Privacy Policy

Zenith Sports Card Scanner ("Zenith", "the app") is published by Zenith AI Apps. This policy explains what the app collects, why it is needed, and how you can remove it. We collect the minimum required to identify cards, estimate their market value, and keep your collection in sync — we do not sell personal data and the app contains no advertising trackers.

1. What the app collects

Account identifier

Zenith does not ask for an email address, password, phone number, or social profile. On first launch the app creates an anonymous account (a random identifier issued by Firebase Authentication). That identifier is what links your scans, collection, watchlist, and subscription to your device. It cannot be used to contact you.

Card photos

When you scan a card, the photo is uploaded over an encrypted connection so the card can be identified and priced. Specifically:

• Photos are sent to our backend and to our card-identification provider (CardSight) solely to recognise the card and look up real auction comparables.
• Uploaded photos are stored in our processing bucket for a maximum of 7 days and then deleted automatically.
• If you keep a scan in the app, the photo is stored encrypted on your device only; it is not kept on our servers.
• You can delete every saved photo at any time from Profile → Delete Saved Photos.

Collection, watchlist, and scans

Cards you add to your collection or watchlist (card reference, quantity, optional purchase price and notes) and your scan history are stored under your anonymous account so they appear on your device and survive reinstalls. Scan and search counters are stored to enforce the free-plan allowance and to show your remaining usage.

Device and app information

To debug support requests and keep the service reliable, we store a small profile for your account: platform (iOS/Android), app version, device model, operating-system version, a device identifier, and first/last seen timestamps. This profile is used only for diagnostics, abuse prevention, and support.

Subscriptions

Purchases are processed by Apple. We never see your payment card details. We receive the subscription status (active/expired, product, expiry date) from Apple through RevenueCat so Pro features unlock in the app and on our servers.

2. Who processes the data

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Run) — account, collection, scan, and profile storage.
• CardSight — card identification and auction price data. Scanned card photos are sent for identification only.
• RevenueCat — subscription status synchronisation with the App Store.
• Apple — App Store distribution, purchases, and subscription management.

Each provider processes data only to deliver the service described above. We do not share data with advertisers or data brokers, and we do not use it for cross-app tracking.

3. What we do not collect

• No name, email address, or phone number (unless you email us first).
• No precise location, contacts, health, or financial account data.
• No advertising identifiers, and no third-party ad SDKs.

4. Data retention

• Scanned photos in processing storage: deleted automatically after 7 days.
• Cached catalog and price data: automatically deleted after their cache window (7–180 days) by database expiry policies.
• Collection, watchlist, scans, and profile: kept while your anonymous account exists, and removed when you request deletion.

5. Your choices and data deletion

You can remove local data immediately from the app (Profile → Delete Saved Photos). To delete the account and everything stored on our servers, email [email protected] from the app's Email Support action — your account ID is included automatically so we can find and erase the right records. Deletion requests are actioned within 30 days.

6. Security

All traffic is encrypted in transit (TLS). Saved scan photos on your device are encrypted with a key held in the iOS Keychain. Access to stored data is limited to the backend service accounts that operate the app, and the app only ever reads your own documents.

7. Children

Zenith is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has used the app, contact us and we will delete the account.

8. International transfers

Our infrastructure runs in Google Cloud data centres (United States) with industry-standard safeguards. By using the app you consent to this processing.

9. Changes to this policy

If we change how the app handles data, we will update this page and revise the date above. Continued use after an update means you accept the revised policy.

10. Contact

Questions about privacy or data deletion? Email [email protected].