PokeMarketCap.APP

Privacy policy

Version 1.8 · updated on October 11, 2026

1. Data controller

The data controller is Jordan PELLET, individual provider of the app on the App Store.

2. What stays on your device

The album (lots, costs, sales, favorites, grading details, “Wanted” list), card photos and card recognition (text reading and image comparison) are stored and processed only on the device. We have no access to them. The only exception: price alerts, described below, so that we can notify you even when the app is closed.

3. Data processed, purposes and legal bases

• Account (optional): email address or anonymous “Sign in with Apple” identifier. Purpose: backing up and restoring the album. Legal basis: performance of the contract (Article 6(1)(b) of the GDPR).
• Album backup (if you turn it on): lots, sales, favorites, grading details, sealed products and “Wanted” list, encrypted in transit. Legal basis: performance of the contract.
• Shared photo (only if you tap “Share”): the card cut out, without the rest of the photo, checked before it is published as the card’s image. Legal basis: your consent, which can be withdrawn at any time.
• Collectors’ values: the values you enter for your graded cards feed anonymous statistics, published only once there are at least three distinct collectors. Legal basis: legitimate interest (providing a reliable market value).
• Subscription: payment is processed by Apple; we see neither your payment method nor your Apple identity. The subscription status is managed by RevenueCat with an anonymous identifier (or your account’s identifier if you are signed in). Legal basis: performance of the contract.
• Purchase log: we keep a record of your subscription events sent by RevenueCat (purchase, renewal, cancellation, expiration, amount), tied to the anonymous identifier or to your account, never to your Apple or Google identity. Purpose: keeping our books and knowing how many subscribers remain. Legal basis: performance of the contract and accounting obligations.
• Creator code (only if you enter one): the code of the creator who introduced you to the app is saved with your account and tied to your purchases, so that the subscriptions they bring in are credited to them. The creator receives totals, never your identity or the details of your collection. Legal basis: legitimate interest (paying our partners).
• Price alerts (only if you create some and allow notifications): the cards you follow, your thresholds, and the device’s notification token provided by Apple, under a random key specific to alerts, with no link to an account or to the statistics. Purpose: checking the PMC price every day and sending you a notification through Apple. Legal basis: performance of the contract. Deleting your alerts erases this data from our server.
• Support: the emails you send us, in order to reply to you. Legal basis: legitimate interest.
• Sealed product barcodes: when you scan the barcode of a box (booster display box, collection box, booster pack) and then pick the product yourself, the “barcode → product” link is sent with a random key created on the device, never linked to your account, your Apple identity or your collection. No photo is sent. The link is published for everyone once two devices agree. Purpose: recognizing the box when it is scanned, for you and for other collectors. Legal basis: legitimate interest.
• Anonymous statistics (can be turned off in My account): daily counters — app opens, screens opened and features used (counted by their name, never by what you type or view), successful or failed scans, cards added, trial or purchase started, Pro feature tapped — tied to a random key created on the device, never linked to your account, your Apple identity or your cards. Purpose: measuring and improving card recognition and the app. Legal basis: legitimate interest.

The prices shown come from public sources (the European market’s price guide, marketplace listings, the US market as a fallback): no personal data is used to calculate them.

4. Recipients and processors

• Supabase: accounts, backups, values and price history.
• Cloudflare: delivery of card images and shared photos.
• RevenueCat: subscription status.
• Apple: payment, “Sign in with Apple”, notifications.

Some of these providers may process data outside the European Union; in that case they commit to the safeguards provided for by the GDPR (the European Commission’s standard contractual clauses or an adequacy decision).

5. Retention periods

• Account and backup: until the account is deleted from the app, then erased within 30 days.
• Shared photo: as long as it illustrates the card, or until you ask for its removal.
• Support emails: 3 years after the last exchange.
• Anonymous statistics: 13 months.
• “Barcode → product” links: as long as the product is in the catalog; they can’t be used to identify you.
• Price alerts: as long as at least one alert exists on the device; erased as soon as the last one is deleted, and the token as soon as Apple reports it as expired.

6. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. Account deletion is available directly in the app; so is exporting the album to a file, for Pro subscribers. To receive a copy of your data without a subscription, free of charge, or for any other request, write to contact@pokemarketcap.app. You can also lodge a complaint with the CNIL, the French data protection authority.

7. Minors

The app can be used without an account at any age. A minor under 15 needs their parents’ consent to create an account; purchases are governed by Apple’s parental controls.

8. Notifications and permissions

The camera is used only for scanning, on the iPhone. Notifications are used only for the price alerts you create; they are sent by our server through Apple, or generated on the device. You can turn them off in the iOS settings.

9. Changes

Any significant change to this policy is announced in the app. Version 1.8, dated October 11, 2026.