takaraTCG Collector

Privacy Policy

Last updated: February 11, 2026

1. Introduction

Takara ("we," "us," or "our") operates the Takara mobile application ("App") and the website at takara.cards ("Website"). This Privacy Policy explains how we collect, use, store, and share your information when you use our services.

Takara is a trading card game (TCG) collection management app that lets you scan, organize, and track your trading card collection. By using the App or Website, you agree to the practices described in this Privacy Policy.

2. Information We Collect

Account Information

When you create an account using Apple Sign In, Google OAuth, or phone number authentication, we collect:

  • Email address — provided by your OAuth provider (Apple or Google). If you use Apple Sign In's "Hide My Email" feature, we receive only your relay address.
  • Display name — your name as provided by your OAuth provider.
  • Avatar URL — your profile photo URL from your OAuth provider, if available.
  • Phone number — if you choose to sign in via phone OTP verification.

Collection Data

When you use the App, we store the following data that you create:

  • Cards added to your collection (card identifiers, quantities, conditions)
  • Custom binder configurations (names, card arrangements)
  • Set completion progress
  • Notes or metadata you attach to cards in your collection

Camera and Card Images

When you use the card scanning feature, the App accesses your device camera to capture images of trading cards. These images are processed as follows:

  • Card images are sent to Google Cloud Vision API for optical character recognition (OCR) to identify card text.
  • Images are processed in real time and are not permanently stored on our servers.
  • Google may temporarily process images on its servers in accordance with its own privacy policy.

Device Information

When you submit feedback through the App, we collect limited device information to help diagnose issues:

  • Device model and operating system version
  • App version number
  • Feedback category and message content

Subscription Data

If you subscribe to Takara Pro, your purchase and subscription status are managed by RevenueCat, a third-party subscription management service. We receive:

  • Your subscription status (active, expired, or cancelled)
  • Entitlement information (which Pro features you have access to)
  • An anonymous app user identifier linked to your RevenueCat account

Payment details (credit card numbers, billing address) are handled entirely by Apple or Google and are never shared with us.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Account information — to authenticate your identity, display your profile, and sync your data across devices.
  • Collection data — to provide core App functionality, including collection tracking, binder organization, and set completion progress.
  • Camera and card images — to identify trading cards via OCR so they can be added to your collection.
  • Device information — to diagnose and resolve bugs when you submit a feedback report.
  • Subscription data — to manage your Takara Pro subscription, restore purchases, and grant access to premium features.

We do not use your data for advertising, profiling, or any purpose unrelated to providing and improving the App.

4. Third-Party Services

We use the following third-party services to operate the App. Each service receives only the minimum data necessary to perform its function:

Supabase (Authentication and Database)

We use Supabase to handle user authentication and store your account and collection data. Supabase hosts data on secure cloud infrastructure. For more information, see the Supabase Privacy Policy.

Google Cloud Vision API (Card Scanning)

When you scan a card, the captured image is sent to Google Cloud Vision API for text recognition. Google processes the image to extract text and returns the result to the App. Images are not permanently stored by us. For more information, see the Google Privacy Policy.

RevenueCat (Subscription Management)

We use RevenueCat to manage Takara Pro subscriptions and validate purchases. RevenueCat receives your anonymous app user identifier and subscription status. For more information, see the RevenueCat Privacy Policy.

Apple and Google (Authentication and Payments)

We use Apple Sign In and Google OAuth for authentication. Subscription payments are processed entirely by the Apple App Store or Google Play Store. We do not receive or store your payment details. Please refer to Apple's Privacy Policy and Google's Privacy Policy for details on how they handle your data.

5. Data Storage and Security

  • Authentication tokens are stored in your device's secure enclave (iOS Keychain or Android encrypted storage) using expo-secure-store. They are never stored in plain text.
  • Collection data is cached locally on your device in an SQLite database for offline access and synced to Supabase when you are online.
  • Server-side data is hosted on Supabase's cloud infrastructure with encryption at rest and in transit.
  • All network communication between the App and our servers uses HTTPS/TLS encryption.
  • Card images captured during scanning are processed in real time and are not permanently stored on our servers.

6. Data Sharing

  • We do not sell your personal data to third parties.
  • We do not share your data for advertising or marketing purposes.
  • We do not use the Identifier for Advertisers (IDFA) or any cross-app tracking technologies.
  • Data is shared only with the third-party services listed in Section 4, solely to provide App functionality.

We may disclose your information if required to do so by law or in response to valid legal requests from public authorities.

7. Your Rights and Choices

  • Access: You can view your account information and collection data at any time within the App.
  • Export: You can export your collection data as a CSV file from the App (available with Takara Pro).
  • Account Deletion: You can delete your account and all associated data from within the App by navigating to your Profile and selecting "Delete Account." This permanently removes your profile, collection data, binder configurations, and authentication credentials from our servers.
  • Guest Mode: You can use the App without creating an account. Guest data is stored locally on your device only.
  • Withdraw Consent: You can revoke OAuth permissions at any time through your Apple or Google account settings.
  • Camera Access: You can revoke camera permissions at any time through your device's system settings. The App will continue to function without camera access, but scanning features will be unavailable.

8. Data Retention

  • Account and collection data is retained while your account is active.
  • When you delete your account, all personal data is permanently deleted from our servers within 30 days.
  • Locally cached data (SQLite database) is removed when you delete the App from your device.
  • Subscription records are maintained by Apple and Google in accordance with their respective retention policies.
  • Feedback submissions are retained for up to 12 months to help us improve the App, after which they are deleted.

9. Children's Privacy

Takara is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the email address below so we can take appropriate action.

10. International Data Transfers

Your data may be processed on servers located outside your country of residence, including in the United States. By using the App, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Cookies and Tracking (Website Only)

The takara.cards website uses essential cookies for site functionality and Google Analytics for anonymous usage statistics. The App does not use cookies or web-based tracking technologies.

For more information about how we use cookies on our website, please see our Cookie Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by posting the updated policy on our Website with a revised "Last updated" date. Your continued use of the App after any changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy, your data, or your privacy rights, please contact us at:

tea.x.random@gmail.com

For privacy-related requests (data access, deletion, or corrections), please use the subject line "Privacy Request" so we can prioritize your inquiry.