CardScanner: Sports Card Value

CardScanner: Sports Card Value is published by Pol Teams ("we", "us"). We are the data controller for the information described here.

For anything in this policy — a question, a complaint, a request to delete something — write to nguyenvanchuug@gmail.com. A human reads that inbox.

This is the part most people care about, so it goes first.

When you scan a card, the app asks for camera access and captures a single image. That image is uploaded to our recognition service, compared against our card catalogue, and used to return a match and a value estimate. The image is deleted as soon as the result is returned — typically within seconds. We do not archive it, we do not use it to train models, and no employee reviews it.

If recognition fails, the image is discarded the same way. A failed scan leaves nothing behind either.

What we don't do with the camera

The app opens the camera only while you are on the scan screen and only after you grant permission. It does not record video, does not capture audio, and does not run in the background. If you decline the camera permission, everything except scanning still works — you can add cards by hand.

Photos you pick from your gallery

If you choose an existing photo instead of taking one, that image is treated identically: uploaded, matched, deleted. We read only the file you select. We do not scan your gallery.

CardScanner has no accounts. You never give us a name, an email address, or a password, and we have no way to tie the data below to your real identity. What we do receive falls into four buckets.

Your collection stays on your phone

Cards you save, notes you write, and values you track are stored in the app's local storage on your device. They are not uploaded, not backed up to us, and not synced anywhere. If you uninstall the app or clear its data, that collection is gone permanently and we cannot restore it. Keep your own export if it matters to you.

What we never collect

• Your name, email address, or phone number
• Your contacts, messages, or call history
• Precise GPS location
• Payment card numbers or bank details
• Any file on your device other than a photo you explicitly pick

The free version of CardScanner is paid for by advertising. We use Google AdMob, which may work with mediation partners to fill ad space. Our full list of authorised sellers is published at app-ads.txt.

To show ads, AdMob and its partners receive your device's Advertising ID — a resettable identifier Google assigns to your phone — along with your IP address (which gives an approximate, city-level location), device model, operating system version, and whether you tapped or viewed an ad. This is standard for ad-supported apps, but you should know it happens.

Ads may be personalised, meaning AdMob uses that identifier to infer interests and pick ads accordingly. This is the closest thing to tracking that CardScanner does, and you can turn it off — see below.

How to limit ad tracking

• Reset or delete your Advertising ID: Android Settings → Privacy → Ads. Deleting it stops apps from receiving the identifier at all.
• Opt out of personalised ads: the same settings screen. You will still see ads, but generic ones.
• Remove ads entirely: subscribe. Paid subscribers see no ads and no ad SDK requests are made.
• In the EEA, UK, or Switzerland: a consent prompt appears on first launch. Your answer is respected and you can change it later in the app's settings.

CardScanner offers optional subscriptions that unlock premium features and remove ads. All purchases go through Google Play Billing.

We never see your payment details. Your card number, billing address, and everything else stay between you and Google. What reaches us is a purchase token and an order identifier, which tell us only whether a subscription is currently valid. We use them for nothing else.

Manage, renew, or cancel a subscription in the Google Play Store → Subscriptions. Refunds are handled under Google Play's refund policy, not by us. Cancelling stops future billing; previously charged periods run to their end date.

We use Firebase Analytics and Firebase Crashlytics, both from Google, to keep the app working.

Analytics

Records events like "a scan was started" or "the collection screen was opened", together with a pseudonymous app instance ID, your device model, OS version, and country. It tells us which features earn their place. It is not linked to any identity because we hold no identities.

Crash reporting

When the app crashes, Crashlytics sends us a stack trace, the device model, the OS version, and the app state at the moment of failure. Without this we would be fixing bugs blind. Crash reports do not contain your card photos or your collection.

You can reset the analytics identifier by clearing the app's data in Android settings, which starts a fresh instance ID.

