Privacy Policy
This Privacy Policy explains how CardXpertAI, LLC ("CardXpertAI," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use the CardXpertAI mobile application and our websites at cardxpertai.com (together, the "Service"). By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.
Contents
1. Information we collect
Information you provide
- Account information. When you create an account, we collect your name and email address. If you sign in with Google or Apple, we receive this information from that provider (see Section 2).
- Card images and photos. When you scan or upload a card, we process the images you submit in order to identify the card and return information about it.
- Your collection ("Vault") data. Cards you save, notes, custom prices or valuations you enter, watchlists, and similar content you create in the app.
- Communications. Information you provide when you contact support, respond to surveys, or join a waitlist (such as your email address).
Information collected automatically
- Usage and device data. App interactions, feature usage, crash and diagnostic data, device model, operating system, app version, language, and general (non-precise) location inferred from IP address.
- Identifiers. A unique user or device identifier used to keep you signed in and to associate your data with your account.
- Cookies and similar technologies on our websites, used for analytics and to remember your preferences.
Information from third parties
- Authentication providers (Google, Apple) provide the profile information described in Section 2 when you choose to sign in with them.
- App stores and payment processors. When you purchase a subscription, Apple or Google processes your payment and provides us with transaction and subscription status information. We do not receive or store your full payment card number.
2. Google & Apple sign-in data
CardXpertAI offers "Sign in with Google" and "Sign in with Apple" as a convenient way to create and access your account. We request only the minimum information needed to sign you in.
When you sign in with Google, we receive your name, email address, language preference, and profile picture (the basic profile and email scopes) from your Google Account. When you sign in with Apple, we receive your name and email address (or an Apple-provided private relay email if you choose to hide your address).
We use this information solely to create and secure your account, identify you when you return, and communicate with you about the Service. We do not use Google or Apple user data for advertising, and we do not sell it. We do not request access to your Gmail, Google Drive, contacts, calendar, or any other Google service data. CardXpertAI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time from your Google Account permissions page.
3. How we use your information
| Purpose | Examples |
|---|---|
| Provide the Service | Identify cards from your images, return pricing and market information, store your Vault and watchlists, keep you signed in |
| Improve the Service | Understand which features are used, diagnose crashes, improve identification accuracy and reliability |
| Communicate with you | Send account, security, transactional, and price-alert notifications; respond to support requests |
| Billing | Manage subscriptions and entitlements (payment itself is handled by Apple/Google) |
| Safety & legal | Prevent fraud and abuse, enforce our Terms, and comply with legal obligations |
4. How we share information
We do not sell your personal information. We share information only as described below:
- Service providers. We use trusted vendors to run the Service, who process data on our behalf under contract. These include Google Cloud Platform (hosting, storage, and databases), Google's AI/vision services (to help identify cards from images), Firebase / Google Analytics (analytics and crash reporting), and push-notification providers.
- Authentication providers. Google and Apple, when you use their sign-in features.
- Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of CardXpertAI, our users, or the public.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case we will continue to protect your information consistent with this policy.
Aggregated or de-identified information (which cannot reasonably be used to identify you) may be used and shared for any purpose, such as understanding market trends.
5. Data retention
We keep your information for as long as your account is active and as needed to provide the Service. Card images are retained to power identification and your Vault history. If you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must retain it to comply with legal, tax, accounting, or fraud-prevention obligations, or where it exists in routine backups that are cycled out over time.
6. Your rights & choices
Depending on where you live (including under the GDPR and the California Consumer Privacy Act, as amended), you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details in Section 12. We will not discriminate against you for exercising your rights.
- Access & deletion. You can view and delete your Vault contents in the app, and delete your entire account (see Section 7).
- Push notifications. You can disable price alerts and other notifications in your device settings.
- Sign-in access. You can revoke Google/Apple access from your provider account settings at any time.
7. Deleting your account
You can request deletion of your account and associated personal data at any time from within the app, or by emailing us at the address in Section 12 with the subject "Delete my account." Upon verification, we will delete your account, card images, and Vault data, subject to the retention exceptions in Section 5.
For step-by-step instructions — including how to request deletion if you no longer have the app installed — see our Account Deletion page.
8. Security
We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and secure cloud infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Children's privacy
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
10. International users
We operate in the United States and process data there. If you access the Service from outside the United States, you understand your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice through the app or by email. Your continued use of the Service after an update means you accept the revised policy.
12. Contact us
If you have questions or requests regarding this Privacy Policy or your information, contact us at:
CardXpertAI, LLC
Email: [email protected]