PokeVault privacy policy

The short version

PokeVault does not require an account. We do not ask for your name, email, or phone number inside the app.
This policy does not describe advertising. PokeVault, as described here, does not use an ad network such as Google AdMob. If that changes, we will update this policy first.
A card photo you choose to scan is sent to the Google Gemini API so the card can be identified.
Collection information may be stored on your device and with Google Firebase.
Card lookups are sent to pokemontcg.io and JustTCG to show catalog details and market prices.
A CSV export is a file created for you. The export itself does not send that file to TDSignal.
PokeVault Pro is billed by Google Play Billing. RevenueCat tells the app whether Pro is active. The price and what Pro includes are shown in Google Play, not as a dollar amount here.
We do not sell your personal information.
PokeVault is not directed to children under 13.
To ask us to delete personal information, use the data deletion page or email tdsignal@yahoo.com.

Who we are

The legal name of the business is TDSignal LLC. The owner is Tom Deemter. TDSignal LLC is in the United States.

BUSINESS_ADDRESS

Replace BUSINESS_ADDRESS with the public street address of TDSignal LLC before Google Play review. No address is listed yet.

This policy covers the PokeVault app and this website page.

PokeVault is not affiliated with Nintendo, The Pokémon Company, or Game Freak. Card names, images, and catalog data may be subject to the rights of those owners and of the data providers.

Card photos

When you scan a card, the photo is sent to the Google Gemini API so the card can be identified. The photo is used for that identification. We do not sell card photos. We do not attach your name to the photo, because the app has no account.

The app needs access to your camera or to a photo you choose, only so you can take or pick that picture. This policy does not list any other device permission.

An identification can be wrong. Google processes the photo under the Gemini API terms: ai.google.dev/gemini-api/terms. We do not control how long Google keeps API inputs. This policy does not promise that Google refrains from using API data to train models. Check Google’s current terms for that.

Your collection

PokeVault uses Google Firebase to operate the app. Collection information you choose to save may be stored on your device and with Firebase. We do not require an account, and this policy does not describe a public profile or a sign-in system.

Firebase is a Google service. Its privacy information is at firebase.google.com/support/privacy. This policy does not name a specific Firebase product, such as a particular database or crash tool, beyond the fact that Firebase is used to operate collection features. If we add optional accounts later, we will update this policy before that change.

Uninstalling the app removes the copy on your device. It may not remove a copy stored with Firebase. Use the data deletion page to ask us to delete stored collection information. Include the app name, about when you used it, and any identifier the app shows you, if it shows one. If we cannot find a record, we will tell you.

Catalog and prices

To show card details and market prices, the app sends card lookups to two independent services: pokemontcg.io and JustTCG. A lookup is about the card, such as a name, a set, or a card identifier. We do not attach an account to those requests.

pokemontcg.io is an independent card catalog. It is not an official service of Nintendo, The Pokémon Company, or Game Freak. JustTCG is an independent pricing source. We do not control their logs. Their sites are pokemontcg.io and JustTCG.

A price can be missing or out of date. It is not an offer by TDSignal LLC to buy or sell a card.

CSV export

You can export your collection to a CSV file. That file is created for you to save or share. Creating the export does not send the CSV to TDSignal LLC.

Pro subscription

PokeVault has a paid Pro tier. This policy does not name a price, and it does not assign particular features to Pro. The price, and what Pro includes, are shown in Google Play before you subscribe. Google Play may show tax, or a price in your local currency. The price you confirm there is the price that applies.

Google Play Billing processes the payment. TDSignal LLC does not receive your full payment card number.

We use RevenueCat so the app can tell whether Pro is active. Google Play and RevenueCat process a purchase token, the product identifier, and an app-scoped identifier. You do not create a TDSignal account for that identifier.

A Google Play subscription renews until you cancel it in the Google Play app. Asking us to delete data does not cancel Pro. RevenueCat’s privacy policy is at revenuecat.com/privacy.

This website

This website is a set of static pages. We do not set tracking cookies on it, and we do not run ads on it. Reading these pages does not create an account.

The company that hosts the site, such as Firebase Hosting, Cloudflare, or Vercel, may keep ordinary logs. Those logs can include an IP address, browser type, and the page requested. The host keeps them for security and operations, under its own policy. We do not sell hosting logs.

Children

PokeVault is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent and you believe we have information from your child, email tdsignal@yahoo.com and ask us to delete it. If you are under 13, do not send us personal information.

Pokémon cards are popular with children. PokeVault is still a general-audience collection tool. It is not a children’s app, and it is not directed to children under 13.

How long we keep information

Emails you send us: kept while we handle the request, then deleted, unless the law requires us to keep them. After a clear deletion request, we aim to delete personal information in those emails within 30 days when we can still find it.
Card photos: sent to Google to identify the card in that request. We are not describing a separate photo album on TDSignal servers.
Collection information stored with Firebase: kept so the collection feature can work, until you ask us to delete it or we remove it because we no longer need it to run the feature. On-device collection data stays until you clear storage or uninstall.
Card lookups: sent to pokemontcg.io and JustTCG at the time of the lookup. We do not keep a TDSignal account of your searches.
CSV files: they stay wherever you saved them. We do not receive the export as part of creating it.
Subscription status: Google Play and RevenueCat keep purchase records under their own rules.
Website hosting logs: kept by the host under its policy.

If you ask what we still have, and we are not sure a provider still holds a copy, we will say so. We will not invent a retention period we cannot confirm.

We share information with service providers only so they can run the part of PokeVault they are responsible for:

Google Gemini API, to identify a card from a photo you submit.
Google Firebase, to operate collection features.
pokemontcg.io and JustTCG, for card catalog details and market prices.
Google Play, to distribute the app and process PokeVault Pro.
RevenueCat, to report whether Pro is active.
The website host, for ordinary hosting logs.

We may also share information if we believe we must do so to follow the law, respond to a valid legal request, or protect someone from harm.

We do not sell your personal information, and we do not share it with data brokers. PokeVault, as described in this policy, does not use Google AdMob or another ad network.

Your choices and deletion

You can use PokeVault without creating an account.
You can cancel a subscription in the Google Play app. Canceling is separate from deletion. Deleting data does not by itself cancel a paid subscription.
You can uninstall the app, or clear its storage in Android settings, to remove information that stays on the device.
You can ask us to delete personal information you sent us. The page for that request is /delete/. You can also email tdsignal@yahoo.com with the subject “Data deletion request”.

Because there is no account, we may only be able to find messages you sent us, or a purchase record a provider can look up. If we cannot find a record tied to you, we will tell you.

Privacy rights

If you live in a US state that lets you access or delete personal information, email us. We do not sell personal information, which is the phrase used in laws such as the California Consumer Privacy Act. We will not cut off the app because you made a privacy request. We may keep a record the law requires us to keep, such as a note of a purchase dispute.

For a Firebase copy of a collection, tell us it is PokeVault and include any identifier the app shows, if you see one. We cannot promise that pokemontcg.io, JustTCG, Google, or RevenueCat will delete their own logs because we asked. We will point you to the provider when the data is theirs.

Security

We use ordinary care for a small studio, and we rely on Google, RevenueCat, pokemontcg.io, and JustTCG for the parts of the service they run. Email is not a fully private channel. No method of sending or storing information is perfectly secure.

TDSignal LLC is in the United States. The companies named in this policy may process information in the United States and in other countries where they operate.

Changes

The date at the top of this page is the effective date. If we change the policy, we will update this page and that date. The app has no accounts, so we cannot email every user about a change. This page is the current policy.

Contact

TDSignal LLC
tdsignal@yahoo.com