Privacy Policy

Effective Date: July 14, 2026 · Last Updated: July 14, 2026

This Privacy Policy (the "Policy") describes how PackBuddy ("PackBuddy", "we", "us", or "our") collects, uses, discloses, retains, and otherwise processes personal information in connection with the PackBuddy mobile application (the "App") and the packbuddy.io website (the "Site", and together with the App, the "Service"). By accessing or using the Service, you acknowledge that you have read and understood this Policy and agree to the processing of personal information as described herein.

PackBuddy is operated by an independent developer in the United States. PackBuddy is not affiliated with, endorsed by, sponsored by, or licensed by Nintendo, The Pokémon Company, Game Freak, Creatures Inc., or any of their respective affiliates or licensees.

1. Information We Collect

1.1 Account Information

In connection with the creation of an account on the Service, we collect (i) your email address, used for authentication and account-recovery purposes, and (ii) a password, which is retained solely in cryptographically hashed form. The Service does not, at this time, support federated sign-in via third-party identity providers.

1.2 Collection and Usage Data

In connection with your use of the Service, we collect and retain information you create within the App relating to your trading- card collection, including without limitation catalog identifiers of cards recorded, variant designations, quantity, date and time of records, and contemporaneous market-value snapshots.

Frames used for ordinary card recognition are processed locally on your device and are not uploaded. Structured catalog metadata resulting from a scan may be transmitted to our backend systems.

1.3 Studio Media

If you deliberately record or upload content through PackBuddy Studio, we collect the resulting video, narration or other audio, Studio edit instructions, and images you deliberately select as Studio assets. This content is linked to your account and uploaded to our cloud storage so the Service can save, edit, render, and export your project. Studio recording is optional and separate from ordinary card scanning.

1.4 Subscription Information

Where you elect to purchase a subscription to the Service, payment is processed by the operator of the platform application store from which the App was obtained. We receive information about your subscription status (including, without limitation, whether such subscription is active, in introductory trial, or has been canceled, expired, or refunded) from the platform application store or its designated subscription-management service provider. We do not receive, store, or otherwise have access to your payment-card details, billing address, or platform-account credentials.

1.5 Diagnostic and Operational Information

Where the App or our backend systems encounter an exception, fault, or unexpected operating condition, we may collect diagnostic information through a third-party diagnostic service provider. Such information may include, without limitation, anonymized device model, operating system version, application version, the specific software path leading to the exception, and a limited log of recent in-application actions. Diagnostic transmissions are subject to redaction processes designed to remove personal identifiers (including email addresses, user identifiers, authentication tokens, and any text recognized from imagery) prior to transmission. Diagnostic information is classified as not linked to your identity in our App Store privacy disclosures.

1.6 Information We Do Not Collect

We do not collect, store, process, or transmit:

• Camera frames or recognized text from ordinary card scanning, except content you deliberately record or upload through Studio;
• Physical mailing addresses, telephone numbers, or government-issued identifiers;
• Geolocation data (the Service does not request location permissions);
• Information stored in your device contacts, calendar, or other system-level data stores that you do not deliberately provide; or
• Behavioral advertising identifiers, cross-site tracking pixels, or similar tracking technologies.

2. Purposes of Processing

We process the information described above for the following purposes:

• Authenticating users of the Service;
• Operating and displaying your collection and portfolio within the App;
• Storing, editing, rendering, and exporting Studio projects you create;
• Periodically refreshing market-value information and updating portfolio metrics;
• Verifying the status of subscriptions;
• Detecting, investigating, and remediating defects and security incidents;
• Providing transactional communications relating to your account; and
• Complying with applicable legal, regulatory, and contractual obligations.

3. Disclosure of Information to Third Parties

PackBuddy does not sell, rent, or otherwise commercially distribute personal information. We disclose information only to service providers retained to process such information solely on our behalf and subject to confidentiality and data-protection obligations consistent with this Policy. Such service providers may include, without limitation, providers of:

• Identity, authentication, and database services;
• Content-delivery, object storage, media processing, networking, and backend hosting infrastructure;
• Subscription-management services associated with the platform application store;
• Diagnostic, observability, and security-monitoring services;
• Transactional electronic-mail delivery services; and
• Such additional categories of service providers as may from time to time be reasonably necessary to operate the Service.

We may additionally disclose information where required by applicable law, valid legal process, or governmental request, or where we determine, in our reasonable discretion, that disclosure is necessary or appropriate to protect the rights, property, or safety of PackBuddy, its users, or the public, or to investigate suspected misuse of the Service.

4. On-Device Processing

Card recognition, image processing, and related computer-vision operations performed in connection with the Service are executed locally on the user's device. Frames used for ordinary scanning are not uploaded. This does not apply when you deliberately use Studio: Studio video, audio, edit instructions, and selected image assets are uploaded and processed as described in Section 1.3.

5. Children's Privacy

The Service and PackBuddy accounts are intended for individuals at least thirteen (13) years of age. Individuals under thirteen may not create an account or use the Service. If you are a parent or legal guardian and believe that a child under thirteen has created an account, please contact us at [email protected], and we will undertake to delete such account and the information associated therewith promptly.

The Service contains no in-app advertising, no third-party behavioral tracking, no interactive messaging or chat functionality with other users, and no public posting of user-generated content.

6. Your Rights

6.1 Account Deletion

You may permanently delete your account and all information associated therewith at any time from within the App at Settings → Account → Delete Account. Such deletion is immediate and irrevocable. Deleting a PackBuddy account does not cancel a subscription billed by Apple; subscriptions must be managed through the Apple subscriptions interface. Where the App is inaccessible, you may submit a deletion request by electronic mail to [email protected] from the email address associated with the account, and we will process such request within thirty (30) days.

6.2 California Residents (CCPA/CPRA)

If you are a resident of the State of California, you have the right to (i) know the categories of personal information we have collected about you, (ii) request the deletion of such information, (iii) opt out of any sale or sharing of such information (PackBuddy does not sell or share personal information for cross-context behavioral advertising), and (iv) not be discriminated against for exercising any of the foregoing rights. Requests should be submitted to [email protected]. We will verify your identity prior to processing any such request.

6.3 European Economic Area and United Kingdom Residents (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to access, rectify, port, restrict, or erase your personal information, and to object to certain processing. Our lawful bases for processing are (i) your consent, which may be withdrawn at any time by deleting your account, and (ii) the necessity of such processing for the performance of the contract for the Service to which you have subscribed. Requests should be submitted to [email protected].

7. Data Retention

We retain account, collection, and Studio information for so long as the applicable user account remains active or until you delete the applicable Studio content. Upon deletion of an account, the associated information is removed from active systems without undue delay. Encrypted off-site backups containing residual copies of such information are rotated out of retention within thirty (30) days, following which no remaining copy is maintained within our systems. Diagnostic information is retained for a period not to exceed ninety (90) days, following which it is automatically purged.

8. Information Security

We maintain administrative, technical, and physical safeguards consistent with generally accepted industry practice and designed to protect the confidentiality, integrity, and availability of the information we process. Such safeguards include, without limitation, encryption of information in transit and at rest, hardware-backed storage of authentication credentials on the user device, access controls enforced at the database layer, and a prohibition on the use of third-party technologies that uniquely identify users for advertising purposes.

No security control set is impenetrable. If you have reason to believe that your account has been compromised, you should promptly change your password and notify us at [email protected].

9. International Transfers

Our backend systems are located within the United States. By accessing the Service from outside the United States, you acknowledge and consent to the transfer, storage, and processing of your information in the United States.

10. Changes to this Policy

We may, from time to time, amend this Policy. The amended Policy will be made available at this URL with an updated "Last Updated" date. Material changes will additionally be announced from within the App. Your continued use of the Service following any such amendment constitutes your acceptance of the amended Policy.

11. Contact

Questions or requests regarding this Policy or our information practices may be directed to [email protected].