Privacy Policy

Last Updated: July 5, 2026

This Privacy Policy explains how Chasing Tens ("we," "us," "our") collects, uses, shares, and protects information when you use the Chasing Tens mobile application (the "App").

This is not legal advice. This policy should be reviewed by a licensed attorney before publication, particularly regarding AI training data use (including the mandatory-contribution and de-identified-retention terms in Sections 3 and 7), biometric/image data handling, and jurisdiction-specific requirements (GDPR, CCPA, COPPA).

TODO: Add a registered business address once a legal entity is formed.

1. Information We Collect

1.1 Account Information

When you register, we collect:

Email address
Display name (optional)
Avatar image (optional)

1.2 Card Images and Scan Data

When you use the scanning feature, we collect:

Photos of trading cards you capture or upload
AI-generated grade predictions, confidence scores, and defect analysis for each scan
Card metadata you provide (name, set, card number)
If you use the "Submit Grade Result" feature: the actual grade you received from a professional grading company (PSA, BGS, CGC, SGC, etc.)

1.3 Usage and Device Information

We automatically collect:

App usage events (e.g., scans started/completed, cards saved, subscription changes)
Device type, operating system version, and app version
Crash reports and error logs

1.4 Subscription and Payment Information

Subscription payments are processed by Apple App Store, Google Play, and RevenueCat. We do not collect or store your credit card number or full payment details. We receive subscription status (active, cancelled, expired) and a customer identifier from RevenueCat.

2. How We Use Your Information

We use the information we collect to:

Provide grade predictions and generate your TENS Report
Maintain your card collection and portfolio
Process and manage your subscription
Send service-related communications (e.g., scan limit notices, subscription renewal reminders)
Analyze app usage to improve features and fix bugs
Improve the accuracy of our on-device AI grading model (see Section 3 below)

3. AI Model Training — How Your Scans Improve Chasing Tens

Chasing Tens uses an on-device AI model to grade your cards. We do not send your images to any third-party AI provider (such as OpenAI) — all grading happens locally on your device.

Improving that model is a core part of the Service itself. When you use the scanning features, the following is collected and becomes part of our proprietary model-training corpus:

The image of the card you scanned
The grade and subgrades our model predicted
If you submit a real grading result via "Submit Grade Result," the actual grade you received

This is gold-standard training data: it lets us compare our predictions to real-world outcomes and retrain the model to be more accurate for every collector. Improved models are distributed to all users as a downloadable update — they never require an app store update.

Please understand this before using the App:

Contribution of scan data to model training is a mandatory part of the scanning features and cannot be disabled or opted out of. If you do not agree, do not use the App's scanning features.
Once collected, training data is de-identified — disassociated from your account and identity — and becomes part of Chasing Tens' proprietary training corpus. De-identified training data is not subject to deletion requests and is retained after account deletion (see Section 7).
Card images are photographs of trading cards, not of people. Do not include faces, personal items, or documents in your scans.

Training data is stored in a private, access-controlled storage bucket. It is never made public, never shared with third-party AI providers, and never sold.

4. Third-Party Service Providers

We share information with the following service providers, each of which processes data on our behalf under their own privacy and security obligations:

Supabase — authentication, database, and file storage. Receives account info, card images, and scan data.
RevenueCat — subscription management. Receives subscription status and an anonymized customer ID.
PostHog — product analytics. Receives usage events and device info — never card images.
Sentry — error monitoring and crash reporting. Receives crash logs and device info.
Apple App Store / Google Play — payment processing, handled entirely by Apple/Google under their own privacy policies.

We do not sell your personal data. Not to advertisers, not to data brokers, not to anyone — ever. The sharing above exists solely so these processors can run the Service on our behalf.

5. Data Retention

Account and collection data is retained as long as your account is active.
If you delete your account, your profile, cards, and scan reports are deleted within 30 days, except where retained for legal, security, or fraud-prevention purposes.
Training data collected under Section 3 is retained in de-identified form after account deletion as part of our proprietary training corpus, used solely for model development (see Section 7).

6. Your Rights

We do not sell your personal data — there is no "sale" to opt out of. This applies across every document we publish and every jurisdiction we operate in.

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and associated personal data
Export your collection data
Object to or restrict certain processing (EU/UK residents under GDPR)
Know and delete personal information (California residents under CCPA)

Deletion rights apply to your personal data (Section 5). De-identified training data is not associated with you and is retained per Sections 3 and 7.

To exercise these rights, contact us at support@chasingtens.app.

7. Training Data Ownership and Retention

The de-identified training corpus described in Section 3 is owned by Chasing Tens. Because it is disassociated from user identities and is fundamental to how the Service improves for every collector, it is excluded from deletion and opt-out requests and survives account deletion. Deleting your account removes your profile, your collection, your scan reports, and the images stored under your account — the de-identified copies in the training corpus remain.

8. Children's Privacy

Chasing Tens is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at support@chasingtens.app and we will delete it. Users under 18 should review this Agreement with a parent or guardian, particularly regarding paid subscriptions.

9. Data Security

We use industry-standard security measures, including encrypted data transmission, Row Level Security (RLS) on all database tables, and private (non-public) storage buckets for all images. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Our service providers may process data in the United States or other countries. If you are located outside the United States, your information may be transferred to and processed in a country with different data protection laws than your own.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via in-app notice or email prior to taking effect. Continued use of the App after changes take effect constitutes acceptance.

12. Contact Us

Questions about this Privacy Policy can be directed to:

Chasing Tens

support@chasingtens.app