — used to create and manage your account
• Card scan images — photos taken or uploaded during scanning are sent to Google Gemini AI for card identification. Images are not stored on our servers permanently.
• Voice recordings — if you use SlabTalk, audio recorded while you hold the mic button is sent to Google Gemini AI to transcribe card details and voice commands. Recordings are used only to process that request and are not stored on our servers permanently.
• Card scan history — identified card details (player name, year, grade, estimated value) are stored in your account to power your collection view.
• Google account data — if you connect Google Sheets, we store OAuth tokens to write card data to your spreadsheet. We only access sheets you explicitly authorize.
• Show data — if you use Shows, we store the sales report you import (item names, sale prices, dates, and buyer usernames as they appear in that report) in your account to build your recap and analytics. It is visible only to you, is not shared with other users, and you can delete any show from the app. You confirm that the data is your own or that you have permission to use it.
• Sales Sheet — if you create a Sales Sheet or match sales to your sheet, we create or write to a Google Sheet in your own Google account, and only after you approve each change.
• Payment information — handled entirely by Stripe. We never store credit card numbers.
• Usage data — scan counts and subscription status to enforce plan limits.
• Device push token — if you enable notifications, we store your device token to send scan streak reminders and price alerts. You can disable this at any time in iOS Settings.

Mobile App Permissions

• Camera — used only to photograph cards for scanning. We do not access your camera at any other time.
• Photo Library — used only when you choose to upload a photo for scanning. We do not access your entire photo library.
• Microphone — used only while you hold the mic button in SlabTalk to dictate a card or voice command. We do not access your microphone at any other time or record in the background.
• Notifications — used to send scan streak reminders and price alerts. Optional and can be disabled at any time.

How We Use Your Information

• To provide and operate the CardScan service
• To sync scanned card data to your Google Sheets
• To process subscription payments via Stripe
• To enforce free tier scan limits
• To send account-related emails (no marketing without consent)

Google API Data

CardScan uses Google Sheets API to write card data to spreadsheets you authorize. We request only the minimum permissions necessary:

• Google Sheets — read/write access to spreadsheets you connect
• Google Drive (file only) — to create your CardScan Collection spreadsheet

We do not access, read, or share any other files in your Google Drive. We do not use Google user data for advertising or sell it to third parties. Our use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• Google — for Sheets integration (only data you authorize)
• Google Gemini AI — card images are sent for analysis and not retained

Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and data at any time by emailing us.

Security

We use industry-standard security practices to protect your data. All data is transmitted over HTTPS. OAuth tokens are stored securely and never exposed publicly.

Children's Privacy

CardScan is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes by updating the date at the top of this page.

Your Rights

• Access — you can view all your scanned card data in the app at any time
• Export — export your full collection as CSV directly from the app
• Delete — you can delete your account and all associated data by contacting us
• Opt out — disable push notifications at any time in iOS Settings → CardScan

Contact Us

If you have questions about this Privacy Policy or want to request data deletion, reach out on Instagram: @cardscan.live or email us at maddengarrett7@gmail.com