Zucardo — Privacy Policy

Effective date: 20 August 2026

Last updated: 31 August 2026

Zucardo ("the app", "we", "us") is a trading-card scanner and price checker. This policy explains what personal data the app collects, how it is used, how long it is kept, and the choices and rights you have. We designed the app to keep as much as possible on your device and to collect the minimum needed to provide the features.

Plain-language summary. Card scanning and identification run on your phone — your camera images are not sent to us to identify a card. If you sign in (optional — Apple or Google), we store your Card Dex, Wishlist and basic app activity so the features work across sessions. We never sell your data and we use no advertising or cross-app tracking. You can delete your account and its data from inside the app at any time.

1. Who we are

Zucardo is developed by Zucardo Labs Inc.. For any privacy question or request, contact us at info@zucardo.com.

2. Data we collect, and why

a. Account (only if you sign in)

Sign-in is optional and offers Sign in with Apple and Google Sign-In. We generate a random member number for you either way.

• Sign in with Apple. We receive your name (only if you choose to share it, and only the first time you sign in) and an email address. If you choose Hide My Email, that address is Apple's private relay address — we never see your real one, and we do not attempt to resolve it. We receive no profile photo.
• Google Sign-In. We receive your Google account's basic profile — name, email address, and profile photo — to create and identify your account.

Apple and Google sign-ins are separate accounts unless they carry the same email address. Because a Hide-My-Email address never matches your Google address, signing in that way always creates its own account, with its own Card Dex and Wishlist.

b. Your library and activity

• The cards you add to your Card Dex and Wishlist.
• Basic in-app activity (such as scan counts and time spent in the app) to provide and improve the features.

c. Device identifier

An anonymous, per-install identifier (a random ID created on your device — not Apple's advertising identifier, and not your phone number or hardware serial) used to group diagnostics and prevent abuse. It is reset if you reinstall the app.

d. Card scans and images

• On-device by default. Identifying a card runs on your device. Your camera frames and card photos are not uploaded to identify a card.
• When you report a wrong scan (✗): you send us a diagnostic report so we can fix the mistake. It contains the cropped picture of the card, what the app predicted and how confident it was, your per-install device identifier (§2c), the app version, and the language the app read. For a graded slab, it also contains the text lines the app read off the grading label — which include the certificate number and the set and card number printed there — and, when the label read is what failed, a cropped picture of the label itself. Nothing here identifies you personally; the report is about the card and the app's mistake. If you report a price issue from a card detail page, the report also contains a snapshot of the price information already shown on that page: the card identifier and screen context, selected printing and market, preferred display currency, and the headline, Raw, PSA 10 and PSA 9 values together with their source/date where available. This lets us investigate the exact display you flagged instead of replacing it with a later price. A diagnostic report is sent only when you explicitly report it.
• Feedback (Me → Feedback): we receive your message, any photos you choose to attach (up to five), and your device model and OS version to reproduce the issue. If you are signed in, your account (including email) is attached so we can follow up.
• Graded-slab lookup: the certificate number is read from the slab's barcode on your device. To name the card we query a shared cache that maps certificate numbers to cards, and when your device resolves one we contribute that mapping back so the next person does not have to. Those requests carry the certificate number, and — as with any web request — your IP address is visible to our hosting provider. We also keep a record that the slab was scanned and whether we managed to identify it, together with the text printed on its grading label and the date it was last seen. That record is one entry per certificate, counted across everybody who scans it — not a history of your scans. We keep it so we can find and fix the cards our app cannot yet recognise. No device identifier, account or session is attached to a slab lookup. What is stored is a fact about the card, not about you.
• "Help improve recognition" (off by default): only if you turn this on in Settings does the app send anonymized crops or scan frames of cards it could not confidently identify, to improve the recognition models. With it off, no scan images are uploaded automatically.

