PikaSimple Privacy Policy

Please review our Terms of Use (EULA) together with this policy.

# PikaSimple Privacy Policy

**Effective date: July 12, 2026**

[Terms of Use (Apple Standard EULA)](https://www.apple.com/legal/internet-services/itunes/dev/stdeula/)

PikaSimple ("PikaSimple," "we," "us," or "our") helps users identify supported collectible cards, estimate visible condition and market value, organize a card collection, and prepare cards for sale. This Privacy Policy explains how information is collected, used, disclosed, and retained when you use the PikaSimple mobile application and related services (the "Service").

## Information We Collect

### Information you provide

- **Account information.** When you use Sign in with Apple, we receive your Apple account identifier and, if you choose to share it, your email address. Apple may provide a private relay email address instead of your personal email address. We do not receive your Apple ID password.
- **Card images.** We process photos you take with your camera or select from your photo library. Only images you choose for scanning are uploaded. Please do not include people, addresses, documents, or other personal information in card photos.
- **Collection information.** We store card details and scan results you save, such as card name, set, number, rarity, condition estimate, value estimate, pricing sources, and sell recommendation.
- **Support communications.** If you contact us, we receive the information included in your message.

### Information collected automatically

- **Account and usage data.** We maintain scan-credit balances, successful scan counts, subscription entitlement status, and records needed to prevent duplicate scans and provide rewarded credits.
- **Analytics data.** We use PostHog to understand app and website use, including pseudonymous device or browser identifiers, product interactions, page views, App Store link clicks, referring domain, and campaign parameters. We use this to improve the Service and measure which of our own marketing efforts lead to app-store visits; we do not use it for cross-context behavioral advertising.
- **Purchase information.** If you purchase or restore a subscription, our subscription provider supplies product, entitlement, and expiration information. We do not receive or store your full payment-card details.
- **Technical data.** Our servers and hosting providers may process IP address, request time, device or app information contained in network requests, and diagnostic information such as request identifiers and error details. We use this information to operate, secure, and troubleshoot the Service.
- **Advertising and SDK data.** If you choose to watch a rewarded ad, Google Mobile Ads may process IP-based general location, device identifiers, ads viewed, interactions, crash logs, and performance information to deliver and measure the ad and operate its SDK. PikaSimple requests non-personalized ads and does not request access to Apple's advertising identifier (IDFA).
- **Local device data.** The app stores a session token securely on your device and may store collection data, card-image copies, scan count, and plan state in app storage to make the Service work.

## Data Collection and Use Summary

The following table describes the data PikaSimple currently collects and how it is used.

| Data collected | How it is collected | How we use it | Where it is processed or disclosed | Retention |
| --- | --- | --- | --- | --- |
| Apple account identifier | Provided by Sign in with Apple | Create and authenticate your account, associate your collection and purchases with you, and prevent unauthorized access | PikaSimple and Apple | While your account is active; deleted from active systems when you delete your account, subject to limited backup, security, and legal retention |
| Email address, including an Apple private relay address if selected | Provided by Apple only when you authorize sharing | Display account information and support account administration | PikaSimple and Apple | While your account is active; deleted from active systems when you delete your account, subject to limited backup, security, and legal retention |
| Card photos you choose to capture or upload | Camera or photo library, with your permission | Identify a card; estimate visible condition, grade, and value; and display or synchronize a saved card image | PikaSimple, OpenAI, and our cloud hosting and object-storage providers | Stored while the related card remains in your collection; deleted from active image storage when you delete the card or account, subject to temporary backups and provider processing terms |
| Card and collection details | Generated from scans or saved by you | Provide scan results, organize and synchronize your collection, and prepare sell lists | PikaSimple, OpenAI during analysis, and our database and hosting providers | While the card or account remains active; deleted from active systems when you delete the card or account, subject to limited backups and legal retention |
| Scan and usage records | Generated when you use scanning or receive scan credits | Enforce scan limits, maintain credit balances, prevent duplicate charges, investigate errors, and prevent abuse | PikaSimple and our database and hosting providers | While your account is active and as reasonably needed for security, fraud prevention, disputes, and legal obligations |
| Subscription product, status, and expiration | Received from Apple and RevenueCat when you purchase, restore, or verify access | Activate paid features, restore purchases, and provide subscription support | PikaSimple, Apple, and RevenueCat | While your account is active and as required for transaction, accounting, dispute, and legal records |
| Rewarded-ad transaction information, if rewarded ads are offered and you use one | Received through Google's server-side reward verification, including PikaSimple user ID, ad-unit ID, transaction ID, and time | Verify the reward, prevent duplicate rewards, and add scan credits | PikaSimple, Google, and our database and hosting providers | While your account is active and as reasonably needed for fraud prevention, disputes, and legal obligations |
| Rewarded-ad delivery and SDK data, if rewarded ads are offered and you use one | Collected by Google Mobile Ads, potentially including IP-based general location, device identifiers, ads viewed, ad or video interactions, crash logs, and performance information | Deliver and measure non-personalized rewarded ads, prevent abuse, and operate and improve the advertising SDK | Google | According to Google's applicable retention practices and your consent or privacy choices |
| IP address and request metadata | Automatically transmitted when your device contacts the Service | Deliver requests, rate-limit scans, secure the Service, investigate errors, and prevent abuse | PikaSimple and our hosting and network providers | Generally processed transiently; diagnostic or security logs may be retained for a limited operational period or as required by law |
| Session token and local app state | Created by the app and stored on your device | Keep you signed in and preserve collection, scan-count, plan, and image state | Your device; the session token is presented to PikaSimple when making authenticated requests | Until you sign out, delete the app, clear its storage, or the token expires; operating-system backups may follow your device settings |
| Support message contents | Provided when you contact support | Respond to your request, troubleshoot issues, and maintain necessary support records | PikaSimple and any communications provider used for support | As long as reasonably necessary to resolve the request and meet legal or operational obligations |

