Last updated: April 1, 2026
Cards AI ("the App") is operated as a sole proprietorship based in New Jersey, United States. This policy explains what data we collect, why, and how we protect it.
When you use Cards AI, we collect the following data to provide our card scanning and pricing service:
Card Images: Photos you capture using the in-app scanner are sent to Google's Gemini API for card identification. These images are processed in real time and are not stored on our servers after identification is complete.
Scan Results: The card name, category, and pricing data returned from eBay and TCGplayer sold listings are stored in our database (hosted on Supabase) so you can view your saved cards in your Binder.
Subscription Data: We use RevenueCat to manage subscriptions. RevenueCat receives your anonymous App Store purchase token to verify your subscription status. We do not see or store your Apple ID, payment method, or billing details.
Device Information: We may collect anonymized device type, OS version, and crash logs to improve app stability. No personally identifiable information is included.
We do not collect your name, email address, phone number, location, contacts, or any personal identifiers. You do not need to create an account to use Cards AI.
Cards AI uses the following third-party services, each with their own privacy policies:
Google Gemini API — processes card images for identification. See Google's AI Terms.
Supabase — hosts our database and serverless functions. See Supabase Privacy Policy.
Apify — runs our eBay and TCGplayer data scrapers server-side. See Apify Privacy Policy.
RevenueCat — manages subscription status. See RevenueCat Privacy Policy.
Your saved card data is stored on Supabase's cloud infrastructure with row-level security enabled. All data is transmitted over HTTPS. API keys for third-party services are stored server-side and are never exposed to the client beyond what is required for authentication.
Card images are processed in real time and discarded after identification. Saved card metadata (name, price, category) is retained in your Binder until you delete it. If you uninstall the app, your locally cached data is removed. Server-side data can be deleted upon request.
Cards AI is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.
You may request deletion of any data associated with your device by contacting us. Since we do not collect personal identifiers, most of our data is already anonymous.
We may update this policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.
For questions about this privacy policy, contact us at: cardsaicontact@gmail.com