Privacy Policy
Effective date:
This policy covers the Sports Card Scanner - Sporta app ("Sporta") and its website, trysporta.com. It explains what information each one handles, why, which outside services are involved and what you can do about it. Sporta is developed and run by Joseph AG., called "we" or "us" below.
The short version
- Scanning sends your card photos to the cloud. They travel over an authenticated connection to Sporta's cloud service, where Google's Gemini AI identifies the card and produces an estimated pre-grade of its condition, which is not an official grade.
- Your Vault lives with your account. Cards you save, including compressed copies of their front and back photos, are stored in Google Firebase and synced, so your collection follows you to a new device.
- You sign in with Apple or Google. We receive the name and email address that provider shares with us.
- Apple handles payments. RevenueCat keeps track of what you have unlocked, and Superwall shows the purchase screens.
- Advertiser tracking is your choice. The Meta (Facebook) SDK measures our ads, and advertiser tracking stays off unless you allow it in Apple's App Tracking Transparency prompt.
- The website sets no cookies. It has no forms and no accounts, and its only analytics are Vercel's cookieless tools.
- You can delete your account and your collection from the app's settings whenever you like.
Who is responsible for your information?
Joseph AG. decides how information in the Sporta app and on trysporta.com is used, and is responsible for it under this policy. Questions, requests and complaints about your data go to denw3n@gmail.com.
The policy applies to Sporta on iPhone, iPad and supported Macs with Apple silicon, and to every page on trysporta.com. It does not cover services we don't run, even when you reach them through Sporta. The App Store, Apple's and Google's sign-in screens, and any app you send a shared card image to each follow their own privacy policies.
What does the app collect, and why?
Sporta collects what it needs to identify your cards, show their value, keep your collection and handle purchases. Each kind of information is described below with what happens to it.
Card photos you scan
To scan, you photograph the front of a card and, if you choose, the back, or you pick an existing photo from your library. The app asks for your permission before it uses the camera, and a scan uses only the photos you take or choose for it.
Those photos are sent over an authenticated connection to Sporta's cloud service. There, Google's Gemini AI analyzes them to read the card, including the player, year, set, card number and parallel, and to produce the condition pre-grade. That pre-grade is an estimate from photo analysis, not an official grade. Scanning always involves sending the photos off your device; Sporta cannot identify a card offline.
Your recent scans are also cached on your device, so the app can list them under Recent Scans.
Your Vault and collection
When you add a card to your Vault, compressed copies of its front and back scan photos are stored with your account in Google Firebase, so the Vault shows your actual card and not a stock picture. The card's details, the binders you create and the rest of your collection data are stored with your account as well. Everything is synced, so it follows you when you sign in on another device.
Sign-in details
Sporta requires Sign in with Apple or Google Sign-In, and there is no separate Sporta password. The provider you pick sends us your name and email address, along with an account identifier that links you to your collection. The profile screen in the app shows that name and email. If you use Sign in with Apple and turn on Hide My Email, we receive a private relay address from Apple that forwards to your inbox, in place of your real address.
We use your email address to recognize your account, to reply when you contact us and, where needed, to tell you about important changes to your account or to Sporta.
Purchases
Sporta is free to download, and further use is available through in-app purchases, shown inside the app. Apple processes every payment, so we never see your card number or billing address. RevenueCat receives purchase and subscription status from Apple, together with an app user identifier, so the app knows what your account has unlocked and Restore Purchases works. Superwall displays the purchase screens inside the app and receives the app and device information it needs to show them and to record how people interact with them.
Ad attribution and App Tracking Transparency
The app includes the Meta (Facebook) SDK so we can tell whether our ads on Meta's platforms lead people to install and use Sporta. Sporta asks your permission through Apple's App Tracking Transparency prompt, and it enables advertiser tracking in the SDK only if you tap Allow. If you choose Ask App Not to Track, advertiser tracking stays off, and iOS does not give the app your device's advertising identifier.
You can change your answer later in the Settings app on your iPhone or iPad, under Privacy & Security, then Tracking. Meta handles what it receives under its own data policy.
Technical information
Every connection to an online service carries some technical details with it. When the app connects to Sporta's cloud service, or directly to a provider it uses for sign-in, purchases or ad measurement, that service receives information such as your IP address, device model, operating system version and app version. It may log those details to complete the request, keep the service secure and diagnose faults.
Card lookups for market data
Card values and the card catalog come from a sports-card market-data provider. Sporta's servers send it card lookups, such as a player, set and card number, and it sends back catalog matches and recent sales. It does not receive your personal information: no name, no email address and no account details.
Messages you send us
If you write to us, whether from Contact Us in the app's settings or from a link on this website, we receive your email address and whatever you include in the message, and we use them to answer you and fix the problem.
Who else handles your information?
Sporta relies on a small number of outside services. The table shows what each one does for Sporta and which information it handles.
| Service | What it does for Sporta | Information involved |
|---|---|---|
| Google Firebase (Authentication, Firestore, Cloud Functions) | Signs you in, runs Sporta's cloud service, stores your account and collection | Account identifier, name, email, collection data, compressed Vault photos |
| Google Gemini API | Identifies the card from its photos and produces the estimated pre-grade, which is not an official grade | The photos from each scan |
| Sign in with Apple and Google Sign-In | Confirm who you are | Name, email address, account identifier |
| RevenueCat | Tracks purchases and subscription status | Purchase records from Apple, app user identifier |
| Superwall | Shows the in-app purchase screens | App and device information, how you interact with those screens |
| Meta (Facebook) SDK | Measures whether our ads lead to installs | App activity such as installs; advertiser tracking only if you allow it |
| Sports-card market-data provider | Supplies the card catalog and recent sales | Card lookups from Sporta's servers, no personal information |
| Vercel | Hosts trysporta.com and provides its cookieless analytics | Standard web request data |
These providers process information under their own terms and privacy policies. Beyond them, we disclose information only when the law requires it, to answer a valid legal request, or when it is needed to protect the rights, property or safety of Sporta's users, the public or Sporta itself, for example while investigating fraud or abuse.
