Privacy Policy

For the SlabScout iOS app · Effective 14 August 2026

This describes what the SlabScout iOS app does with data. Every statement here describes what the app and its server actually do. If something here does not match the app's behaviour, this policy is wrong and we will fix it.

The short version. There is no account and no sign-up. SlabScout never asks for your name, email address, phone number or password, and it is not connected to your Apple ID. It stores the card photos you take and the card details that come from them. There is no advertising, no analytics, no tracking, and nothing is sold or shared with data brokers.

How your data is kept separate

The first time you open SlabScout it generates a random identifier and stores it in your device's Keychain. Everything you add is stored against that identifier, and it is what keeps your collection separate from every other person's. It is not tied to your name, your email, your phone number or your Apple ID, and it is not used to track you anywhere. If you erase your data (below) a new identifier is generated.

What is collected

Card photographs

Every photo you take or choose — the card front, the optional back, bulk-intake photos, and the macro shots of a deep dive — is uploaded to the app's server and stored in Cloudflare R2 object storage, under a key beginning with your identifier. A request that does not carry your identifier cannot read your photos.

Card details

The player, set, year, card number and variant read from the photo; the sold prices you enter; centering measurements; condition scores; and the resulting decisions are stored in a Cloudflare D1 database, against the same identifier.

Nothing else

SlabScout collects no contact information, no location, no contacts, no health data, no advertising identifier and no usage analytics. It contains no third-party SDKs.

Where photos are sent

To read what a card is and to score its condition, your photos are sent to Cloudflare Workers AI, which runs the vision model. Cloudflare processes them to return that result. Photos are not sent to any other company, and they are not used to train models by us.

Permissions the app asks for

Camera — to photograph your cards. Requested only when you open the scanning screen, never on launch.
Photo library — only when you choose to pick an existing photo. The picker runs outside the app, so SlabScout sees only the images you select and never your whole library.

Deleting your data

Settings → Erase everything permanently deletes your photos and every row of your data from the server. It cannot be undone.

Please read this before deleting the app. Removing SlabScout from your iPhone deletes the identifier stored on your device, but it does not delete the photos and card data already on the server, and without the identifier that data can no longer be reached to delete it. If you want your data gone, use Erase everything first, then delete the app.

How long data is kept

Your photos and card records are kept until you erase them. There is no automatic expiry.

Children

SlabScout is a tool for trading-card collectors. It is not directed at children and does not knowingly collect data from children.

Changes

If this policy changes, the effective date above changes with it.

Contact

Questions, or a request to delete data you can no longer reach: support@appfactoryrus.com.