Privacy Policy

1. Introduction

Welcome to Cardex – Sports Card Scanner, operated by Obzena LLC, a company incorporated in the state of Wyoming, United States ("we," "us," or "our").

This Privacy Policy explains how we collect, use, and protect your information when you use the Cardex mobile application. By using Cardex, you agree to the practices described in this policy.

2. Information We Collect

We collect only what is necessary to provide the card identification service:

Card Images (Temporary): Photos of sports cards you capture or upload within the app are transmitted to our AI service for analysis and identification. These images are not stored on our servers after processing is complete.
Device & Usage Data: Anonymous analytics such as app version, device type, crash logs, and feature usage to improve app stability and performance.
In-App Purchase Data: Transaction identifiers processed through Apple's App Store. We do not receive or store payment card information.

3. How We Use Your Card Images

Your card images are sent to an AI model solely for the purpose of identifying the sports card (player name, year, set, grade, etc.). Once the analysis is complete, the image is immediately discarded and is never stored, indexed, or used for any other purpose.

We do not sell, license, or share card images with any third party for advertising, data training, or profiling purposes.

4. AI Processing

Card images are processed by a third-party large language model (LLM) provider via a secure API call. The image is sent over an encrypted connection (TLS), processed in real time, and the response (card identification data) is returned to your device. The provider does not retain your image beyond the duration of the API request.

We take reasonable steps to ensure our AI providers operate under data processing agreements that prohibit training on user-submitted content.

5. Data Storage & Retention

Card images: Never stored. Processed in transit only.
Card collection data: Stored locally on your device and/or in your personal Firebase account (if signed in). You control this data and may delete it at any time.
Analytics: Aggregated, anonymized data retained for up to 12 months.

6. Data Sharing

We do not sell your personal data. We may share data only in the following limited circumstances:

With service providers (e.g., Firebase, AI API providers) under strict confidentiality agreements, solely to operate the app.
When required by law or to protect our legal rights.
In connection with a merger or acquisition, with notice provided to you.

7. Children's Privacy

Cardex is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, contact us at the email below. We will respond within 30 days.

9. Security

We use industry-standard security measures including TLS encryption for data in transit and access controls for our infrastructure. No method of transmission over the internet is 100% secure, but we are committed to protecting your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top. Continued use of the app after changes constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please reach out to us:

Obzena LLC
Wyoming, United States
Email: hello@obzena.com