Privacy Policy

Information you provide

GrailCheck stores the inventory details, saved card photos, notes, purchase information, costs, fees, and completed-sale records you choose to add on your device. These records support inventory and profit reporting. If you use the app’s backup and restore feature, you choose when to create and retain a backup.

If you join the seller pilot, we collect the email address you submit and, only if you choose to provide them, your selling channels and approximate monthly transaction range. The pilot form does not send email.

Optional app-interaction counts

With your permission, GrailCheck collects daily app-interaction counts for analytics, without account or device identifiers or links to purchase records; you can disable reporting in Settings. Reporting is off until you choose. The app asks once after your first scan, and you can change it anytime in Settings. When it's on, the app sends only the name of an app step (for example app opened, first scan, first profit estimate, sale saved, subscription screen opened or closed and a fixed reason it opened, purchase or restore result, or review prompt requested). Our server keeps only a daily total for each step. Reports never include inventory details, photos, financial amounts, email addresses, or customer details. Our server doesn't store IP addresses or request contents with these totals. Your IP address is used only briefly in memory to limit abuse.

Website analytics — Our website may record anonymous aggregate landing visits, App Store button taps, and pilot signups to understand interest.

Photos, camera, and AI features

When you photograph or upload a collectible for identification or grading assistance, GrailCheck sends the selected photo via our server to OpenAI to identify it and estimate its value or condition. Requested listing generation also sends the item details you choose, such as its name, condition, and notes, to OpenAI via our server. Images for requested background removal are processed by OpenAI or remove.bg. These transfers provide the feature you requested and are not used by GrailCheck for tracking or advertising. GrailCheck does not intentionally persist submitted images in its application database, object storage, or server filesystem; images are held transiently in server memory while processing the request. OpenAI and remove.bg process images as separate service providers under their own terms and privacy practices. GrailCheck does not promise a provider deletion time, retention duration, or training setting that has not been verified. Camera and photo-library permissions are used only when you initiate those features.

Necessary third-party diagnostics

GrailCheck uses Sentry to receive technical crash and error diagnostics, which may include device, operating-system, app-version, and error details. We use this information only to diagnose reliability problems and do not use it for advertising. Optional app-interaction counts are sent to GrailCheck's own server, not to Sentry.

Necessary third-party purchase processing

Purchases are processed by Apple. RevenueCat receives purchase and subscription history, receipt or purchase-status information, and an anonymous app user ID to provide and restore GrailCheck Pro features. Our server uses that anonymous ID to verify Pro status and enforce monthly AI usage limits; it records the ID, month, and usage counts. RevenueCat also notifies our server of subscription events (such as a trial starting, a renewal, a billing issue, a cancellation, or an expiration). Our server keeps only a one-way hash of each event's ID, for up to 30 days to avoid counting it twice, and daily totals per event type and product. It does not store or log your app user ID, transaction IDs, email, or payment details from these notifications. We do not receive or store your full payment card number. This purchase telemetry is necessary for purchase processing and entitlement management, not optional custom analytics or advertising. RevenueCat sends subscription event notifications to our server, which keeps only the daily totals described above.

Other requested online features

Market lookups send search terms, such as item names and card or set identifiers, to eBay and applicable card-data providers such as Scryfall and Pokémon TCG services. Barcode lookups send the scanned barcode to UPCItemDB or Open Food Facts. Network providers receive normal connection information, such as your IP address. Saved inventory is not automatically uploaded as a cloud inventory database. Exports, backups, and share files leave your device only when you choose to share them.

Your choices

You can manage app permissions from your device settings and manage subscriptions through your Apple ID settings. The seller-pilot form does not send email.

Contact

Privacy questions? Email support@grailcheck.app.