We use what we collect for these purposes and no others:

• To identify cards and estimate values — the entire point of the app.
• To keep the app stable — finding and fixing crashes and errors.
• To improve the app — understanding which features are used and which are ignored.
• To show ads — funding the free version.
• To deliver subscriptions — unlocking what you paid for.
• To prevent abuse — detecting fraud and automated misuse of the recognition service.
• To comply with the law — where we are legally required to.

Legal bases (EEA, UK, Switzerland)

Where the GDPR applies, we rely on: contract for scanning cards and delivering subscriptions; consent for personalised advertising and analytics, which you give or withhold on the first-launch prompt and can change at any time; and legitimate interests for crash reporting, security, and fraud prevention, where we have weighed our interest in a working app against your privacy and consider the impact minimal.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising beyond what AdMob does as described in section 04. We have never done so and have no plans to.

Information reaches only these parties:

• Google AdMob — Advertising ID and device data, to serve ads.
• Google Firebase (Analytics, Crashlytics) — usage and crash data.
• Google Play — subscription and purchase validation.
• Our recognition service — card images, for the seconds it takes to match them.

We may also disclose information if compelled by valid legal process, or where necessary to investigate fraud or protect someone's safety. If we are ever acquired, this policy travels with the data, and you will be told before anything about it changes.

Card photos are deleted the moment recognition finishes. Crash reports are kept up to 90 days. Analytics events are kept up to 14 months, then deleted automatically. Subscription records are kept while the subscription is active and afterwards only as long as tax and accounting rules require. Your collection lives on your device for exactly as long as you choose to keep it.

Because CardScanner has no accounts, you already hold most of the controls directly.

• Delete your collection: remove cards in the app, or clear the app's data in Android settings to wipe everything at once.
• Delete everything: uninstall the app. Since your collection never left your device and your photos were never kept, uninstalling genuinely ends it.
• Revoke camera access: Android Settings → Apps → CardScanner → Permissions.
• Stop ad personalisation: reset or delete your Advertising ID, as described in section 04.

There is no account to delete

Google Play requires apps with accounts to offer account deletion. CardScanner has no accounts and no server-side profile tied to you, so there is nothing of that kind to delete. Uninstalling removes your data completely. If you would like written confirmation of this, ask us and we will send it.

If the GDPR applies to you

You have rights of access, rectification, erasure, restriction, portability, and objection, plus the right to withdraw consent at any time. Write to nguyenvanchuug@gmail.com and we will respond within 30 days. In practice we hold no data that identifies you, so we may need you to help us locate anything relevant — and we may not be able to. You may also complain to your local data protection authority.

If you are in California

The CCPA and CPRA give you rights to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information as those terms are defined. To exercise a right, write to the address above. We will not discriminate against you for doing so.

Do Not Track

There is no accepted standard for honouring Do Not Track signals in mobile apps, so we do not respond to them. The Advertising ID controls above are the real mechanism.

CardScanner is not directed to children under 13 and is not listed in Google Play's Designed for Families programme. We do not knowingly collect data from children under 13.

If you believe a child has used the app and something was collected, write to us. We will delete what we can find — though as explained throughout, we hold very little that could belong to anyone in particular.

Card images travel to our recognition service over encrypted HTTPS connections and are never written to permanent storage. Access to our infrastructure is limited to those who need it.

We will not pretend any system is perfectly secure — nobody can honestly promise that. What we can say is that the safest data is the data that doesn't exist, and CardScanner is built to keep almost none.

We operate from Vietnam, and our service providers — Google chief among them — run infrastructure worldwide, including in the United States. Data may therefore be processed in countries whose privacy laws differ from your own.

Where data leaves the EEA, UK, or Switzerland, Google's transfers rely on Standard Contractual Clauses approved by the European Commission, and the EU–US Data Privacy Framework where applicable.

When this policy changes, the effective date at the top of this page changes with it, and the previous version is superseded.

If a change materially affects your privacy — new data collected, a new category of recipient, a new purpose — we will tell you in the app before it takes effect, and where the law requires it, ask for your consent again. Continuing to use the app after a change means you accept the revised policy.

Questions, complaints, or requests about this policy or your data go to the address below. We aim to reply within a few days and will not take longer than 30.