MasterDex Privacy Policy

Last updated: April 17, 2026

Rare Candy Labs ("we", "our", "us") operates the MasterDex mobile application (the "App"). This privacy policy explains how we collect, use, and protect your information.

Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile photo from Google. When you sign in with Apple, we receive your name (if you choose to share it) and an email address or Apple-provided relay email. This information is used to identify your account and sync your collection across devices.

Collection Data

We store your Pokémon TCG card collection data (which cards you own, variants, and flags). If you sign in with Google or Apple, this data is stored in Google Firebase Firestore and synced across your devices. If you use Guest Mode, this data is stored locally on your device only.

Camera Images

When you use the card scanner, your device camera captures photos of cards. These images are processed to identify the card and are sent to our cloud service for AI-powered recognition. Card images are not stored permanently on our servers — they are processed and discarded. If a scan has low confidence, the image may be temporarily stored to improve our recognition accuracy, but only in anonymized form.

Analytics

We collect anonymous usage analytics via Google Analytics (Firebase) to understand how the App is used. This includes:

• Screen views and feature usage
• Card scan events (set ID and card number, not images)
• App version and platform

Analytics data is anonymized and cannot be used to identify you personally.

How We Use Your Information

• To provide and maintain your card collection tracking
• To sync your collection across devices
• To identify cards using our AI recognition service
• To improve the accuracy of our card recognition system
• To understand app usage and improve features

Data Storage and Security

Your data is stored using Google Firebase, which provides enterprise-grade security including encryption in transit and at rest. We do not sell, trade, or rent your personal information to third parties.

Third-Party Services

MasterDex uses the following third-party services:

• Google Firebase — Authentication, Firestore database, Cloud Functions, Analytics, Storage
• Google Sign-In — Optional account authentication
• Sign in with Apple — Optional account authentication (iOS)
• Anthropic Claude API — AI-powered card recognition (via our Cloud Function)
• PokéTCG API — Card data and images
• Scrydex API — TCG market pricing data
• Expo / EAS — App build and distribution

Each of these services has their own privacy policies that govern their handling of data.

Children's Privacy

MasterDex does not knowingly collect personal information from children under 13. The App is designed as a collection tracking tool and does not contain advertising, in-app purchases, or social features targeted at children.

Data Retention and Deletion

Your collection data is retained as long as you have an active account. You can permanently delete your account at any time directly inside the App: open your profile menu and tap Delete Account. This action is immediate and cannot be undone.

When you delete your account we remove, within seconds:

• Your user profile document (display name, email, profile photo URL, collection code)
• Your full collection data (every card, variant, condition)
• Any card-scan corrections you submitted, including the corresponding images in Firebase Storage
• Any in-app feedback reports you submitted, including attached images when applicable
• Any automatically-collected ML training feedback linked to your account
• The Firebase Authentication record itself — no account remains after deletion

For users who signed in with Apple, we additionally call Apple's token revocation endpoint so that Sign in with Apple no longer links to the deleted account on your Apple ID. You can verify this at appleid.apple.com → Sign-in and Security → Sign in with Apple.

Guest Mode data is stored only on your device and can be cleared by uninstalling the App. Guest Mode never transmits your collection to our servers.

If you prefer not to delete through the App, you can also request deletion by emailing the address below. We will process the request within 30 days.

Your Rights

You have the right to:

• Access your personal data
• Request correction of your data
• Request deletion of your data
• Export your collection data
• Opt out of analytics (by using Guest Mode)

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy in the App and updating the "Last updated" date.

Contact Us

If you have questions about this privacy policy or your data, contact us at:

Email: jkarns87@gmail.com

Developer: Rare Candy Labs