Privacy Policy

Last updated: July 31, 2026

This Privacy Policy explains how the CardCuteCollect app (“CardCuteCollect,” “we,” “us”) handles information. CardCuteCollect has two parts: a private binder that lives only on your device, and an optional community feed where collectors share cards with each other.

Your private binder stays on your device

The cards you add to your binder — their photos and the details you enter — are stored only in the app’s local storage on your device. Cards you keep in your binder and never post are never uploaded to us. This local data may be included in your device’s own backups (for example, iCloud or an encrypted computer backup) if you have those turned on — that is controlled by your device settings, not by CardCuteCollect.

Signing in

To use the community feed you sign in with Sign in with Apple. We request no profile information, which means Apple gives us only an anonymous, app-specific user identifier — not your name and not your email address. We use that identifier to keep your profile and your posts associated with you and to let you sign back in.

Your profile

When you set up your profile you choose a handle, a display name, an avatar emoji, and a color. These are stored on our servers so that cards you share can show who posted them. Your handle and display name are visible to other users, so please don’t use your real name or anything personal you don’t want shared.

The community feed — what you share is public

The feed is a single, shared, public space. When you tap to share a card, we upload:

• the photo of that card, and
• the card details you added — its name, set, number, and rarity,

together with your profile. Anyone using CardCuteCollect can see and “heart” what you share. Only cards you deliberately post are shared — the rest of your binder stays private on your device. You can delete any card you’ve shared at any time, which removes its photo and details from our servers.

Trading cards with other collectors

CardCuteCollect lets you trade cards with other collectors — one picture for one picture. No physical cards, money, or shipping are involved; a trade swaps the pictures and details inside the app.

Here is exactly what moves, and when:

• Listing a card for trade puts that card’s photo and details into a public trade pool, where any collector can see it — the same visibility as the feed.
• Making an offer stores a copy of the card you offered — its photo and details — on our servers while the offer is pending, so the other collector can see what they’re being offered. Offers you don’t resolve expire after four days.
• A completed trade copies the card you received into your binder on your device, and removes the card you traded away from your binder and from the feed. We also post a public announcement to the feed showing both collectors’ profiles and both cards.

Please trade thoughtfully: once you trade a card away, the other collector has a copy of that photo on their device, and we can’t take it back for you — just as they can’t take back the one they sent you. Deleting your account removes your listings, offers, and trade history from our servers, but it does not reach into another collector’s binder.

Keeping the feed safe

We have a zero-tolerance policy for objectionable content and abusive behavior. Every collector can report a post or a card in the trade pool, or block another user. Reported content is hidden right away and reviewed, typically within 24 hours, and we remove content and users that break the rules. Blocking someone also stops them from trading with you. To keep this system working, we store the reports and blocks you make.

Camera and photos

CardCuteCollect asks for camera and photo access so you can capture your cards. Photos you add stay on your device until — and unless — you choose to share that card to the community feed, at which point that one photo is uploaded as described above. You can allow, deny, or revoke this access at any time in your device’s Settings.

Where your data is stored

The community feed is powered by a few service providers that process data on our behalf, only to run the app:

• Supabase hosts the database and photo storage behind the feed — your profile, the cards and photos you share, hearts, reports, blocks, your trade listings and offers, your completed-trade history, and your trade-ticket balance. See supabase.com/privacy.
• Apple provides Sign in with Apple, as described above.
• RevenueCat handles CCC Plus subscriptions and trade-ticket purchases, as described below.

Subscriptions and purchases

CardCuteCollect offers two optional purchases: a paid subscription, CCC Plus, and trade tickets. Everyone gets a number of free trades each week; a ticket lets you keep trading once those run out, and is only used if the collector you offered actually accepts. Both are processed by Apple through your Apple Account — we never see or receive your card number or payment details.

To unlock CCC Plus, verify your purchases, add tickets to your balance, and let you restore a subscription on your devices, we use a purchase-management provider, RevenueCat. RevenueCat receives the transaction and subscription status for your purchase, together with an identifier for your CardCuteCollect account. Because tickets have to be added to your balance, this identifier is linked to your account — it is still not your name or your email, which we never receive, and it is not used to track you across other apps or websites. RevenueCat also gives us aggregate, non-identifying purchase statistics — for example, how many people subscribe — so we can understand and support the app. You can read RevenueCat’s privacy policy at revenuecat.com/privacy.

We keep a record of tickets added to and used from your balance, so that your balance is correct and so we can help if a purchase goes wrong. We use this purchase information only to provide and support these features — for example, to unlock CCC Plus, credit tickets you bought, restore your subscription, and handle billing or refund questions.

No ads or tracking

CardCuteCollect contains no third-party advertising, no ad networks, and no social-media trackers. We don’t track what you do across other apps or websites, and we don’t use the information you share with us for advertising. Apart from the service providers described above, we don’t share your data with anyone, and we never sell it.

Children’s privacy

CardCuteCollect includes community features with user-generated content and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we’ll remove it.

Deleting your data and your account

You’re always in control of your data:

• Your account and everything you shared: open Me › Delete account in the app. This permanently deletes your profile, every card you posted, the photos you uploaded, your trade listings and pending offers, your completed-trade history, and your ticket balance from our servers. It can’t be undone, and any unused tickets are lost.
• Cards already traded to someone else: a card you traded away is on that collector’s device and is not ours to delete, so it isn’t removed by deleting your account.
• Your private binder: lives on your device — deleting (uninstalling) the app erases it completely.

Changes to this policy

If we change how information is handled, we’ll update this policy and the “Last updated” date above, and, where required, ask for your consent in the app before the change takes effect.

Contact

If you have any questions about this Privacy Policy, contact us at logangarrison.g@gmail.com.