Privacy Policy

Unbinder (“we”, “us”) is an independent mobile application for cataloguing Pokémon trading cards. We collect the minimum amount of information needed to operate the service.

What we collect

• Account and profile data. Your email address, Unbinder user ID and, when you add them, your name, handle, avatar, bio, country and city. We use these to sign you in, connect your collection to your account and support collector profiles and trading.
• Collection cost and valuation data. The cards, sealed products, binders, wishlists, notes, optional purchase costs, estimated collection values, value changes and other collection details you save. This is used only to provide collection-management features. Because estimated collection values describe assets, we conservatively declare them as other financial information in app-store privacy disclosures. Unbinder does not receive or store your bank-account details, payment-card details, credit information, income or debts. Private collection records are only available to your account unless you choose to share something.
• Scans. A photo taken by the scanner is sent to our identification service. The image is not stored in Unbinder’s database or storage. Our processor may retain API inputs and outputs for up to 30 days under its standard commercial retention policy, with limited longer retention for usage-policy enforcement or legal obligations. We do retain outcome metadata linked to your account, such as the suggested card, confidence, candidate list and the card you select or reject, so we can measure and improve identification accuracy.
• Photos you choose to save. Profile images and photos you attach to cards or sealed products are stored separately from scanner images so the app can show them back to you. You can remove attached photos in the app; all are deleted when you delete your account.
• Messages and other content. Trade offers, chat messages, reports and other content you submit are stored so the relevant feature works and, where applicable, so we can handle safety reports.
• Purchases and subscriptions. If you buy Unbinder Pro, we receive product, transaction, subscription status, renewal and storefront information from Apple and RevenueCat. We do not receive or store your payment-card details.
• Product analytics and searches. PostHog receives events such as page or screen views, searches, feature interactions, scan outcomes and timing information. Before sign-in these use an anonymous device or browser ID; after sign-in they are linked to your Unbinder user ID. Events can include platform, screen, search terms and relevant card, binder or content IDs. PostHog may derive a coarse region from the network request. We do not send it your name, email, collection records, messages or photos.
• Diagnostics. PostHog receives app crashes, JavaScript errors, stack information and limited performance measurements so we can find and fix faults. After sign-in, this diagnostic data can be linked to your Unbinder user ID. It does not include scanner images or photos you attach.
• Notifications. If you allow push notifications, we store an Expo push token linked to your account, along with your notification preferences, so we can deliver alerts you asked for.

Where your data lives

Unbinder uses a small set of carefully chosen processors, all based in the EU where possible:

• Supabase (EU). Stores your account (email, user ID), your collection data (binders, boxes, cards, slots) and the card photos you attach. Supabase is our database, authentication and storage provider.
• Resend (EU, Ireland). Sends you transactional emails such as magic-link sign-in links. Resend never receives your collection data.
• Anthropic Claude API (United States). Receives the photo you take with the in-app scanner so we can identify the card. The image is not stored by Unbinder or used by Anthropic to train its models. Under Anthropic’s standard commercial retention policy, API inputs and outputs are automatically deleted from its backend within 30 days, except where longer retention is needed for usage-policy enforcement, legal obligations, or another agreed arrangement. Anthropic’s commercial data-processing terms include safeguards for international transfers.
• PostHog (EU, Frankfurt). Receives the product analytics, search, device, coarse-region, crash and diagnostic data described above.
• RevenueCat and Apple. Process in-app purchases and subscription status. RevenueCat uses your Unbinder user ID to connect an entitlement to your account; Apple handles the payment.
• Expo Push Service and Apple Push Notification service. Receive your push token and notification payload when we send a notification you enabled.

These providers process data to deliver Unbinder on our behalf. We do not sell personal data or share it for third-party advertising.

What we never do

• Sell, rent or share your collection with third parties.
• Use your data for advertising profiling.
• Collect precise location, contacts, health data, microphone recordings or payment-card details.
• Keep scanner photos in Unbinder’s own database or storage.

Affiliate partnerships

When you follow a marketplace link from a card or sealed product, Unbinder may receive a small commission if you buy, at no extra cost to you. At present, qualifying eBay links may earn commission. TCGplayer and Cardmarket are used for price comparison. On this website, pages that contain commission-earning links say so. Unbinder is not affiliated with Amazon.

• eBay Partner Network (EPN) — active affiliate program for eBay listings.
• Cardmarket — links for comparing European card prices and offers. On this website, pages that contain commission-earning links say so.
• TCGplayer — links for comparing card prices and offers. On this website, pages that contain commission-earning links say so.

Once you leave Unbinder, the merchant’s own privacy policy applies and they may set cookies on their domain. We do not see what you buy or how much you spend. See our affiliate disclosure for details.

Your rights (GDPR)

Unbinder is operated from the Netherlands. EU users have the right to access the data we hold about them, to correct it, to export it in a portable, machine-readable format (right to data portability), to delete it, to restrict or object to our processing of it, and to lodge a complaint with their national data protection authority. Email support@unbinder.app and we’ll action the request within 30 days.

Deleting your account

You can permanently delete your Unbinder account from inside the app: go to Settings → Account → Delete account. Deletion removes your authentication record and user data, queues deletion of your account-linked PostHog events, and deletes your RevenueCat customer record. It does not cancel an active App Store subscription; manage that separately in your Apple Account. If you used Sign in with Apple, you can also remove Unbinder from those Apple Account settings after deletion. There is no recovery window. If you cannot use the in-app flow, email support@unbinder.app and we’ll action the request within 30 days.

How long we keep your data

• Account, profile, entitlement and push-token data: kept until you delete your account, remove the data, or the token becomes invalid, subject to any legal record-keeping requirement.
• Collection, trade and message data: kept until you delete it where the app allows, or until you delete your account.
• Scan photos: not stored by Unbinder. Anthropic may retain API inputs and outputs for up to 30 days under its standard commercial retention policy, with limited exceptions described above. Scan outcome metadata is kept until you delete your account.
• Saved profile, card and sealed-product photos: kept until you remove them where the app allows, or until you delete your account.
• Analytics and diagnostic events: kept for up to 12 months in PostHog, then aged out; account deletion requests earlier deletion of account-linked events.
• Email logs (sign-in links sent via Resend): kept for up to 30 days for delivery troubleshooting, then deleted.
• Backups: encrypted database backups are retained for 30 days, after which deleted accounts are unrecoverable even from backup.

Minimum age

Unbinder’s scanner and private collection features are intended for users aged 13 and over. Before the first AI-assisted scan, we ask you to confirm that you are at least 13; the app stores that consent decision on your device and every scan request carries the confirmation, not your date of birth. Community features that put users in contact with one another — including a public collector handle, trading and messaging — are available only to users aged 16 and over. When you claim a handle, we ask you to confirm that age band and accept the current community terms. We store the community confirmation time and terms version, not your date of birth. Unbinder is not directed at children under 13 and we do not knowingly collect their personal data. If you believe a child under 13 has created an account, email support@unbinder.app and we will delete the account and associated data without delay.

Contact

Questions? Reach the human behind Unbinder at support@unbinder.app.