Privacy Policy

Last updated 2026-09-06.

WorthDex is built privacy-first. Card recognition runs on your device. We do not sell your data.

What we collect

• On-device data. Your scans, photos, and collection are stored on your device and in your private iCloud (CloudKit). We can't read your iCloud-private data. This includes photos you pick from your library when you import a card: the system picker hands over only the photos you choose, never your library.
• App analytics & diagnostics. To understand how the app is used and to keep it stable, we collect anonymous usage events (such as scans, screens viewed, paywall views, and the corrections you make to a scan) through TelemetryDeck, plus crash and performance diagnostics through Apple's MetricKit. These carry no photos, card images, or personal details, aren't linked to your identity, and are never used to track you across apps. An anonymous identifier groups events that come from the same install. Every event also carries a small set of coarse dimensions built from the onboarding questions, so we can tell how different kinds of collector use WorthDex: your collection-size bucket (persona_size), whether that bucket is our largest one (persona_whale), the goal you picked (persona_goal), and whether you answered those questions at all (persona_known). They are fixed buckets and yes/no flags. If you skip a question, its dimension is left off the event entirely. This is on by default, and you can turn it off any time in the app under Profile, then "Privacy & data", with the "Analytics & diagnostics" toggle. Turning it off stops WorthDex sending this anonymous data, the persona buckets included.
• Help improve recognition (opt-in, off by default). The Profile tab has an opt-in called "Help improve recognition", under "Privacy & data". While it's off, this does nothing. When you turn it on, the cropped photo of a card you correct is kept on this device, alongside catalog details about the correction (which card was matched and which you chose), and it is tied to your card-catalog data, not to your identity. No photo is uploaded automatically. The crop stays on your phone unless you choose to export it with "Export correction data", which hands the bundle to the iOS share sheet so you can send it to us to help train better recognition. Turning the setting off deletes everything that's been kept. The kept files stay on your device, are excluded from your iCloud backup, and never sync.
• Sharing. When you share your collection or a card, WorthDex creates the image on your device and hands it to the iOS share sheet, so it goes only to the app you choose. We don't transmit the image or your values to our servers. We do record an anonymous "you shared something" usage event, counted with the same app analytics described above and carrying no values, photos, or personal details. If you choose Save Image, the picture is written to your own Photos after iOS asks you. That permission is add-only, so WorthDex still cannot read your library.
• Website analytics. Our website uses Cloudflare Web Analytics, which is cookieless and does not fingerprint or track you across sites.
• Subscriptions. Purchases are handled by Apple and our subscription provider, RevenueCat, which assigns an anonymous app user ID to manage your entitlement. We receive your subscription status, not your payment details.

How we use data

We use the limited data we receive only to operate and improve the app: to deliver price bundles, verify your subscription entitlement, understand how features are used, fix crashes and performance issues, and improve recognition accuracy. The corrections you make to a scan are sent as anonymous telemetry to improve the model, carry no photo, and are never tied to your identity. The card photos you take are otherwise yours alone and are not sent to us as part of that telemetry. The one exception is when you turn on "Help improve recognition" and then export your correction data yourself: that bundle includes the cropped photos of the cards you corrected, and it reaches us only because you chose to send it. We do not sell your data and do not use it for cross-site advertising.

Data retention

On-device and iCloud-private data lives only on your devices and in your Apple iCloud, under your control; deleting the app and your iCloud data removes it. Entitlement records held by our subscription provider are retained only as long as needed to honour your purchase and meet legal obligations. Cookieless web-analytics counts are aggregate and not tied to you.

Third-party services

Market prices come from JustTCG, the price-data provider we subscribe to. A JustTCG price is a market observation: a volume-weighted average of sales activity across online marketplaces and participating local game stores, not one seller's asking price and not a figure we set. WorthDex matches your cards to that data using TCGplayer product identifiers, which are catalogue reference numbers and not a price source. WorthDex is not affiliated with JustTCG or TCGplayer. The app does not call third-party price APIs directly; it reads pre-published price bundles from our CDN, which is hosted by Cloudflare. Downloading a bundle is an ordinary web request, so it carries your device's IP address the way any download does, and it reveals nothing about your collection: every device downloads the same bundle, never a per-card lookup, and JustTCG receives nothing about you or your collection. Subscriptions are processed by Apple and RevenueCat, app analytics and diagnostics by TelemetryDeck, and the website is served by Cloudflare.

We use only providers whose own terms commit them to protecting the limited data they receive at least as well as this policy describes, and to using it solely to provide their service to us. Apart from your own private iCloud, described above, none of them receives your photos, your card images, or your collection.

Your choices & rights

You can delete all your data at any time, right from the app: open the Profile tab, scroll to "Privacy & data", and tap "Delete all my data"; see Delete your data. You can disable iCloud sync in iOS Settings, and you may request access to or deletion of any data we hold by emailing us.

Children

WorthDex is not directed to children under 13 and we do not knowingly collect their personal information.

Changes to this policy

If we change how WorthDex handles your data, we revise this page and move the date at the top. That date only moves when the policy itself actually changes, so it tells you when to re-read.

Contact

Questions about this policy? Email [email protected].