CardOps is built so that your business data stays yours. This policy explains what the app touches, where it goes, and the choices you have. CardOps has no accounts: we never ask for your name, email, or password, and we cannot identify you from the data described below. Using the app is also governed by our Terms of Service.
Your inventory and sales data
Cards, prices, sales, shows, expenses, and photos you add are stored on your device and, if iCloud is enabled, synced through your private iCloud database using Apple's CloudKit. We cannot read, access, or recover this data; it lives in your Apple account, protected by Apple's security. Deleting the app and its iCloud data removes it.
Camera and card scanning
The card scanner runs entirely on your device using Apple's Vision framework. Scanner camera frames are processed locally and are never uploaded. Photos you attach to inventory items are stored with your inventory data in your private iCloud.
AI features
Grade estimate (photos leave your device). When you use the AI condition/grade estimate, the front and back photos you take of that card are sent to our server and processed by Anthropic's Claude model to produce the estimate. We do not store your photos. Our server keeps only the resulting estimate, keyed by an anonymous fingerprint of the images, for up to 30 days so repeat requests are instant. Photos are used to generate your estimate, not to train AI models.
Deal Brain, weekly report, and portfolio questions. These features send the relevant card names and aggregate numbers (values, margins, totals; never your photos, notes, or customer information) to AI models running on our own server infrastructure (Cloudflare Workers AI). Responses are cached anonymously for up to 30 days.
Grading accuracy telemetry. To improve the grade estimator, the app can report an anonymous record when a real grade comes back for a card we estimated: the estimate, the actual grade, and a random identifier, with nothing tied to you or your device. Turn this off anytime in Settings → Privacy → "Share grading data".
Price alerts (optional)
If you turn on price alerts, we store your device's push token and the list of card IDs and names you own on our server so the nightly job can notify you of price moves. This list is keyed only by the push token, with no account or identity attached. Turning alerts off, or the token becoming invalid, removes the registration.
Creator codes (optional)
If you enter a creator's referral code, we store the code together with your app's random purchase identifier (see Purchases below), and we keep anonymous records of subscription transactions attributed to that code (product, price, and date) so we can share revenue with the creator who referred you. The code is also attached to your RevenueCat purchase record. None of this includes your name, email, or Apple ID, and entering a code never changes what you pay.
Card prices and catalog
When the app fetches market prices, sold listings, or the card catalog, it contacts our server with the card's identifier only. To prevent abuse, our server briefly counts requests per IP address (deleted within 24 hours). Standard technical logs may be retained briefly by our hosting provider (Cloudflare) for security and reliability.
Purchases
Subscriptions and purchases are processed by Apple. We use RevenueCat to validate purchases and manage subscription status; RevenueCat receives your purchase receipt and a random app-generated identifier, not your name, email, or Apple ID.
Crash and performance diagnostics
To find and fix bugs, CardOps can send anonymous crash reports and performance data to Sentry. These reports contain technical details about the failure (device model, OS and app version, and diagnostic traces) but no name, email, account, IP address, or your inventory, prices, or photos. It is on by default; you can turn it off anytime in Settings → Privacy → "Share crash & diagnostics".
Feedback you send. If you use the in-app feedback form, the message you write and the email address you optionally include are delivered to us through Sentry so we can respond. Feedback is only ever sent when you tap send.
Anonymous usage analytics
To understand which features get used and where people get stuck, CardOps can send anonymous product-usage events to PostHog — which screens you open, which features you run, and app open/close events. Events are tied only to a random identifier generated on your device; CardOps never identifies you to PostHog, so there is no name, email, account, or advertising identifier attached, and none of your inventory, prices, or photos is included. It is on by default; you can turn it off anytime in Settings → Privacy → "Share anonymous usage data".
What we don't do
- No advertising, and no ad tracking
- No cross-app or cross-site tracking, and no data brokers
- No sale or sharing of personal data
- No accounts: we never ask for your email or password
- No AI training on your data
Your choices and deletion
Diagnostics, usage analytics, and grading telemetry can be turned off in Settings → Privacy; price alerts and creator codes are off unless you use them. To have server-side records deleted (price-alert registration, creator-code attribution), email us and include the creator code you used, if any; we'll remove the associated records. Your inventory itself is deleted by deleting the app and its iCloud data; it never touches our servers.
Children
CardOps is not directed at children under 13 and does not knowingly collect personal information from them.
Changes
If this policy changes, the updated version will be posted at this address with a new effective date.