Privacy Policy

Who we are

PokeSense is made and operated by Iniyan Anand, trading as Obsidian Build Developers, based in the Netherlands, who is the data controller for the personal data described here.

Contact: obsidianbuilddevelopers@gmail.com

Overview

PokeSense ("we", "our", or "us") is a trading card scanning and collection management app. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using PokeSense, you agree to the practices described here.

Information We Collect

Account information: When you register, we collect your username, password (encrypted), and avatar selection.

Collection data: Card names, valuations, conditions, scan metadata, and card images you capture or upload.

Usage data: XP earned, scan counts, and premium status.

Device information: To enforce the one-time free trial we store a salted, irreversible hash of your device’s Android ID. It is used only to stop the trial being reset by creating new accounts, is never linked to your identity, and cannot be turned back into a device identifier. We collect no location data and nothing else beyond what is needed to operate the app.

How We Use Your Information

To operate your account and sync your collection across devices.

To identify the cards you scan. This happens ON YOUR PHONE: the card index and the matching run on the device, and a scan's photo is not sent anywhere to be identified.

To produce a grade estimate WHEN YOU ASK FOR ONE. Only then are those photos sent to Google Gemini.

To fetch card metadata and market prices.

To calculate XP and rank progression.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Third-Party Services

Google Gemini AI — used ONLY for grade estimates, and only for the photos you submit when you ask for one. Ordinary scans are identified on your phone and are not sent to Google. Google's privacy policy applies to the grading photos.

Supabase — Your account and collection data is stored on Supabase's infrastructure (EU West, Ireland). Supabase's privacy policy applies.

TCGdex — Card metadata queries are sent to TCGdex. No personal data is shared with TCGdex.

Card Images

Photos you take for scanning are identified on your phone, not uploaded for analysis; only photos you submit for a grade estimate are sent to Google Gemini. For signed-in users, images are stored both locally on your device and in your private Supabase storage bucket for cross-device access. For guest users, images are stored locally only. Images are never shared publicly.

Data Retention

Your data is retained for as long as your account is active. You may delete your account and all associated data at any time from within the app: Settings → Profile → Delete Account. Upon deletion, your profile, collection, card images, and XP are permanently removed from our database — this action cannot be undone.

Security

We use industry-standard security measures including encrypted connections (HTTPS), Supabase Row Level Security (RLS) to ensure users can only access their own data, and bcrypt-hashed passwords managed by Supabase Auth.

Children's Privacy

PokeSense is for people aged 16 and over, and you confirm your age when you create an account. We do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has created an account or given us personal data, contact us and we will delete it.

Your Rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to receive a copy in a portable form, to restrict or object to processing, and to withdraw consent where processing rests on it. Deleting your account in the app (Settings → Profile → Delete Account) erases your profile, collection, images and XP.

To exercise any of these rights, write to obsidianbuilddevelopers@gmail.com. You also have the right to complain to a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Why we may process your data (legal bases)

To provide the app and your account, and to take payment: performance of our contract with you.

To keep the free allowance honest (the salted device hash) and to keep the service secure and working: our legitimate interest in preventing abuse.

To send a grade estimate to Google Gemini: performance of the contract, at your request, for the photos you submit.

Where we ask for consent, you may withdraw it at any time.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes within the app. Continued use of PokeSense after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or your data, contact us at:

Iniyan Anand, trading as Obsidian Build Developers
The Netherlands
obsidianbuilddevelopers@gmail.com

App support: pokerasupport@gmail.com