1. Information We Collect

Account Information

• Full name
• Email address
• Password (stored as a secure hash — we never see your actual password)

Card Collection Data

• Card details you enter: name, set, year, condition, grade, and estimated value
• Photos you take or upload of your cards
• Price history fetched from third-party pricing APIs
• Price alerts you configure

Usage Data

• App interactions (screens visited, features used) — collected anonymously to improve the app
• Device type and OS version for compatibility purposes
• Push notification token (only if you enable notifications)

2. How We Use Your Information

• To provide, maintain, and improve the Slabb service
• To sync your card collection across your devices
• To send you price alerts and notifications you have opted into
• To identify trading cards using AI image analysis (photos are sent to Anthropic's API and are not stored by Anthropic beyond the API call)
• To fetch live market pricing from third-party services
• To communicate service updates or respond to support requests

3. Third-Party Services

Slabb uses the following third-party services. Each has its own privacy policy:

• Supabase — database, authentication, and file storage. supabase.com/privacy
• Anthropic (Claude API) — AI card identification from photos. anthropic.com/privacy
• Pokémon TCG API — Pokémon card pricing data. pokemontcg.io
• Scryfall — Magic: The Gathering card pricing. scryfall.com/docs/privacy
• YGOProDeck — Yu-Gi-Oh! card pricing. ygoprodeck.com
• eBay — sports card sold listing prices. eBay Privacy Policy
• Expo (EAS) — push notification delivery. expo.dev/privacy

4. Data Storage & Security

• Your data is stored on Supabase servers protected by row-level security — only you can access your card collection
• Card photos are stored in a private Supabase Storage bucket
• All data is transmitted over HTTPS/TLS
• Passwords are hashed using bcrypt and are never stored in plain text
• API keys and secrets are stored server-side and never transmitted to your device

5. Push Notifications

If you enable push notifications, we store a device push token to deliver price alerts and collection updates. You can disable notifications at any time in your device settings or within the app under Profile → Settings → Notifications.

6. Your Rights

• Access: You can view all your data within the app at any time
• Export: Use Profile → Export Collection to download your data as CSV or PDF
• Deletion: You can delete your account and all associated data by emailing us. We will process deletion requests within 30 days
• Correction: You can edit or delete any card in your collection at any time

7. Children's Privacy

Slabb is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or by email. The "Last updated" date at the top of this page reflects the most recent revision.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us: