Privacy Policy

Last updated: October 7, 2026

SweetHolo helps you catalog, scan, value and share your trading cards across many games. SweetHolo is developed and run by RemyWare LLC ("we" and "us"). This policy explains what we collect, why, who we share it with, and the choices you have, in plain language.

The short version

We keep what we need to run your collection, show prices, and power shows and the social features.
Card scans are read entirely on your phone. The photo never leaves it, and we keep no record of your scans.
We don't sell your personal information.
You can delete your account in the app. After a 30-day window to change your mind, everything of yours is deleted.

Account and sign-in

Email sign-in: your email address. We email you a 6-digit code to sign in (it expires in 3 minutes). There's no password to store.
Google Sign-In: your Google account's email, name and photo.
Your profile: a display name, a unique @username, and anything else you choose to add: a profile photo, a cover image, a short bio, a link to your Instagram, and a profile theme.

Your collection

All of this is yours, stored with your account so it syncs across your devices:

The cards you add, across every game, and the portfolios you organize them into, including Favorites and Wants.
What you record for each copy: condition, printing, grading (grader, grade and an optional certification number), the price you paid, the date, quantity, notes, and whether you sold or traded it.
Values we work out for you: your collection's worth and its history over time.
Tally and Calculator: the days you log in Tally (lines, amounts and any photos you attach) and the Calculator receipts you save.
Your settings, such as your display currency. Currency conversion uses public exchange rates (open.er-api.com); nothing about you is sent.

Card scanning and your photos

When you scan a card, it's recognized entirely on your phone, with our on-device card database. The photo is never uploaded, and we don't keep any record of what you scanned. Photos you share into SweetHolo from your photo library, or import into the scanner, are read the same way, on your phone.

Photos you choose to save are uploaded and stored with your account until you delete them: a photo on a Tally line, a show's cover image, your profile photo and your cover image.

Shows

Shows you create: the title, description, dates, venue address and cover photo. Shows are found through the profiles of the people who post them.
Shows you're going to: other people see only how many are going, never a list of names.
Address search: when you type a venue address, what you type is sent to Photon (OpenStreetMap data, run by komoot) to suggest addresses.
Maps: a show's venue is shown on Apple Maps on iPhone and Google Maps on Android, which receive the venue's location to draw the map.
Weather: a show's location is sent to Open-Meteo to show the forecast for its day.
Google Calendar (optional): if you connect your Google account, shows you create or join are added to your calendar.
Reminders: show reminders are scheduled on your phone.

Social features

Your profile is private unless you choose to share it. While it's private, only followers you've approved can see it, its lists and its shared portfolios. Once you share it, anyone with the app can.
People can find you by your @username. How many followers you have and how many people you follow is visible to everyone; who they are follows your profile's privacy.
Every follow is a request you accept or decline. You can remove a follower or block someone; a blocked account can't find you or see your profile.
When you share a portfolio, the people who can see it see its cards and their conditions, not what you paid or what it's worth. Your Favorites and Wants lists can each be shared on their own. You can stop sharing any time.
A link to a shared profile or portfolio opens in the app. On the web, the link shows only a small preview: your name and a couple of cards, with no values.
A Calculator receipt you share is sent as an image, through whichever app you choose.
Phone notifications (optional): if you allow them, we save your phone's notification address with your account to tell you about follow requests and accepted requests. You can turn each kind off in Settings.

Card data, prices and links

Card details, pictures, prices, price history and sales come from third-party card-data sources (tcgapi.dev, TCGPriceLookup and TCGplayer). Our servers collect them; nothing about you is sent to these sources.
The app downloads the price files for the sets you look at and keeps them on your phone, so prices work offline.
Links to TCGplayer, eBay and the grading companies (PSA, CGC, Beckett and SGC) open their sites. Looking up a PSA or CGC slab sends its certification number to that grader's site.
Google Sheets (optional): if you connect your Google account, exports and the inventory mirror are written to a spreadsheet in your own Google Drive.

