← Back to Pokiframe

Privacy Policy

Last updated: November 6, 2026

1. Who we are

Pokiframe: Card Value Scanner ("Pokiframe" or "the app") is developed by Arkadiusz Pichurski ("we", "us"). We are the controller of the personal data described in this policy. You can reach us at admhappread@gmail.com.

This policy covers the Pokiframe apps for iOS and Android and this website.

2. Summary

  • You don't need an account. We don't ask for your name, phone number or address.
  • Card recognition and condition checks run on your device. Camera images and grading photos are not uploaded to us.
  • The app uses a device identifier to keep your collections in sync and to understand how the app is used. Analytics, crash reports and collections are linked to that identifier.
  • On iPhone, data for measuring our ad campaigns is sent to TikTok and used by Google Ads only if you allow tracking when the app asks.
  • We don't show ads in the app and we don't sell your data.

3. Data we collect

Device identifiers

  • A device identifier for the app installation (on iOS, Apple's "identifier for vendor"). It is sent with analytics events, collection sync, feedback and error reports.
  • Identifiers created by our service providers: an analytics ID (PostHog), an app instance ID (Google Analytics for Firebase) and an anonymous customer ID (RevenueCat).
  • The advertising identifier: on iOS only if you allow tracking (see section 5); on Android, the Google advertising ID may be used by Google Analytics for Firebase for ad measurement.

Collections

Collections you create are stored on our servers together with your device identifier, so they stay in sync and can be valued. This includes collection names and icons, the cards in them, quantities, dates added, the price sources you choose and prices you enter.

Usage data

We record how the app is used. Examples: app sessions, number of scans, cards viewed or added, onboarding steps, paywall views, feature limits reached, and settings such as language and display currency. Events include the device model, operating system version, app version, locale and time zone.

Searches

Search terms are sent to our server to find matching cards. The server does not store them. Some versions of the app also include the search text in analytics events.

Purchases

Payments are processed by Apple (App Store) or Google (Google Play). We never receive your card or bank details. We receive information about your purchase (product, price, currency, trial and subscription status) through RevenueCat and our analytics. We use it to unlock Premium, to understand revenue and to measure our ad campaigns (see section 5).

Diagnostics

Crash reports, error messages and performance measurements, such as how long scanning or catalog downloads take.

Approximate location

The app does not use GPS and does not ask for location permission. Our analytics provider derives an approximate location (country, region and city) from your IP address.

Feedback and support

  • The feedback form in Settings sends your message, your email address if you choose to give one, the device identifier, the app version and the platform.
  • After a grade estimate, the app may ask whether the grade looked right. Your answer, the reasons you pick, an optional comment, the grade shown and the card are sent to our analytics.
  • Emails you send us.

Camera and photos

The app uses the camera to identify cards and to check their condition. This processing happens on your device. Camera images are not uploaded. Photos taken for grade estimates are saved only in the app's storage on your device and stay there until you delete them or the app.

Connection data

When the app connects to the internet (for example to download card catalogs, prices, card images or exchange rates), the servers it connects to receive your IP address. Some card images are loaded from third-party image hosts.

4. Why we use your data

  • To provide the app: sync and value your collections, show prices, unlock Premium and restore purchases. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
  • To answer feedback and support requests. Legal basis: our legitimate interest in helping users and, where relevant, our contract with you.
  • To understand and improve the app, fix crashes and keep it secure. Legal basis: our legitimate interest in a working, improving app (Art. 6(1)(f) GDPR).
  • To measure our advertising. Legal basis: your consent where the law requires it (on iPhone, given through the tracking prompt), otherwise our legitimate interest in measuring our own ad campaigns.
  • To meet legal obligations (Art. 6(1)(c) GDPR).

5. Tracking and advertising measurement

We advertise Pokiframe on platforms such as TikTok and Google. To see which ads lead to installs and subscriptions, some app data is shared with them.

On iPhone

  • The app asks for permission to track through Apple's App Tracking Transparency prompt.
  • If you allow tracking, the TikTok for Business SDK starts. It receives events such as app launch, onboarding completion, paywall views, scans and trial or purchase events, together with your advertising identifier. Google Ads may also use Google Analytics for Firebase data for ad measurement and personalization.
  • If you don't allow tracking, the TikTok SDK is not started, and the ad storage, ad user data and ad personalization signals for Google stay off.
  • You can change your choice at any time in iOS Settings > Privacy & Security > Tracking.

On both platforms

  • Google Analytics for Firebase records basic events, such as first open, sessions, completed onboarding, trial starts and purchases, with its app instance ID.
  • On iPhone, Apple's privacy-preserving attribution (SKAdNetwork and AdServices for Apple Search Ads, through RevenueCat) works without your advertising identifier.

On Android

  • The Google advertising ID may be used for ad measurement. You can reset or delete it in Android Settings > Privacy > Ads.
  • We record which link or campaign led to the install (Google Play Install Referrer).

6. Who we share data with

We use these service providers:

  • PostHog: product analytics, crash and error reports (EU data region).
  • Google (Google Analytics for Firebase, Google Ads): analytics and ad measurement.
  • TikTok (TikTok for Business): ad measurement, iPhone only and only if you allow tracking.
  • RevenueCat: subscription and purchase management.
  • Apple and Google: app distribution and payments.
  • Hosting providers: run our servers and store collection and feedback data.
  • Frankfurter: currency exchange rates. It receives only your IP address.

We may also disclose data if the law requires it, or to protect our rights, our users or the public.

7. International transfers

Some providers process data outside the European Economic Area, including in the United States. These transfers rely on safeguards such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

8. How long we keep data

  • Collections: until you delete them in the app (this also deletes them on our server) or ask us to delete them.
  • Feedback and emails: as long as needed to handle your message and any follow-up.
  • Analytics and diagnostics: only as long as needed for analysis, within the retention settings of our providers.
  • Data on your device (grading photos, settings, cached catalogs): until you delete it or uninstall the app.

9. Your rights and choices

Depending on where you live (for example in the EU/EEA or the UK), you have the right to:

  • access your data and get a copy of it;
  • have it corrected or deleted;
  • restrict or object to its use, including use based on our legitimate interests;
  • withdraw consent at any time, for example by turning off tracking;
  • complain to a data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO); you can also contact the authority in your own country.

To make a request, email us at admhappread@gmail.com or use the feedback form in the app's Settings. The form sends your device identifier, which helps us find your data; if you email us, we may ask you to also send a short message through the form.

10. U.S. state privacy rights

We do not sell personal information for money. Sharing device identifiers and app events with advertising platforms for ad measurement, as described in section 5, may count as "sharing" or "targeted advertising" under some U.S. state laws. You can stop it on iPhone by turning off tracking for Pokiframe, and on Android by deleting your advertising ID. You may also contact us to exercise your rights. We will not discriminate against you for doing so.

11. Children

Pokiframe is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

12. Security

Data is sent over encrypted connections (HTTPS), and access to our servers and provider dashboards is restricted. No system is completely secure, but we work to protect your data.

13. Changes to this policy

We may update this policy as the app changes. We will post the new version on this page and update the date above.

14. Contact

Arkadiusz Pichurski
Email: admhappread@gmail.com
Website: pokeframe.happread.com