How does the website handle your information?
trysporta.com is a set of pages and guides about Sporta and sports cards, hosted on Vercel. To deliver a page, Vercel processes the details any web host receives, such as your IP address, browser type, the page you asked for and the page that linked you there, and uses them to serve the site and protect it from abuse.
The site uses two measurement tools, both from Vercel and both cookieless. Vercel Web Analytics counts visits in aggregate: which pages are read, where visitors arrived from, and broad details such as country, device type and browser. Vercel Speed Insights measures how quickly pages load and respond. Neither tool builds a profile of you or follows you to other sites, and the site loads no other third-party scripts.
The website sets no cookies, has no forms to fill out and has no accounts or sign-in, which is why you won't see a cookie banner. Tapping an App Store link takes you to Apple, where Apple's privacy policy applies. Clicking the support email link opens your own email app, and anything you send is handled as described under messages you send us.
How long is information kept?
We keep information only as long as it serves the purposes in this policy, then delete it, unless the law requires us to keep it longer.
- Account, collection and Vault photos: kept for as long as your account exists, and deleted when you delete your account.
- Photos from scans you don't save: processed to return the result and not added to your account's Vault.
- Recent scans cache: stays on your device until the app clears or replaces it, or you delete the app.
- Support emails: kept as long as needed to help you and to keep a record of the conversation.
- Purchase records: Apple and RevenueCat may keep transaction records for as long as billing, tax and legal rules require.
- Technical logs: held by our providers for limited periods under their own policies.
- Website analytics: stored by Vercel as aggregate statistics.
How do you delete your account?
- Cancel any subscription with Apple first. Deleting your account does not stop Apple billing you. Open the Settings app, tap your name, then Subscriptions, and cancel Sporta there.
- Open the Profile tab in Sporta. The app's settings are listed there. Make sure you are signed in to the account you want to remove.
- Tap Delete Account. The app asks you to confirm before anything is deleted.
- Confirm the deletion. Your account and your collection, including the Vault photos stored with it, are deleted permanently. This cannot be undone.
- Delete the app if you want the local cache gone. Removing Sporta from your device clears the recent scans cached on it.
Copies in our providers' systems can take a short time to clear completely after you delete your account. If you can no longer open the app, email us from the address linked to your account and we will handle the deletion once we have confirmed the account is yours.
Signing out is different from deleting. Sign Out leaves your account and collection in place, ready for the next time you sign in with the same method.
What choices and rights do you have?
You control several things directly. If you have given Sporta access to your camera or photos, you can change that in the Settings app under Sporta. Advertiser tracking can be switched off at any time under Privacy & Security, then Tracking. You can sign out whenever you like, and you can delete your account from the app as described above.
Wherever you live, you can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email denw3n@gmail.com with your request. We may ask you to confirm that the account is yours, usually by writing from the email address linked to it, and we will answer within the time the law where you live requires.
If you are in the European Economic Area, the UK or Switzerland
Data protection law there gives you further rights: to restrict or object to certain processing, to receive your data in a portable format, and to withdraw consent at any time. We rely on these legal bases:
- Providing the service you asked for: scanning, identifying and valuing cards, storing and syncing your Vault, and handling your purchases.
- Your consent: advertiser tracking through the Meta SDK, which you grant or refuse in Apple's prompt.
- Legitimate interests: keeping Sporta secure, fixing problems, and understanding website use through aggregate, cookieless analytics.
- Legal obligations: keeping records the law requires.
You also have the right to complain to the data protection authority in your country.
If you live in California or another US state with a privacy law
Those laws give you the right to know what personal information we collect and why, to correct it, to delete it, and to opt out of its use for targeted advertising. In Sporta, advertiser tracking only happens if you allow it in Apple's prompt, and you can withdraw that at any time in your device settings. We will not treat you differently for using any of these rights.
Children's privacy
Sporta is rated 4+ on the App Store because it contains no objectionable content, but the app is not directed at children under 13, and we do not knowingly collect personal information from them. Signing in needs an Apple or Google account, and both companies set their own rules for children's accounts. A parent who collects with a younger child can use Sporta on the parent's own account and device.
If you believe a child under 13 has given us personal information, email denw3n@gmail.com and we will delete it promptly.
How is your information protected?
Scans travel to Sporta's cloud service over an authenticated connection, and the data stored there is tied to your signed-in account. Our providers run established cloud platforms with physical, electronic and procedural safeguards, and we limit access to what running Sporta requires.
No system is perfectly secure, so we cannot promise that information will never be exposed. You can help by keeping your device locked with a passcode and protecting the Apple or Google account you sign in with.
Where is your information processed?
Our providers operate in the United States and other countries, so your information may be processed outside the country where you live. Where the law requires safeguards for those transfers, we rely on the ones our providers offer under their data processing terms.
Changes to this policy
If Sporta or the website starts handling information differently, this page changes first, along with its effective date. Where a change is significant and it is practical to do so, we will also flag it in the app or on the website. Continuing to use Sporta after a revised policy takes effect means the revised version applies.
Contact
For anything about your privacy, email denw3n@gmail.com or tap Contact Us in the app's settings. The developer, Joseph AG., reads and answers these messages. Our Terms of Use cover the rest of the rules for using Sporta, and the support page answers common account and purchase questions.