Privacy Policy

Last updated: July 31, 2026

SweetHolo helps you catalog, scan, value, trade, and share your trading cards across many games. This policy explains what we collect, why, who we share it with, and the choices you have — written in plain language.

The short version

• We collect what we need to run your collection, recognize your cards, show prices, and power trades, events, and sharing.
• Card scans are read on your device first — the photo usually never leaves your phone.
• We don't sell your personal information.
• You can delete your account, which deletes your collection data and stored photos.

Account and sign-in

• Email sign-in: your email address (we send a one-time "magic link" to sign you in — we don't store a password).
• Google Sign-In: your Google account's email and basic profile (name and photo).
• A profile you create: a display name, a unique @username, and an optional profile photo.

Your collection and portfolio

The heart of the app — all of it is yours, stored so it syncs across your devices:

• The cards you add, across every game, and the portfolios/collections you organize them into.
• Details you record per card: condition, printing, grading (grader, grade, and an optional certification number), the price you paid (cost basis), the date acquired, quantity, favorites, and notes.
• Derived values we compute for you: net worth and a history of your portfolio's value over time.
• Your display currency preference (values are converted using third-party exchange rates).

Card scanning and your photos

When you scan a card, we first try to read it entirely on your device — the collector number is recognized locally, and the image never leaves your phone.

If the on-device read can't identify the card, the photo is sent to our servers and to our card-recognition provider (Anthropic) to read it. We do not permanently store scan photos on our servers — only non-photo metadata about how the scan resolved, which we use to improve accuracy.

Photos you deliberately save — a tally photo, an event cover, a profile picture — are stored as part of your content until you delete them.

Trades, tally, and events

• Trades: the cards, values, and participants in trades you create or join. A trade you choose to share becomes viewable by anyone with its link.
• Tally: the quick logs and any photos you attach while tallying cards.
• Events and shows: events you create or join, including a title, description, an address or location, attendee lists, vendor card lists, and hold requests. If you enable it, we sync your events to your Google Calendar.
• Location: an address or place you enter for an event, and — only if you allow it — your approximate device location to find nearby events.

Social features

You can choose a public @username, follow other collectors, and make your profile, a portfolio, your favorites, or a trade shareable by link. Anything you mark as shared becomes viewable by others (in some cases by anyone with the link). You control what you share, and you can make it private again.

Search, prices, and exports

• Card identity, images, prices, price history, and sold listings come from third-party card-data sources (including tcgapi.dev, TCGplayer, and eBay). Opening a shop or sold-listing link takes you to those sites.
• If you use the export feature, we create a Google Sheet in your Google account with your inventory — this requires your Google authorization.

Information collected automatically

• Usage and diagnostics: how features are used and how scans resolve (timings and outcomes, never the photo), so we can fix bugs and improve accuracy.
• Device and advertising data: to show ads, our advertising partner (Google AdMob) collects an advertising identifier (such as Apple's IDFA or the Android Advertising ID) and standard device information. On iOS we ask your permission before using this identifier to personalize ads (Apple's App Tracking Transparency prompt); if you decline, you still see ads, but they are not personalized. You can change this choice any time in your device settings. Our backend (Google Firebase) collects standard app and device diagnostics.

Purchases, tips, and Pro

Tips and any paid features (like a future "Pro" plan) are processed by the app stores (Apple / Google Play), and — if enabled — a purchases provider (RevenueCat) that tells us your entitlement status. We never see or store your payment card details.

How we use your information

• Provide the app: recognize cards, show prices and history, sync your collection, and run trades, events, and sharing.
• Improve the app: diagnose problems and make scanning and search more accurate.
• Communicate: send account and security messages, like magic sign-in links.
• Ads and support: show ads and, if you tip or subscribe, manage that through the stores.

Who we share it with

We don't sell your personal information. We share only what's needed to run the app, with providers acting on our behalf:

• Google — Firebase (authentication, database, storage, hosting, analytics), Google Sign-In, Google Calendar (only if you sync events), Google Sheets (only if you export), Google Maps/Places (address search), and Google AdMob (ads).
• Anthropic — reads a scan photo only when the on-device read can't identify the card.
• Card-data and pricing providers (including tcgapi.dev, TCGplayer, and eBay) — for card identity, prices, and sold listings.
• Apple, Google Play, and RevenueCat — process tips and subscriptions. We never see your payment card details.
• Other users — only the things you deliberately share (a public profile, a shared portfolio, a trade link, an event you join).
• Legal reasons — if required by law, or to protect the service and its users.

Your choices and rights

• Access and update your profile and collection any time in the app.
• Make shared items private again, and unfollow or remove your social connections.
• Delete your account, which removes your collection data and stored photos from our systems.
• Control ads personalization, location, calendar, and photo access through your device settings.
• Depending on where you live (for example, the EU/UK under GDPR, or California under CCPA), you may have additional rights such as access, correction, deletion, or portability. Email us to exercise them.

Data retention

We keep your information while your account is active. When you delete your account, we delete your collection data and stored photos. Some records may persist briefly in backups, or where the law requires us to keep them. Data other users saved from something you shared (for example, a completed trade) may remain with them.

Security

Your data sits behind authentication, and access to your collection is limited to you and anyone you explicitly share with. No app or online service can be perfectly secure, so we can't guarantee absolute security.

Children

SweetHolo isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has given us personal information, contact us and we'll remove it.

International users

We operate from the United States, and your information is processed there and by our providers. If you use SweetHolo from another country, you're entrusting your information to be processed in the U.S. and wherever our providers operate.

Changes to this policy

We may update this policy as the app evolves. We'll change the date at the top, and for significant changes we'll do more to let you know.

Contact us

Questions about your privacy, or want to exercise a right? Email us at support@sweetholo.com.

Read our Terms of Service →