The free app shows ads from Google AdMob. Pro members don't see ads.

AdMob uses your device's advertising identifier (Apple's IDFA or the Android Advertising ID) and standard device information to show and measure ads.
On iPhone, we ask your permission before the identifier is used to personalize ads (Apple's App Tracking Transparency). If you decline, you still see ads, but they aren't personalized.
Where the law requires it, such as in the EU, the UK and Switzerland, Google's consent form asks for your choice first, and you can change it any time under Ad privacy choices in Settings.

Pro subscriptions

Pro is sold and billed by the App Store or Google Play. RevenueCat, our subscription provider, keeps your purchase status linked to your account so Pro unlocks on all your devices. We never see your payment details.

Keeping the service safe

App integrity: our servers check that requests come from the real SweetHolo app, using Apple's DeviceCheck on iPhone and Google Play Integrity on Android. These checks don't share personal information with us.
Limits: to stop abuse, we count requests per account and, for sign-in, per network address. Network addresses are stored only as a one-way code, and these counts are cleared within a day.
Technical logs: our servers (Google Cloud and Firebase) keep standard technical logs, such as errors and request times, to keep the service running. We don't use a separate analytics service.

How we use your information

To run the app: show your collection and its prices, sync it across your devices, and run shows, sharing and notifications.
To keep it working and safe: fix problems and prevent abuse.
To communicate: send sign-in codes and important account messages.
To support the free app with ads, and to manage Pro subscriptions.

Who we share it with

We don't sell your personal information. We share only what each service needs to do its job for us:

Google: Firebase and Google Cloud (sign-in, database, storage, servers, notifications, app integrity), Google Sign-In, Google Calendar and Google Sheets (only if you connect them), Google Maps on Android, Google Play, and AdMob.
Apple: the App Store, Apple Maps on iPhone, and DeviceCheck.
RevenueCat: your subscription status.
Resend: delivers the sign-in code emails to your address.
Photon (komoot) and Open-Meteo: the address you type when adding a show, and a show's location for its weather.
Other people in the app: only what you choose to share, like your profile, a shared portfolio, or a show you post.
Legal reasons: if the law requires it, or to protect the service and the people who use it.

Your choices and rights

See and change your profile and collection any time in the app.
Stop sharing a portfolio, remove followers, block accounts, and turn notifications off.
Control ads, notifications and photo access in your phone's settings, and ad consent under Ad privacy choices in Settings.
Disconnect your Google account in Settings.
Depending on where you live (for example the EU or the UK under the GDPR, or California under the CCPA), you may have more rights, such as access, correction, deletion and portability. Email us to use them.

Deleting your account

Go to Settings and tap Delete account. You're signed out, and the deletion is scheduled for 30 days later. If you sign back in before then, it's cancelled and everything is just as you left it.

After 30 days we delete your collection, portfolios, Tally and Calculator records, photos, the shows you created, your follows and requests, your sign-in records and your subscription record, and free your @username. Your profile is replaced by a "Deleted user" placeholder, so other people's shows and lists still display correctly.

Can't open the app? See how to delete your account or email us.

How long we keep things

Your account data, for as long as you keep your account (see Deleting your account above).
Sign-in codes expire after 3 minutes. Abuse-prevention counts are cleared within a day.
Our database backups are kept for up to 14 days, so deleted data can remain in a backup for up to 14 days after it's deleted.
Anything the law requires us to keep, for as long as it requires.

Security

Your data sits behind sign-in, and only you can see your collection, apart from what you choose to share. No online service can be perfectly secure, so we can't promise absolute security.

Children

SweetHolo isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child has given us personal information, contact us and we'll delete it.

International users

We operate from the United States, and your information is processed there and wherever our service providers operate.

Changes to this policy

We may update this policy as the app changes. We'll change the date at the top, and for significant changes we'll let you know in the app.

Contact us

Questions about your privacy, or want to use one of your rights? Email us at support@sweetholo.com.

Read our Terms of Service →