PikaSimple does **not** request precise or approximate device location, contacts, health or fitness data, browsing history, search history, audio recordings, or payment-card numbers. When you visit our website, analytics may receive the website page you viewed and the referring domain; we do not collect your broader browsing history. Google may estimate a general location from IP address when delivering rewarded ads. PikaSimple does **not** use collected data to track you across apps or websites owned by other companies.

## Camera and Photo Library Access

PikaSimple requests camera access so you can photograph a card and photo-library access so you can choose an existing card image. We do not access either source until you grant permission, and we process only the image you select or capture for use in the Service. You can change these permissions in your device settings.

## How We Use Information

We use information to:

- authenticate users and maintain accounts;
- analyze card images and return identification, condition, pricing, and sell-readiness estimates;
- save and synchronize collections across supported devices;
- track scan allowances and prevent duplicate or abusive requests;
- provide, verify, and restore subscription access or promotional scan credits;
- maintain the security, reliability, and performance of the Service;
- respond to support requests; and
- comply with legal obligations and enforce our terms.

We do not use card images to identify people. PikaSimple's condition, grade, and value results are automated estimates and are not professional grading or appraisals.

## How We Disclose Information

We disclose information only as needed to operate the Service, including to:

- **OpenAI,** which processes selected card images and related instructions to generate scan results and market context;
- **Apple,** which provides authentication and processes App Store purchases;
- **RevenueCat,** which manages and verifies subscription entitlements;
- **cloud hosting, database, and object-storage providers,** which host account records, collection data, and saved card images;
- **service providers supporting security and operations,** when enabled for the Service; and
- **government authorities or other parties** when reasonably necessary to comply with law, protect rights or safety, investigate fraud, or respond to lawful requests.

If PikaSimple is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction subject to applicable law.

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising. If we add advertising or analytics practices that materially change this policy, we will update this policy and provide any choices required by law before those practices begin.

## Data Retention

We keep account, collection, image, usage, and entitlement information while your account is active and as needed to provide the Service. When you delete an individual card, it is removed from your active collection and its associated stored image is scheduled for deletion. When you use **Delete account and data** in the app, we delete the account records, cards, stored card images, scan history, and related usage and entitlement records associated with your account from active systems.

Limited information may remain temporarily in backups, security logs, or records retained to meet legal, fraud-prevention, accounting, or dispute-resolution obligations. Backup copies are removed or overwritten according to the applicable backup schedule.

Local app data may remain on a device after signing out. You can remove that local data by deleting the app, subject to your operating system's behavior.

## Your Choices and Rights

You may:

- decline camera or photo-library permission, although card scanning from that source will not work;
- remove individual cards from your collection;
- delete your account and associated data from the app by opening the Plans screen and selecting **Delete account and data**;
- sign out or revoke PikaSimple's access through your Apple ID settings; and
- manage or cancel subscriptions through your Apple App Store account settings.

Depending on where you live, you may also have rights to request access to, correction of, deletion of, or a copy of personal information, or to object to or restrict certain processing. Contact us using the method below. We may need to verify your identity before completing a request.

## Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted network connections in production, authenticated access, expiring sessions, and access-controlled image storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

## Children's Privacy

PikaSimple is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it. In locations with a higher minimum age for consenting to data processing, users below that age should use the Service only with authorization from a parent or guardian.

## International Data Transfers

PikaSimple and its service providers may process information in the United States and other countries where data-protection laws may differ from those in your location. Where required, we use appropriate safeguards for international transfers.

## Third-Party Services and Links

The Service may display links to third-party pricing or marketplace sources. Their privacy practices are governed by their own policies, not this Privacy Policy. Third-party services used by PikaSimple also process information under their own terms and privacy policies.

## Changes to This Policy

We may update this Privacy Policy as the Service or legal requirements change. We will update the effective date above and provide additional notice in the app when required. Your continued use of the Service after an update means the revised policy applies to future use.

## Contact Us

For privacy questions or requests, email [email protected] and include "Privacy Request" in the subject line. Do not send sensitive information or identity documents unless we ask for them through a secure method.