Privacy Policy

1. Who we are

GrailFox is made and run by a sole trader based in Berlin, Germany, who is the controller for the personal data described here. The full postal address is on the Impressum. You can reach us at privacy@grailfox.net.

2. What we collect

GrailFox has no sign-up, so we hold no name, email address or password unless you write to us. In normal use the app processes three kinds of data: the photograph you take of a card, basic technical information about your device and app version, and a record of purchases made through the App Store.

Your collection — the cards you have added, their condition and quantity — is held in an account on our server that is tied to an anonymous identifier and to nothing else about you. That identifier is kept on your device and is the only way back into the account, so a phone that is lost or reset loses access to the collection.

3. Card photographs

GrailFox does not save card photographs — not in your collection, not on our servers. A photograph is sent to our recognition provider for the sole purpose of identifying the card, and is discarded once the identification is returned or has failed.

Photographs are never used for advertising, never linked to an identity, and never published.

4. Third parties

Three parties are involved in delivering the service: the image recognition provider that identifies the card, the market data provider that supplies price estimates, and Apple, which processes payments and subscriptions. Each receives only what it needs to perform its part, under a data processing agreement where applicable.

This website loads no third-party scripts, fonts, images or analytics, and sets no cookies.

5. Legal bases

Where the GDPR applies, we process card photographs and device data to perform the contract you enter into when you use the app (Art. 6(1)(b)), and diagnostic data on the basis of our legitimate interest in keeping the app working (Art. 6(1)(f)).

6. Retention

Photographs are held only for the duration of a scan. Diagnostic records are kept for a limited period and then deleted. Purchase records are retained for as long as tax and accounting law requires.

7. Your rights

You may request access to, correction of, or deletion of personal data we hold, object to processing, and lodge a complaint with a supervisory authority. Because the app holds so little, most requests are answered quickly. Write to privacy@grailfox.net.

8. Children

GrailFox is not directed at children under 13, and we do not knowingly collect their personal data.

9. Changes and contact

If this policy changes materially we will update the date at the top and note the change in the app's release notes. Questions go to privacy@grailfox.net, or to the postal address on the Impressum.