Privacy Policy for CardDex

Last Updated: October 14, 2025

This Privacy Policy describes how CardDex ("we," "us," or "our") collects, uses, and discloses your information when you use our web application (the "Service").

1. Information We Collect

We collect information you provide directly to us and information that is automatically collected when you use our Service.

• Account Information: When you create a CardDex account, we collect your email address and password.
• Collection Data: We collect and store the information about the Pokémon cards you scan and add to your collection, including card details, acquisition costs, and physical condition.
• Payment Information: For paid subscriptions or credit purchases, we use a third-party payment processor (Stripe). We do not collect or store your full credit card information. Stripe provides us with a token that represents your account, your card's expiration date, card type, and the last four digits of your credit card number.
• Usage Information: We may collect information about your interactions with the Service, such as the features you use and the time, frequency, and duration of your activities.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service.
• Create and manage your account.
• Process your payments through our third-party payment processor.
• Calculate and display your portfolio's value and market insights.
• Communicate with you, including sending you service-related notifications and responding to your inquiries.
• Send push notifications, if you have opted-in, regarding significant changes in your portfolio's value.

3. Data Sharing

We do not sell or share your personal data with third-party advertisers. We may share information in the following circumstances:

• With Service Providers: We share necessary information with trusted service partners like Google (for cloud hosting and authentication), Stripe (for payments), and Algolia (for search functionality). These partners are obligated to protect your data and are not permitted to use it for other purposes.
• For Legal Reasons: We may disclose your information if required by law or in response to valid requests by public authorities.

4. Your Control and Data Rights

You have control over your personal information:

• You can view, manage, and delete your collection data at any time within the application.
• You can update your account information.
• You can delete your account, which will permanently remove all associated personal information from our active databases.

5. Security

We take reasonable measures to help protect your information from loss, theft, misuse, and unauthorized access. All payment transactions are encrypted using SSL technology.

6. Children's Privacy

Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@carddexapp.com