Carduvo Privacy Policy

Last updated: 8 October 2026

This policy explains what information Carduvo handles, what it is used for, which providers are involved, what is visible when you share a collection, how the camera works, how long information is kept and how you can delete it.

Who is responsible

Carduvo is an iPhone app for keeping track of a collection of trading cards and seeing its market value. It is developed and operated by an independent developer, as an individual, based in the United States, who is listed as the app's seller on the App Store.

For anything related to your information, the contact address is support@carduvo.app.

Summary

• To use Carduvo you need an account with an email address and a password.
• What is stored is, above all, your collection: which cards and products you own, how many and, if you enter them, what you paid, when, and your notes.
• No advertising and no usage analytics. Nothing records which screens you open or how long you spend in the app.
• When the app crashes, a technical crash report is sent. It does not include your email, your username or your collection.
• Your collection is private unless you decide to share it. Sharing starts turned off.
• Scanner photos are read on your phone, are never uploaded, and are deleted as soon as they have been read.
• You can delete your account from inside the app, without having to ask.

What information is collected

Your account

• Your email address.
• Your password, which the account service stores in an irreversible form (a hash). Nobody can read it, including whoever operates Carduvo.
• The dates you signed up, confirmed your email and last signed in.

Signing up only asks for an email address and a password of at least eight characters. No name, phone number, address, date of birth or payment details are requested.

If you sign in with Apple or Google. These options only appear in the app when they are available. If you use them, Carduvo receives your email address and an identifier for your account with that service; it does not receive your contacts or your photos. With Apple you can choose to hide your email: in that case Carduvo receives a forwarding address from Apple instead of yours. If you already have a Carduvo account with the same verified email address, that sign-in is linked to the same account. With Apple, Carduvo also keeps a code from Apple that it only uses to withdraw that access: when you delete your account, Carduvo asks Apple to revoke it. If that code is missing, the app asks you to confirm with Apple before deleting the account.

Your profile

• Your username, which you choose after signing up. It appears in your sharing link, carduvo.app/u/your-name. Having one publishes nothing.
• When you chose the name and when you last changed it.
• Your sharing settings: whether you share, whether you share all your collections or just one, and whether the total value is shown.
• Default currency and region settings. Today the app shows everything in US dollars and does not ask you to change them.

The profile also has room for a display name and a picture, but today no screen in the app fills them in: they are empty.

Your collection

• Your collections: their names and which one is the default.
• For each card you add: which card it is (card and variant from the catalog), how many copies you own and which collection they are in.
• Anything you choose to add, all of it optional: what you paid and in which currency, the purchase date, the grading company and grade, the certificate number and your notes (up to 2,000 characters).
• The market value the card had on the day you added it, calculated by the server so the app can show you how much it has changed.
• The sealed products you record (boxes, packs and similar): which product, how many units, which collection and, if you enter them, what you paid and when.

Earlier versions of the app asked for the card's physical condition. It is no longer asked, but whatever was saved then is kept with the card.

Histories that Carduvo calculates

• The market value of each collection, day by day, and how many of your copies had a price that day.
• The total of what you paid, day by day, with the same count.

The server writes them from your collection and the catalog prices. You cannot change them.

Technical data for running the service

• Daily per-account counters: how many price lookups the account makes and how many cards it adds each day. They are used to set limits that prevent abuse and protect the service.
• Error records when the daily calculation of your collection's value fails (the type of error and its technical message), so it can be fixed.
• Crash reports from the app, described below.

What is stored only on your phone

• Your session, in the iOS Keychain, not in an ordinary file.
• Your language, the catalog you pick in the scanner, your sort and filter preferences, whether you hide the value on screen, and your recent searches.

None of this is sent to Carduvo.

What is not collected

• Photos or videos: the app uploads no images and does not ask for access to your photo library.
• Your location, your contacts or the microphone.
• Face ID or Touch ID: the app does not use them.
• Advertising identifiers.
• Payment details: Carduvo charges nothing today.

What it is used for

• Creating and maintaining your account: signing in, confirming your email and recovering access if you forget your password.
• Storing and showing your collection, and calculating its value and history.
• Showing your public page, only if you turn sharing on.
• Protecting the service: applying daily usage limits and preventing a username that is no longer used from passing to someone else.
• Detecting and fixing app crashes.
• Replying to you when you write to support.

Your information is not used for advertising, is not sold, and is not used to track you across other apps or websites.

