Privacy Policy

Last updated 2026-10-11.

WorthDex is built privacy-first. Card recognition runs on your device. We do not sell your data.

What we collect

• On-device data. Your scans, photos, and collection are stored on your device and in your private iCloud (CloudKit, plus iCloud key-value storage for your photo-sync setting). We can't read your iCloud-private data. This includes photos you pick from your library when you import a card: the system picker hands over only the photos you choose, never your library.
• App analytics & diagnostics. To understand how the app is used and to keep it stable, we collect anonymous usage events (such as scans, screens viewed, paywall views, and the corrections you make to a scan) through TelemetryDeck, plus crash and performance diagnostics through Apple's MetricKit. These carry no photos, card images, or personal details, aren't linked to your identity, and are never used to track you across apps. An anonymous identifier groups events that come from the same install. Every event also carries a small set of coarse dimensions built from the onboarding questions, so we can tell how different kinds of collector use WorthDex: your collection-size bucket (persona_size), whether that bucket is our largest one (persona_whale), the goal you picked (persona_goal), and whether you answered those questions at all (persona_known). They are fixed buckets and yes/no flags. If you skip a question, its dimension is left off the event entirely. This is on by default, and you can turn it off any time in the app under Profile, then "Privacy & data", with the "Analytics & diagnostics" toggle. Turning it off stops WorthDex sending this anonymous data, the persona buckets included.
• Help improve recognition (opt-in, off by default). The Profile tab has an opt-in called "Help improve recognition", under "Privacy & data". While it's off, this does nothing. When you turn it on, the cropped photo of a card you correct is kept on this device, alongside catalog details about the correction (which card was matched and which you chose), and it is tied to your card-catalog data, not to your identity. No photo is uploaded automatically. The crop stays on your phone unless you choose to export it with "Export correction data", which hands the bundle to the iOS share sheet so you can send it to us to help train better recognition. Turning the setting off deletes everything that's been kept. The kept files stay on your device, are excluded from your iCloud backup, and never sync.
• Sharing. When you share your collection or a card, WorthDex creates the image on your device and hands it to the iOS share sheet, so it goes only to the app you choose. We don't transmit the image or your values to our servers. We do record an anonymous "you shared something" usage event, counted with the same app analytics described above and carrying no values, photos, or personal details. If you choose Save Image, the picture is written to your own Photos after iOS asks you. That permission is add-only, so WorthDex still cannot read your library. The link that travels with a shared card or set is the public page for that card or set on worthdex.com (or our home page, for your collection or a price you typed in yourself). It names the card or set page, never your copy, its value, or you. When a WorthDex link opens the app, we count an anonymous event recording what kind of link it was and whether the app could open it, without the card or set it named.
• Website analytics. Our website uses Cloudflare Web Analytics, which is cookieless and does not fingerprint or track you across sites.
• Subscriptions. Purchases are handled by Apple and our subscription provider, RevenueCat, which assigns an anonymous app user ID to manage your entitlement. We receive your subscription status, not your payment details.

How we use data

We use the limited data we receive only to operate and improve the app: to deliver price bundles, verify your subscription entitlement, understand how features are used, fix crashes and performance issues, and improve recognition accuracy. The corrections you make to a scan are sent as anonymous telemetry to improve the model, carry no photo, and are never tied to your identity. The card photos you take are otherwise yours alone and are not sent to us as part of that telemetry. The one exception is when you turn on "Help improve recognition" and then export your correction data yourself: that bundle includes the cropped photos of the cards you corrected, and it reaches us only because you chose to send it. We do not sell your data and do not use it for cross-site advertising.

Data retention

On-device and iCloud-private data lives only on your devices and in your Apple iCloud, under your control; deleting the app and your iCloud data removes it. Entitlement records held by our subscription provider are retained only as long as needed to honour your purchase and meet legal obligations. Cookieless web-analytics counts are aggregate and not tied to you.

Third-party services

Market prices come from JustTCG, the price-data provider we subscribe to. A JustTCG price is a market observation: a volume-weighted average of sales activity across online marketplaces and participating local game stores, not one seller's asking price and not a figure we set. WorthDex matches your cards to that data using TCGplayer product identifiers, which are catalogue reference numbers and not a price source. WorthDex is not affiliated with JustTCG or TCGplayer. The app does not call third-party price APIs directly; it reads pre-published price bundles from our CDN, which is hosted by Cloudflare. Downloading a bundle is an ordinary web request, so it carries your device's IP address the way any download does, and it reveals nothing about your collection: every device downloads the same bundle, never a per-card lookup, and JustTCG receives nothing about you or your collection. Subscriptions are processed by Apple and RevenueCat, app analytics and diagnostics by TelemetryDeck, and the website is served by Cloudflare.

Reference images. When the app shows a card's reference image, your device downloads that image directly from Scrydex's image server, not from our CDN. Like any image download, that request carries your device's IP address and standard web headers (such as the app's name and version, the iOS networking version, and your preferred language), and its address names the card image being fetched, so Scrydex's image server can see which card images a device asked for. We add no account, collection, or device identifier, and no cookies are stored or sent. Downloaded images are kept only on your device: you can clear them in the app under Profile, then “Card images”, and “Delete all my data” clears them too. These requests go from your device to that server, so we never receive them or their logs. Scrydex's own privacy policy lists “IP address, browser type, and access times” among the usage data it may collect, and it does not say how long that data is kept; its handling of these image requests is governed by that policy, not this one.

We use only providers whose own terms commit them to protecting the limited data they receive at least as well as this policy describes, and to using it solely to provide their service to us. Apart from your own private iCloud, described above, none of them receives your photos, your card images, or your collection. The reference-image server described above is not one of these providers: it does not process data for us, and Scrydex's own policy covers the image requests it receives.

Your choices & rights

You can delete all your data at any time, right from the app: open the Profile tab, scroll to "Privacy & data", and tap "Delete all my data"; see Delete your data. You can disable iCloud sync in iOS Settings, and you may request access to or deletion of any data we hold by emailing us.

Children

WorthDex is not directed to children under 13 and we do not knowingly collect their personal information.

Changes to this policy

If we change how WorthDex handles your data, we revise this page and move the date at the top. That date only moves when the policy itself actually changes, so it tells you when to re-read.

Contact

Questions about this policy? Email privacy@worthdex.com.