CardDex (TCG Card Library) Privacy Policy

Effective Date: July 19, 2026
Last Updated: July 19, 2026

Welcome to CardDex (TCG Card Library) and related services. This Privacy Policy applies to the CardDex client and supporting services provided by Han Yu Technology (Beijing) Co., Ltd.

If you do not agree to any part of this Policy, please stop using the App and related services.

1. Scope

This Policy applies to information processing arising from your use of CardDex features, including account registration and login, TCG catalog browsing and search, collection and deck management, local collection migration, AI card scanning/recognition, reference pricing and market display, profile and currency preferences, membership/VIP benefits, order or quota features, account management, account deletion, and customer support.

2. Information We Collect

Depending on the features you use, we may collect:

1. Account and authentication information
   When you register, log in, or stay signed in, we may process your phone number, SMS verification codes, one-time authorization data from third-party login providers, access/refresh tokens and expiry times issued by our servers, and user/member IDs.
2. Profile and preference information
   When you edit your profile or preferences, we may process nickname, avatar, display language preferences (e.g., zh-CN / ja-JP / en-US), base currency preferences (e.g., CNY / USD / EUR), and other collection-related settings.
3. Collection, deck, and business data
   To provide library services, we process data you create or sync, including collected card IDs and quantities, condition, grading, status tags, acquisition time, deck name/theme/tags, deck entries, cover card, version numbers, idempotency keys, and local migration snapshots.
4. Card recognition information
   When you use AI scanning, we process card front images you upload, request IDs (e.g., X-Request-Id), device IDs (e.g., X-Device-Id), recognition candidates, recognition source markers, and daily recognition quota usage. Images are used only for recognition and troubleshooting and are not sold.
5. Membership, order, and quota information
   When you purchase membership/VIP or query orders/quotas, we may process plan details, product IDs, order numbers/status/amount/payment time, in-app purchase transaction IDs, signed payloads, membership status/level/start/expiry, and recognition quotas.
6. Device, network, and log information
   To keep services stable and secure, we may process device model, OS/app version, network status, request time, IP address, request source, X-Device-Id, X-Request-Id, and basic runtime logs.
7. Permissions
   Relevant or reserved permissions may include camera, photo library access, network access, and authentication capabilities. Camera/photo access is requested only when you actively use recognition or image-picking features.

3. How We Use Your Information

We use information to:

1. Complete registration, login, identity verification, and account security.
2. Provide catalog browsing, search/filters, collection management, deck editing, and local migration.
3. Provide AI recognition, result matching, and quota management.
4. Display reference valuations, FX conversion, and market-related information.
5. Complete membership activation, order verification, payment reconciliation, and after-sales support.
6. Protect system security and handle faults, abuse, and risks.
7. Respond to inquiries, complaints, account deletion, and other user requests.
8. Improve products and services within the scope permitted by law.

4. Sharing, Entrusted Processing, and Disclosure

We do not sell your personal information. We share, entrust, or disclose information only as needed for business, as required by law, or with your authorization.

1. Third-party services or SDKs may include:

(1) Apple StoreKit / App Store for in-app purchases and membership activation.
(2) Carrier/number authentication or other login services, if enabled.
(3) TCGdex or similar card data sources for backend catalog/image/price sync; App catalog reads generally use our locally synced data.
(4) LLM/vision recognition services for card-front OCR and name extraction.
(5) Cloud, storage, SMS, or push services as needed for operations.

Third parties process necessary data under their own policies. Please review those policies before using related features.

1. We may disclose information when required by law, to protect public/safety interests, to protect rights of us/users/the public, or to handle fraud, violations, infringement, or security incidents.

5. Storage and Protection

1. Storage
   Sensitive credentials are preferably stored in secure system storage (e.g., iOS Keychain). Some local state may be stored on device. Server-side data is transmitted over HTTPS and stored on our business servers.
2. Retention
   We retain personal information only for the shortest period necessary, unless laws require otherwise. After account deletion, we delete or anonymize your personal information, except records that must be retained for legal, audit, or security reasons.
3. Security measures
   We use reasonable measures such as HTTPS, token-based session control, secure credential storage, and access controls. No internet system is absolutely secure.

6. Your Rights

Subject to applicable law, you may:

1. Access your profile, collection, and deck data.
2. Correct nickname, currency preference, and similar information.
3. Log out.
4. Request account deletion.
5. Withdraw certain permissions (e.g., camera/photo access).
6. Contact us with privacy questions or complaints.

7. Account Deletion

You may request account deletion in the App. Deletion typically makes the following unrecoverable or unavailable: VIP/membership benefits and remaining duration, order/transaction records, profile and preferences, collection and deck data, recognition history and quota records. Please confirm carefully before proceeding.

8. Minors

If you are a minor, please use the services only after a guardian has read and agreed to this Policy. If we find that a minor submitted personal information without guardian consent, we will take prompt measures.

9. Updates

We may update this Policy as features, laws, or business arrangements change. Updated versions will be published in the App, on our website, or related pages. Continued use after an update means you have read and agreed to the updated Policy.

10. Contact Us

Company: Han Yu Technology (Beijing) Co., Ltd.
Chinese name: 晗羽科技(北京)有限公司
Website: https://tiger7.store/company/
Email: hanyukeji7@163.com

We will handle your requests within a reasonable period.