The camera and the scanner

Carduvo asks for camera access only for the scanner. The prompt your iPhone shows says:

This is how it works:

1. While a card is inside the frame, the app takes photos in quick succession. Each photo is saved temporarily in the app's internal storage, on your phone.
2. The iPhone's own text recognition reads the text printed on the card, such as its number. Reading happens on the phone.
3. The photo is deleted as soon as it has been read, including when nothing could be read or when you leave the scanner mid-read.
4. To identify the card, only text leaves the phone, never the image: in the Pokémon catalog, the number read is looked up in Carduvo's catalog; in the sports catalog, the text read (for example the player, the set and the number) is sent, through Carduvo's servers, to the SportsCardsPro search.

If a photo ever could not be deleted, the app notes it in its crash report as a technical warning, without the image.

Also:

• The app does not ask for microphone access or for your photo library.
• You can deny camera access and keep using Carduvo: searching for and adding cards by hand works the same.

Providers involved

Carduvo uses the following external services. None of them receives your information for advertising.

• Supabase
  What for: Database, account system, server functions and sending the confirmation and recovery emails. Servers in Ohio, United States.
  What it receives: Everything you store in Carduvo: your account, your profile and your collection, plus the technical data of each connection (such as the IP address) that any server records.
• Sentry
  What for: App crash reports.
  What it receives: The technical crash report (see the next section).
• Cloudflare
  What for: Hosts carduvo.app, including the public collection pages.
  What it receives: Visits to the site, like any web server: IP address and page requested.
• TCGdex
  What for: Card images.
  What it receives: Your phone downloads the images directly from its server, so TCGdex sees the phone's IP address and which image is requested. It does not receive your account.
• PriceCharting and SportsCardsPro
  What for: Card and product prices.
  What it receives: Requests go out from Carduvo's servers, not from your phone. They receive product identifiers from their catalog and, for sports searches, the search text. Never your email or your identifier.
• Expo
  What for: App updates.
  What it receives: Your phone asks whether there is a new version: Expo sees the IP address and the installed version.
• Apple
  What for: Distributing the app on the App Store and, if you use it, Sign in with Apple.
  What it receives: Carduvo does not send it your collection or your account data. If you use Sign in with Apple, Apple verifies your identity and shares your email (or a forwarding address) and an identifier with Carduvo; Carduvo sends Apple back its access code to keep it and, when you delete your account, to revoke it.
• Google
  What for: Only if you use Sign in with Google.
  What it receives: Carduvo does not send it your collection. Google verifies your identity and shares your email and an identifier with Carduvo.
• Zoho Mail
  What for: The support@carduvo.app mailbox.
  What it receives: The emails you send to support.

The text you type in a sports search is not stored by Carduvo: it is used to answer your search and then discarded.

In addition, Carduvo's servers download the card catalog, prices and exchange rates from public sources on their own. Those downloads carry no information about you.

Carduvo does not sell your information or share it with data brokers.

Crash reports

When the app crashes, a report is sent to Sentry so the problem can be found and fixed.

The report includes:

• the error and its technical trace, meaning which part of Carduvo's code failed;
• the app version, and whether it is a released or a test version;
• technical device information that the service collects by default, such as the iPhone model, the iOS version and available memory;
• in two specific cases, a technical warning from the scanner: when a number read matches too many cards in the catalog (the warning includes that printed number, which identifies a card, not a person), or when a scanner photo could not be deleted.

The report does not include:

• your email, your username or your account identifier;
• screenshots or the layout of the screen you were on, because they would show your collection;
• your collection or its value;
• the record of network connections or the app's internal messages, which are discarded on the phone before the report is sent.

The app is configured so that Sentry does not receive your IP address as part of the report. As with any internet connection, Sentry's server receives the connection from your network.

Sharing your collection

It starts off

When you create your account, sharing is set to "Only me": nobody else can see your collection. Choosing a username publishes nothing. Only you can turn the link on, from the Profile tab.

What you can choose

• Share all your collections or just one.
• Show or hide the total value.

Before sharing, you can see the page exactly as someone else will with the app's visitor preview.

Who can see it

Anyone who has your link, carduvo.app/u/your-name, or who guesses your username, can open the page without a Carduvo account and without a password. Carduvo does not list your page anywhere, and the page asks search engines not to include it in their results. Major search engines honor that request, but it is not a barrier: if the link is posted somewhere public, anyone who finds it can open it.

What it shows

• Your username (and your display name, if there ever is one).
• What is shared: all your collections, or the name of the chosen collection.
• Your cards: name, set, number, catalog image, how many copies you own and a link to the card's page on PriceCharting or SportsCardsPro.
• Only if you turn it on, the latest market value calculated, how many of your copies have a price ("across X of Y priced copies") and the date.

