Privacy Policy
This policy explains what data the Raritee mobile app and its servers (together, "Raritee", "we", "us") collect, why, who we share it with and what choices you have. Raritee is built to work without your name, email address or phone number.
In short. Your account is anonymous and tied to your device. Card photos you scan go to our servers and to our card-recognition provider, and we delete the photos after 90 days. Purchases are handled by Apple and Google; we never see your card details. We do not show ads, we do not sell your data and the app contains no third-party analytics or tracking. You can delete your account in the app at any time.
1. Data we collect
Device identifier and account
When you first open the app, we create an anonymous account for you. To recognise your device we store a device identifier: on iOS, the identifier Apple provides to app vendors (identifierForVendor); on Android, the Android ID for our app; if neither is available, a random identifier the app generates and keeps on your device. We also store the platform (iOS or Android), the sign-in sessions of your device and a random account token. We do not ask for your name, email address or phone number.
Card photos and scans
When you scan a card, the app uploads the photo to our servers. We keep each scan: the photo, a fingerprint (hash) of the photo used to detect duplicates, the recognition result, the card you chose and the time of the scan. The photo itself is deleted automatically 90 days after the scan, and immediately when you delete your account. The scan record without the photo stays in your scan history until you delete your account.
Your collection
We store the cards you add to your collection and wishlist, with the details you enter (such as the variant, condition, grading details and quantity), and the value history of your collection.
Purchases
Subscriptions are bought through the Apple App Store or Google Play. The store processes the payment. We receive the transaction information we need to give you access: the product, the purchase and expiry dates, the renewal status, store transaction identifiers and the random account token the app passes to the store. We never receive your payment card details, your Apple ID or your Google account.
Technical data
Our servers record technical logs of requests, such as the IP address, the time, the requested address and the response code. We use them to keep the service secure and working, to limit abuse and to investigate errors. Logs are kept for a short period, normally up to 14 days. If a server error occurs, an error report may be sent to our error-tracking provider; these reports do not include request bodies, photos or the IP address.
Support messages
If you write to support@raritee.app, we receive your email address and whatever you include in your message, and use them only to answer you.
2. How we use data
- To recognise the cards you scan and show their prices.
- To keep your collection, wishlist and scan history and show them on your device.
- To give you access to the subscription you bought and to apply the scan limits of your plan.
- To restore your account and purchases when you reinstall the app or change devices.
- To keep the service secure, prevent abuse and fix errors.
- To answer your support requests.
If you are in the European Economic Area or the United Kingdom, we rely on the performance of our contract with you (providing the app and the features you use) and on our legitimate interests (security, abuse prevention and fixing errors). We do not use your data for automated decisions that have legal or similarly significant effects on you.
3. Who we share data with
We share data only with service providers that process it on our behalf to run Raritee:
- Amazon Web Services (Frankfurt, Germany, region eu-central-1): hosting of our servers, database and file storage, and sending of email through Amazon SES.
- Scrydex: card recognition and card and price data. The photo of each scan is sent to Scrydex so that the card can be recognised. No account identifier is sent with it.
- Apple and Google: processing of in-app purchases and subscriptions under their own privacy policies.
- Sentry: server error reports, as described above.
- Cloudflare: our domain name system and the delivery of messages sent to our support address.
We do not sell your data, we do not share it for advertising and we do not show ads. The app contains no third-party analytics, advertising or tracking software. We may disclose data if required by law.
4. International transfers
Our servers are in the European Union. Some providers, such as Scrydex, Sentry and Cloudflare, may process data in other countries, including the United States. Where the law requires it, such transfers are covered by appropriate safeguards such as the European Commission's standard contractual clauses.
5. How long we keep data
- Card photos: 90 days from the scan, or until you delete your account, whichever comes first.
- Account, collection, wishlist and scan history: until you delete your account.
- Purchase records: while your account exists. Apple and Google keep their own records of your purchases.
- Server logs: normally up to 14 days.
- Backups: deleted data may remain in encrypted database backups for up to 21 days until they expire.
6. Deleting your account
You can delete your account at any time in the app: open Profile and choose Delete Account. This permanently deletes your account, collection, wishlist and scan history, and the photos of your scans. Deleting your account does not cancel a subscription; cancel it in the subscription settings of the App Store or Google Play. If you can no longer use the app, write to support@raritee.app.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, to object to or restrict its processing and to lodge a complaint with your data protection authority. Because your account is anonymous, we may ask for information that lets us identify it, such as the account details shown in the app, before acting on a request. To exercise your rights, write to support@raritee.app.
8. Security
Data travels between the app and our servers over encrypted connections. Access to our systems is limited to the people who run the service. No system is perfectly secure, but we work to protect your data and will act promptly if a problem occurs.
9. Children
Raritee is not directed at children under 13, or under the minimum age required in your country, and we do not knowingly collect their data. If you believe a child has used Raritee, contact us and we will delete the account.
10. Changes to this policy
We may update this policy. We will post the new version on this page with a new effective date. If the changes are significant, we will take reasonable steps to let you know, for example in the app.
11. Contact
Questions about privacy: support@raritee.app.