Privacy Policy
Last updated: September 1, 2026 · Version 1.0
Carduvo stores your email address and the card collection you enter. We do not sell your data, we show no advertising, and we do not track you across apps.
1. Who is responsible for your data
Carduvo is developed and operated independently by one person, based in the United States. There is no company behind it, no team, and no investors.
For anything related to this policy, your data, or the app, write to support@carduvo.app. The person who develops it is the person who answers.
2. What we collect
Only what the app needs to work. Nothing is collected automatically except the last row below.
| Data | When you give it | Why |
|---|---|---|
| Email address and password | When you create an account | To identify you and let you sign in. The password is stored hashed; we never see it. |
| Display name and preferred currency | Optional, in your profile | To personalise the app and show amounts in your currency. |
| Your collection: which printings you own, how many, in what condition or grade | When you add a card | It is the content of the app. Without it there is no product. |
| What you paid for a card, in which currency, and on what date | Optional, when you add a card | To compute your collection's value and return. Always stored in the original currency. |
| Notes and grading certificate numbers | Optional | Whatever you want to record about a card. |
| Technical error logs | Automatic, when something fails | To diagnose faults. They do not contain your collection. |
3. What we do not collect
This list matters as much as the one above:
- We do not collect your location. Neither precise nor approximate.
- We do not access your contacts, calendar, messages or files.
- We show no advertising and use no advertising identifiers.
- We do not track you across other apps or websites.
- We do not sell or rent your data to anyone, under any circumstances.
- We build no profiles of you for advertising purposes and share none with advertisers.
4. How we use your data
Necessary purposes — without these the app cannot function:
- Creating and maintaining your account and letting you sign in.
- Storing and displaying your collection, and syncing it across your devices.
- Computing your collection's value from public market data.
- Answering your support requests.
- Detecting and fixing faults in the app.
Optional purposes — you may decline without affecting your use of the app:
- Emailing you about significant changes to the service. You can unsubscribe at any time.
5. Where your data lives and who else touches it
Carduvo relies on infrastructure providers. None of them use your data for their own purposes: they process it only on our instruction.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase Inc. (United States) | Database and authentication | All of your account and collection data |
| Expo / EAS (United States) | App builds and updates | No collection data. Technical app data only. |
| Apple App Store and Google Play | App distribution | Whatever their own policies state. We send them none of your collection. |
| Catalog and exchange-rate providers | Card data and currency conversion | Nothing of yours. We only read public information; we never send them user data. |
International transfer. Your data is stored on servers located in the United States. By using Carduvo you accept that transfer, which is necessary to provide the service.
Beyond those providers, we will share your data only if a competent authority requires it in writing and in accordance with the law.
6. How long we keep your data
We keep your data for as long as your account exists. You decide when it stops existing.
You can delete your account from within the app, under Profile → Delete account. You do not need to write to us or wait for approval.
Doing so permanently erases your profile, your entire collection, your acquisition costs and your notes. Deletion is irreversible and we keep no copy.
If you would rather ask by email, write to support@carduvo.app from your account address and we will do it within 30 days at most.
Technical error logs are kept for at most 90 days and contain no collection data.
7. Your rights
Wherever you live, you may access your data, correct it when inaccurate, delete it, and object to its processing.
You exercise most of these yourself, without asking us:
- Access and correction: your whole collection and profile are visible and editable inside the app.
- Deletion: by deleting your account, as described above.
- Objection and portability: write to support@carduvo.app.
If you write from your account's email address, we respond within 20 business days at most. We charge nothing for handling these requests.
These are your ARCO rights — access, rectification, cancellation and objection — and you exercise them through the same routes described above. If you believe your data protection rights have been violated, you may escalate to the competent Mexican authority.
We do not sell or share your personal information, under any definition of those terms, and we do not treat you differently for exercising any of the rights above.
8. How we protect your data
- All traffic between the app and our servers is encrypted with TLS.
- The database enforces row-level security: every query is restricted to the owner of the data by the database engine itself, not by application code. One user cannot read or modify another's collection, even deliberately.
- Passwords are handled by our authentication provider and stored hashed. We never see them and cannot recover them.
No system is infallible. Should a breach materially affect your data, we will tell you by email without undue delay.
9. Children
Carduvo is not directed at children under 13 and we do not knowingly collect their data. If you are a parent or guardian and believe a child in your care created an account, write to support@carduvo.app and we will delete it.
10. Changes to this policy
If we change this policy, we will publish the new version at this same address and update the date in the header. If a change materially affects how we handle your data, we will tell you in the app or by email before it takes effect.
11. Contact
Any question about this policy, your data, or the app: support@carduvo.app.