The page is split into pages of 200 cards. The card images are downloaded by the visitor's browser from TCGdex's server.

What it never shows

• Your email or your account identifier.
• What you paid or when you bought.
• Your notes.
• The grade, grading company, certificate number or condition of your cards.
• Your sealed products.
• The names of your collections, when you share all of them.

When you stop sharing

If you switch back to "Only me", the page stops being shown at that moment: responses are not cached. But what someone has already seen cannot be taken back: a screenshot, or the preview a messaging app saved when the link was pasted.

A name that does not exist and a collection that is not shared show the same page, "this link is no longer available", so nobody can find out who has a Carduvo account by trying names.

If you change your username

You can change it at most once every 7 days. When you change it, the previous link stops working at that moment. The previous name stays reserved: nobody else can use it, so an old link never shows someone else's collection. Only your account can reclaim it.

Who else can see your information

Inside the app, each account can only read its own data: that rule is enforced on the server, not just on screen. The only exception is the public collection page, when you turn it on, and only with what is described above.

Whoever operates Carduvo has technical access to the database, because it is needed to maintain and repair the service. The app has no feature that shows them another person's collection.

How long information is kept

• While you have an account, your information is kept.
• When you delete the account, your information is removed from the database at that moment (see the next section).
• Backups. Supabase makes a daily backup of the database. According to Supabase's documentation for the plan in use (checked in September 2026), the backups from the last 7 days are kept. Your information may therefore remain inside those backups until they expire, even though it is no longer in the database.
• Usernames that are no longer used are kept with no time limit so that nobody else can take them. When the account is deleted, the name stays reserved but is no longer linked to it.
• Emails to support are kept in the support mailbox. This policy does not yet set a period for deleting them; you can ask for yours to be deleted.

The retention periods of the technical logs kept by providers (for example those of Supabase, Cloudflare, Sentry or Expo) are set by each provider and are not verified in this policy.

Deleting your account

You can do it yourself, from the app, without asking anyone:

1. Open the Profile tab.
2. Tap Delete account.
3. Type your account's email address to confirm which account is being deleted.
4. Tap Delete my account permanently.

What is deleted:

• your account: email, password and, if you used them, your Apple or Google sign-ins (Carduvo's access to your Apple account is revoked with Apple);
• your profile: username and sharing settings;
• all your collections, cards and sealed products, with their purchase prices, dates and notes;
• your value and cost histories;
• your usage counters and error records;
• wishlist data from earlier versions of the app, if there was any.

Your sharing link stops working and the app signs you out.

What is not deleted:

• Catalog cards. If you added a missing sports card to the catalog, it stays there for everyone, with no mark of who added it.
• Your username, which stays reserved without being linked to anyone.
• Backups, until they expire.
• Crash reports, which are not linked to your account, for the period Sentry sets.
• Emails you sent to support, unless you ask for them to be deleted.

If something fails partway through, the account is not deleted and the app tells you. Part of your information may already have been removed; you can try again safely.

Deleting the account cannot be undone. If you only want to stop using the app for a while, sign out: that deletes nothing.

Your choices

• See and correct your information from the app, including your username (once every 7 days).
• Ask for a copy of your information by writing to support@carduvo.app.
• Turn the sharing link on or off, and choose whether it shows the value.
• Deny or withdraw camera access from the iPhone's Settings.
• Delete your account from the app.
• Ask any question about this policy by email.

Children

Carduvo is not directed to children under 13 and does not ask for anyone's age or date of birth. If you believe a child under 13 created an account, write to support@carduvo.app to have it deleted.

Security

• All communication is encrypted (HTTPS).
• Your session is stored in the iOS Keychain.
• Your password is stored as a hash: it cannot be read.
• On the server, each account can only read its own data.
• The access keys for data providers live on the server and never travel to the phone.

No system is infallible, and this policy does not promise otherwise.

Changes to this policy

If what Carduvo does with your information changes, this policy is updated before the version of the app with that change reaches the App Store, and the date at the top changes with it. If the change is significant, it will also be announced inside the app.

Contact

For questions, requests, or to report a privacy problem: support@carduvo.app.

The support page explains how to get help with the app.

What this policy cannot yet confirm

So that nothing unchecked is stated as fact, these points are declared as not verified:

1. How long Supabase, Cloudflare, Sentry and Expo keep their technical logs, and whether Supabase has point-in-time recovery enabled, which would extend how long information can be recovered from its backups.
2. Whether PriceCharting or SportsCardsPro keep the searches they receive.
3. Whether the confirmation and recovery emails are sent directly by Supabase's service or by an additional sending service.