Kira: TCG Card Scanner
Privacy Policy
Last updated:
Kira: TCG Card Scanner (“Kira”) is an iPhone app that identifies trading cards and shows their prices. It’s built to work on your phone: you don’t need an account, and we never ask for your name, email address or other personal details. This policy explains the little data involved, who handles it and what you can do about it.
In short
- No account and no sign-up.
- Your collection, binders and scan history stay on your iPhone.
- Camera images are read on your iPhone and never saved or sent.
- No ads, no tracking, no analytics. We never sell data.
Who we are
Kira is developed and published by Guillem Martínez, an independent developer (“we”, “us”), who is the data controller for the processing described here. You can reach us at hello@kiratcgscanner.com.
Your collection stays on your device
Your binders, cards, scan history, settings and recent searches are stored only on your iPhone. We don’t upload them to our servers and we can’t see them.
Deleting the app, or using Profile › Reset all data, erases them. Because nothing is stored on our side, we can’t recover them for you. Your iPhone’s own backups (in iCloud or on a computer) may include this data, under Apple’s terms.
Camera
Kira uses the camera only while you scan, to read the text printed on your cards. Recognition runs on your iPhone with Apple’s on-device text recognition; camera images are never saved, uploaded or shared. You can turn camera access off at any time in Settings › Kira.
Card data, prices and images
To keep scans instant, Kira downloads card catalogs and market prices for the games you choose from our storage provider, Supabase, which stores this content in the European Union and delivers it through a content delivery network. These downloads contain no information about you.
Card pictures load directly from public card databases and publishers’ websites: TCGdex (Pokémon), Scryfall (Magic: The Gathering), YGOPRODeck (Yu-Gi-Oh!), Lorcast (Disney Lorcana), SWU-DB (Star Wars: Unlimited), TCGplayer, Bandai (One Piece, Dragon Ball, Digimon and Gundam), Legend Story Studios (Flesh and Blood) and Riot Games (Riftbound).
Like any internet request, these downloads include your device’s IP address and basic technical details, such as the app and iOS version. The providers may keep them briefly in server logs for security and reliability, under their own privacy policies. We don’t combine them with anything else about you.
Purchases
Kira Pro is sold through Apple’s App Store, and Apple processes your payment. We never see your payment details.
We use RevenueCat to check whether your subscription is active. RevenueCat receives an anonymous ID created by the app, your App Store purchase history for Kira (such as the product, dates and transaction IDs) and basic technical details such as the app and iOS version, country and IP address. It never receives your name, email address or payment details. Apple’s and RevenueCat’s privacy policies apply to that processing.
No ads, no tracking, no analytics
Kira shows no ads and doesn’t track you across other companies’ apps or websites, and we never sell or rent data. The current version of Kira doesn’t collect analytics. If a future version adds anonymous usage statistics, we’ll update this policy and the App Store privacy details before it’s released.
Notifications
If you allow notifications, Kira can remind you before a free trial or an introductory month renews. These reminders are scheduled on your iPhone; no push server is involved. You can turn them off in Settings › Notifications › Kira.
Links to marketplaces
When you open Cardmarket, TCGplayer or eBay from Kira, their websites and privacy policies apply.
This website and email
kiratcgscanner.com uses no cookies, analytics or trackers. Our hosting provider, Vercel, processes your IP address in server logs to deliver the site and keep it secure.
If you email us, we use your email address and message only to reply and help you. We keep the conversation for as long as we need it to help you and delete it no later than 12 months after your last message, unless the law requires us to keep it longer.
Why we can process this data
Where data protection laws such as the GDPR apply, we rely on:
- Performance of a contract: providing Kira and Kira Pro when you use them or subscribe.
- Legitimate interests: delivering card data and images, keeping our services secure and reliable, and answering your messages.
- Legal obligations: keeping records where the law requires it.
International transfers
Some providers, such as RevenueCat and Vercel, may process data outside the European Economic Area, including in the United States. When they do, the transfer is covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long data is kept
- Your collection and settings: on your iPhone until you delete them or the app.
- Camera images: never stored.
- Download logs (card data, prices, images and this website): kept briefly by each provider, typically for days or weeks, for security and reliability.
- Subscription records at RevenueCat: while needed to provide Kira Pro and meet legal obligations. You can ask us to delete them.
- Emails: up to 12 months after your last message.
Children
Kira isn’t directed at children under 13, or under the minimum age in their country (14 in Spain), and we don’t knowingly collect personal data from them. Kira doesn’t ask anyone for personal details.
Your rights
Your collection stays on your iPhone, so you control it directly: edit or delete binders at any time, or erase everything with Profile › Reset all data.
Depending on where you live, you may also have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. To use any of these rights, including deleting subscription records held by RevenueCat, email hello@kiratcgscanner.com. We answer within 30 days, and may ask for a detail such as an App Store order ID to find your records.
You can also complain to a data protection authority. In Spain, that’s the Agencia Española de Protección de Datos (aepd.es).
Security
Data sent between Kira and the services above is encrypted with HTTPS. Data on your iPhone is protected by iOS, including device encryption when your iPhone is locked with a passcode.
Changes to this policy
If our practices change, we’ll update this page and the date at the top. If a change is significant, we’ll also point it out in the app.
Contact
Questions or requests about privacy: hello@kiratcgscanner.com