3. What we do NOT do

• We do not sell your personal data.
• We use no advertising SDKs, no analytics SDKs, and no cross-app or cross-site tracking. The app does not use Apple's advertising identifier (IDFA).
• We do not collect your contacts, precise location, health, or financial information.

4. How your data is stored and shared

• Storage. Account, library and activity data are stored with a third-party managed database and API provider. Reported crops, feedback, and opt-in scan images are transferred to our private backend server for processing and model training, and the copies in the managed database are then removed.
• Service providers. We use Apple and Google for whichever sign-in you choose, and a managed database and API provider to hold your account and library. Card pictures and marketplace links come from third-party card-data and marketplace sources; when the app shows a card's picture, that picture is fetched directly from the source's content-delivery network, which therefore sees your device's IP address and which card is being shown. We describe these as categories rather than naming individual vendors, and the list may change as sources are added or replaced. We require service providers that process personal data for us to provide the same or equal level of protection described in this policy and applicable law.
• Prices and figures (market values, graded values, population, trends) come from public third-party sources and marketplaces and may be inaccurate or delayed.
• No international sale or ad-targeting. We do not transfer your data to advertisers or data brokers.

5. How long we keep it

• Account, Dex, Wishlist, activity: kept while your account exists; removed when you delete your account (see §6).
• Reported crops and opt-in training images: retained on our private backend for model development for up to 24 months, then deleted.
• Feedback: retained for up to 24 months so we can investigate and reply. Feedback sent while you were signed in carries the email address on your account. If you delete your account, its cloud copy is removed immediately and any private-backend metadata and photos linked to that account are removed within 24 hours by the next deletion run (see §6).
• Slab-lookup request logs (certificate number and IP address): retained for abuse prevention for up to 90 days, then deleted.
• Per-certificate scan records (see §2d): kept for as long as we operate the app. This is one entry per graded card's certificate number, counted across everyone who scans it, with no account, device identifier, session or IP address attached. It describes a card, not a person, and it is what lets us find and fix the cards our app cannot yet recognise.

6. Your choices and rights

• Delete your account and data — in the app. Go to Me → Delete account. This permanently removes your profile, Card Dex, Wishlist, activity, and any feedback still held in the app's cloud database. This works however you signed in, and needs no email exchange — which matters if you used Apple's Hide My Email, since we hold only the relay address and could not verify a request sent from anywhere else. Feedback already copied to our private backend — including its photos and the email attached while signed in — is removed within 24 hours. A short-lived deletion marker containing only the random account ID is kept for one extra deletion check to catch an upload that was already in flight, then removed.
• Sign in with Apple. Deleting your Zucardo account removes the account and associated Zucardo data. Because we do not keep an Apple provider token, Apple users should also open iPhone Settings → [your name] → Sign-In & Security → Sign in with Apple → Zucardo → Stop Using Apple ID to remove Zucardo's authorization from their Apple Account.
• Access, correction, portability, erasure. You may request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it, by contacting info@zucardo.com.
• Opt out of image contribution. "Help improve recognition" is off by default; you can leave it off or turn it off at any time in Settings.
• Withdraw sign-in. Sign-in is optional; you can use the core scanning features without an account.
• GDPR (EEA/UK) & CCPA/CPRA (California). Where these laws apply, you have the rights described above, including the right to access, delete, and (California) to know what is collected and to not be discriminated against for exercising your rights. We do not sell or "share" personal information as those terms are defined by the CCPA/CPRA. To exercise any right, contact info@zucardo.com.

7. Children

Zucardo is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.

8. Security

We use industry-standard measures to protect your data, including encrypted transport (HTTPS/TLS) for all network communication and access controls on our database. No method of transmission or storage is 100% secure, but we work to protect your information and to limit what we collect.

9. Changes to this policy

We may update this policy. Material changes will be reflected by a new "Last updated" date, and where required we will provide additional notice.

10. Contact

Zucardo Labs Inc. Email: info@zucardo.com