PRIVACY POLICY

• Account: email, name, username, date of birth. Optionally location (country, state, ZIP) and social handles.
• Your collection: the cards you catalogue and photos you upload.
• Purchases: subscription tier and billing status. Card numbers never reach our servers — Stripe and Apple handle them.
• Diagnostics: crash and error reports.
• Notifications (iOS app, only if you turn them on): your phone’s Apple push token, its time zone (so they arrive at 9 AM your time), the app version, your notification settings, and a record of what we’ve sent (so you never get the same one twice, or more than one a day).

Used only to confirm you’re old enough to use the service. Accounts for children under 13 are blocked. Never used for advertising or profiling.

• Anthropic — for AI card scanning, grade estimation and Comps, the card photo and extracted text are sent to Anthropic’s API. Under their API terms, this content is not used to train their models.
• Supabase — hosting, database, storage, authentication.
• Stripe and Apple — subscription payments. Apple also delivers notifications; their text (for example a card’s name and value) passes through Apple’s push service.
• PriceCharting — card metadata and market values. No personal information sent.
• eBay — listing search and affiliate links. Card photos you take in Comps are sent to eBay’s image search to find matching listings. No personal information shared.
• Sentry — error reporting. Session replay is disabled on mobile and masked on the web, so your photos and portfolio are never captured.

We don’t sell your personal information, track you across other companies’ apps or websites, or run advertising or analytics trackers.

Manifests are private by default. Make one public and anyone with the link can see its cards and photos. There’s no directory or feed — it’s reachable only by a link you share. You can make it private again at any time.

We keep your data while your account exists. Delete your account at any time and your manifests, cards and photos go with it; backups are purged on a rolling schedule. We keep some records where the law requires, such as transaction records for tax.

Signing out of the app stops notifications to that phone and removes its push token. Turn them off any time in Account → Notifications or in iOS Settings.

You can access, correct, export or delete your personal information. Depending on where you live you may have further rights, including under the CCPA (California) and the My Health My Data Act (Washington). Email us and we’ll act on it.

Row-level access rules mean only your account can reach your data. On mobile, your session lives in the device’s secure keychain, not ordinary app storage.

support@manifest.cards