Privacy Policy

1. Who We Are

Chestfolio is a product of DevFruit LLC, an Iowa limited liability company. We make tools for collectors. This policy describes how we handle information in connection with the Chestfolio marketing site at chestfolio.com and, when it launches, the Chestfolio app.

Contact: hello@chestfolio.com

2. What We Collect

Right now (marketing site only)

This site does not collect any personal information automatically. There are no accounts, no cookies beyond what your browser sets by default, no analytics trackers, and no forms that submit data to our servers. The only way we receive any information from you is if you choose to email us at hello@chestfolio.com. That email and any information you include is handled as ordinary email correspondence.

When the app launches

When Chestfolio is available for download, we expect to collect the following:

• Account information. Your email address, used to identify your account and send you transactional messages (e.g., magic-link sign-in).
• Collection data. Card inventory, want lists, scan history, and pricing snapshots that you create within the app. This data belongs to you and you can export it at any time in CSV or JSON format — free on every plan.
• Usage information. Basic app activity (scan counts, feature usage) used to operate the service and improve it. We will describe this in detail before launch.
• Scan images you choose to contribute (opt-in). When a card scan returns a low-confidence result and you correct it, and only if you have turned on the "Help improve scanning" setting, we retain a reduced-resolution copy of that scan image together with the correction you made. We use these images only to develop and improve Chestfolio's own card-recognition technology. They are not used to identify you, are never sold or shared, and are never published as a dataset. This applies only to low-confidence scans you correct — not to every scan. The setting is off by default, and you can turn it on or off at any time in the app.
• Payment information. If you subscribe to a paid plan, payment is processed by Stripe. We do not see or store your card number. Stripe provides us with a billing token and subscription status. Stripe's privacy policy governs how they handle your payment data.

3. How We Use Your Information

• To provide and operate the Chestfolio app and services.
• To send transactional messages you request (sign-in links, receipts).
• To respond to support inquiries sent to hello@chestfolio.com.
• To understand how the product is used and improve it.
• If you opt in, to develop and improve Chestfolio's own card-recognition models, using reduced-resolution copies of low-confidence scans you have corrected (see Data Retention). Real-time card identification uses a third-party recognition service (Section 6); contributing images to improve our own models is a separate, optional purpose.

We do not use your data for advertising profiling or sell it to third parties for marketing.

4. We Do Not Sell or Share Your Personal Information

We do not sell, rent, trade, or share your personal information with third parties for their own marketing purposes — period. We share data only with service providers who help us operate Chestfolio (see Section 6), and only to the extent necessary to do so.

5. Your Collection Data Is Yours

Your card collection, want list, and scan history belong to you. You can export your full collection as CSV or JSON at any time, free on every plan including the free tier. This will never be a paid feature. We saw what happened when TCG Card Dex was shut down in 2023 — we are committed to making sure that never happens to your data with us.

6. Third-Party Processors

We use the following categories of third-party services. Each has its own privacy policy.

• Cloud hosting. Our servers and static files are hosted on cloud infrastructure in the United States.
• Payment processing. Stripe handles subscription billing. They process payment card data; we do not.
• Card data and image APIs. Card information and thumbnail images are retrieved from permitted third-party APIs (TCGdex). We do not store full-resolution card art.
• Card recognition. The scanner uses a third-party image recognition service (Ximilar). Scan images may be sent to this service to identify cards.
• Email delivery. Transactional emails (sign-in links, receipts) are sent through a third-party mail service.

7. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, or destruction. These include encrypted connections (HTTPS), access controls, and standard industry practices for secure data handling. Payment data is handled by Stripe and never stored on our systems.

However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information. If you become aware of a security concern, please notify us at hello@chestfolio.com.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the service and fulfill the purposes described in this policy. When you close your account or submit a deletion request, we will delete or anonymize your personal information within a reasonable time, except where we are required to retain it by law (for example, for tax or legal compliance purposes).

Collection data that you have exported remains on your device and is your responsibility. Backups may persist for a limited period after deletion as part of our standard backup rotation before being fully removed.

Contributed scan images (if you opt in): we retain a contributed reduced-resolution scan image only as long as needed to incorporate it into a training set, and in no case longer than 18 months from the date you contribute it. After that, the raw image is deleted or reduced to non-image derived data (numeric features) that cannot reconstruct the original photo. If you delete your account, we purge your contributed images from our active training pool. Images already incorporated into a trained model cannot be individually removed from that model, and we will not represent otherwise.

(The 18-month window is the chosen draft figure, subject to formal legal review.)

9. Age Requirement — 16 and Over

Chestfolio is intended for users who are 16 years of age or older. We do not knowingly collect personal information from anyone under 16. If you believe a person under 16 has provided us with personal information, please contact us at hello@chestfolio.com and we will delete it promptly.

10. California Residents

If you are a California resident, you may have the following rights regarding your personal information under California privacy law. To exercise any of these rights, email us at hello@chestfolio.com with the subject line "California Privacy Request." We will respond within 45 days.

• Right to know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom we share it.
• Right to delete. You may request that we delete personal information we have collected about you, subject to certain exceptions (such as legal obligations).
• Right to correct. You may request that we correct inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing. We do not sell or share your personal information for cross-context behavioral advertising. There is nothing to opt out of in this regard, but you may submit a request to confirm this in writing.
• Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes beyond those necessary to provide the service. You may request confirmation of this limitation.
• Right of non-discrimination. We will not discriminate against you for exercising any of these rights. Exercising your privacy rights will not result in denial of service, different pricing, or reduced quality of service.

At the current time (marketing site only, no accounts), there is no personal information we hold about you unless you have emailed us voluntarily. We will provide a fuller CCPA notice before the app collects any personal data at scale.

For users who indicate they are under 18, the "Help improve scanning" contribution setting is off by default and requires affirmative opt-in before any scan image is retained to improve our recognition models.

11. Pricing Data Disclaimer

Card prices displayed in the Chestfolio app are sourced from third-party APIs and market data aggregators. Prices are estimates provided "as is" for informational purposes only. They are not financial, investment, or tax advice. We do not guarantee accuracy, timeliness, or completeness of any pricing data.

12. Changes to This Policy

We may update this policy as the product evolves. The "Last updated" date at the top of this page reflects the most recent revision. For material changes affecting your rights, we will notify registered users by email before the changes take effect. Continued use of Chestfolio after changes are in effect constitutes your acceptance.

13. Contact Us

For any questions about this policy or how your information is handled: