Privacy Policy

Last updated: May 20, 2026

GradeOracle ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use the GradeOracle mobile application ("App").

1. Information We Collect

Information you provide:

• Card images you submit for scanning and grade prediction
• Cards you add to your portfolio
• Quiz responses during onboarding

Information collected automatically:

• A randomly generated device identifier (not linked to your name or email)
• Monthly scan usage count (for free tier rate limiting)
• App usage analytics (if you grant permission)

Information we do NOT collect:

• Your name, email address, or phone number
• Your location
• Payment information (handled entirely by Apple)

2. How We Use Your Information

• To provide AI-powered card identification and PSA grade prediction
• To calculate grading ROI and market prices
• To enforce free tier usage limits (5 scans per month per device)
• To manage your Pro subscription via RevenueCat
• To improve the accuracy of our AI models and app performance

3. Card Images and AI Processing

Card images are sent to our secure server (api.gradeoracle.app) on Cloudflare, then forwarded to third-party AI providers for analysis. Images are processed in real time and are not stored permanently.

4. Third-Party Services

• Anthropic / Google / OpenAI – AI vision and text analysis
• RevenueCat – Subscription management
• Mixpanel – App analytics (aggregated, non-personal)
• TCG API – Card pricing data
• Apple – In-app purchases

We do not sell your personal data to any third party.

5. Data Storage

Your portfolio data is stored locally on your device. We store only your anonymous device identifier and monthly scan count on our servers. No account creation is required.

6. App Tracking Transparency

GradeOracle may request permission to track activity across apps for analytics purposes. You can decline and still use all features.

7. Children's Privacy

GradeOracle is not directed to children under 13. We do not knowingly collect personal information from children under 13.

8. Your Rights

• Delete all local data by uninstalling the App
• Opt out of analytics via the ATT permission dialog
• Request deletion of server-side data by contacting us

9. Data Security

All data is encrypted using HTTPS/TLS. API keys are stored exclusively on our secure server and never in the App binary.

10. Changes to This Policy

We may update this policy from time to time. Continued use after changes constitutes acceptance.

11. Contact Us

privacy@gradeoracle.app

---