CardScout · Effective 4 August 2026
CardScout is a sports trading card scanner for iPhone and iPad, published by MadByteApps. This policy explains what information the app handles and what control you have over it.
If you have any questions, email us at cardscout@madbyteapps.com.
Signing in is optional and CardScout works without an account. If you do create one using Apple, Google or an email link, we receive your email address and, if the provider supplies it, your name. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's private relay address.
Photos of the cards you scan, the card details produced by the scan such as player, set, year, condition and estimated value, and the collections you organise them into. This is stored so your collection syncs across your devices.
Your currency and notification settings.
If you email us, we keep the message so we can reply.
If you tell us why you are deleting your account, we keep your answers. These records contain no identifier and cannot be linked back to you.
CardScout uses your camera only while you are actively scanning a card. If you import a photo instead, iOS gives us only the image you selected and the app never gets access to the rest of your library.
To identify a card, the photo is sent to a third-party AI provider (OpenRouter) for analysis, which returns the card details and value estimate. Your account information is not sent with the image.
Identified cards and their photos are saved to your account on our servers so your collection is available on your other devices. They are private to you and other users cannot see them.
If you are not a Pro subscriber, cards you capture stay on your device as locked previews and are not sent anywhere for identification.
When you use card chat or condition check, your message and any photo you attach are sent to our AI provider so it can answer.
We do not store your conversations on our servers. They stay on your device and are removed when you clear the app's cached data.
The community feed needs an account. Without one you can read it but not post, comment or vote.
If you take part, we store your username, optional display name and profile picture, along with your posts, comments, votes, reports and blocks.
Community content is public. Your username, profile picture, posts, comments and any images you attach are visible to everyone, including people using CardScout without an account. Images may remain reachable by direct link even after you delete a post. Do not post anything you would not want to be public, and avoid images showing personal information such as addresses or shipping labels.
Posts and comments are checked by an automated content filter before publishing, and other users can report content. If you allow notifications, we store your device's push token so we can tell you when someone replies to you. It is removed when you sign out or turn notifications off.
CardScout does not show ads.
We record basic usage events, such as opening the app, scanning a card or viewing the subscription screen, so we can understand which features people actually use. This is handled by Mixpanel.
We also measure whether our own advertising works, using AppsFlyer and Google Analytics for Firebase. The first time you open CardScout, iOS asks whether you allow tracking. If you say no, your advertising identifier is not collected or shared and the app works exactly the same. You can change your answer at any time in Settings › Privacy & Security › Tracking.
Subscriptions are processed by Apple and managed through RevenueCat, so we receive your subscription status. We never see your payment card or billing details.
You can edit or delete your cards and collections, delete your posts and comments, block another user, turn notifications off, change your tracking permission in iOS Settings, or delete your account, all from inside the app.
Depending on where you live, you may also have the right to access the information we hold about you, correct it, delete it, receive a copy of it, object to how we use it, or withdraw your consent. This includes rights under the GDPR in Europe and the UK, the CCPA in California, and Law No. 6698 (KVKK) in Turkey.
To exercise any of these, email cardscout@madbyteapps.com and we will respond within 30 days.
Go to Settings › Delete Account in the app. You will be asked to confirm by typing DELETE. This happens immediately and cannot be undone.
Deleting removes your card photos, cards, collections, preferences, community profile, posts, comments, votes and your sign-in record including your email address. Everything on your device is cleared at the same time.
Two things remain: deletion feedback, if you gave any, which carries no identifier, and records held by the providers listed above under their own retention policies. Email us if you would like those requests passed on.
We keep your information for as long as your account exists. Signing out instead of deleting keeps your account but clears the data from that device.
Traffic between the app and our servers is encrypted, and access to your cards, collections and photos is restricted to your own account. Community content is a deliberate exception, since it is meant to be public.
No service can guarantee perfect security. If a breach ever affects your personal data, we will notify you and the relevant authorities as required.
CardScout is not intended for children under 13 and we do not knowingly collect information from them. If you believe a child under 13 has provided us with personal information, email us and we will delete the account and its data.
We update this policy when the app or the law changes, and the effective date above always reflects the current version. If a change materially affects how we handle your information, we will tell you in the app before it takes effect.
MadByteApps
cardscout@madbyteapps.com