Privacy Policy

Last updated 2026-07-26.

WorthDex is built privacy-first. Card recognition runs on your device. We do not sell your data.

What we collect

• On-device data. Your scans, photos, and collection are stored on your device and in your private iCloud (CloudKit). We can't read your iCloud-private data. This includes photos you pick from your library when you import a card: the system picker hands over only the photos you choose, never your library.
• App analytics & diagnostics. To understand how the app is used and to keep it stable, we collect anonymous usage events (such as scans, screens viewed, paywall views, and the corrections you make to a scan) through TelemetryDeck, plus crash and performance diagnostics through Apple's MetricKit. These carry no photos, card images, or personal details, aren't linked to your identity, and are never used to track you across apps. An anonymous identifier groups events that come from the same install. This is on by default, and you can turn it off any time in Settings, under Data, with the "Analytics & diagnostics" toggle. Turning it off stops WorthDex sending this anonymous data.
• Help improve recognition (opt-in, off by default). Settings has an opt-in called "Help improve recognition", under Data. While it's off, this does nothing. When you turn it on, the cropped photo of a card you correct is kept on this device, alongside catalog details about the correction (which card was matched and which you chose), and it is tied to your card-catalog data, not to your identity. Nothing is uploaded automatically. The crop stays on your phone unless you choose to export it with "Export correction data", which hands the bundle to the iOS share sheet so you can send it to us to help train better recognition. Turning the setting off deletes everything that's been kept. The kept files stay on your device, are excluded from your iCloud backup, and never sync.
• Sharing. When you share your collection or a card, WorthDex creates the image on your device and hands it to the iOS share sheet, so it goes only to the app you choose. We don't transmit the image or your values to our servers. We do record an anonymous "you shared something" usage event, counted with the same app analytics described above and carrying no values, photos, or personal details. If you choose Save Image, the picture is written to your own Photos after iOS asks you. That permission is add-only, so WorthDex still cannot read your library.
• Website analytics. Our website uses Cloudflare Web Analytics, which is cookieless and does not fingerprint or track you across sites.
• Subscriptions. Purchases are handled by Apple and our subscription provider, RevenueCat, which assigns an anonymous app user ID to manage your entitlement. We receive your subscription status, not your payment details.

How we use data

We use the limited data we receive only to operate and improve the app: to deliver price bundles, verify your subscription entitlement, understand how features are used, fix crashes and performance issues, and improve recognition accuracy. The corrections you make to a scan are sent as anonymous telemetry to improve the model, carry no photo, and are never tied to your identity. The card photos you take are otherwise yours alone and are not sent to us as part of that telemetry. The one exception is when you turn on "Help improve recognition" and then export your correction data yourself: that bundle includes the cropped photos of the cards you corrected, and it reaches us only because you chose to send it. We do not sell your data and do not use it for cross-site advertising.

Data retention

On-device and iCloud-private data lives only on your devices and in your Apple iCloud, under your control; deleting the app and your iCloud data removes it. Entitlement records held by our subscription provider are retained only as long as needed to honour your purchase and meet legal obligations. Cookieless web-analytics counts are aggregate and not tied to you.

Third-party services

Prices are sourced from TCGplayer. The app does not call third-party price APIs directly; it reads pre-published price bundles from our CDN. Subscriptions are processed by Apple and RevenueCat; the website is served by Cloudflare.

Your choices & rights

You can delete all your data at any time, right from the app (Settings → Delete all my data); see Delete your data. You can disable iCloud sync in iOS Settings, and you may request access to or deletion of any data we hold by emailing us.

Children

WorthDex is not directed to children under 13 and we do not knowingly collect their personal information.

Contact

Questions about this policy? Email [email protected].