Last updated: July 5, 2026
DexFolio ("the app", "we", "us") is an independent Pokémon Trading Card Game collection tracker operated by Jin Kwon. This policy explains what we collect, why, who processes it, and your choices. We do not sell your data, we do not show ads, and we do not track you across other companies' apps or websites.
1. Account identifier. By default you use the app anonymously — we create a random user ID (a UUID) to store your collection and settings. It is not tied to your name. If you choose Sign in with Apple to back up or sync your collection, we receive the name and email Apple provides (you may use Apple's Private Relay email); we use it only to identify your account across devices.
2. Your collection content. The cards you add, their quantities, condition, and any acquisition price or note you type; your price alerts and watchlist. This is the core of the app and is stored so we can show you your binder and portfolio. You can export or delete all of it (see "Your rights").
3. Card photos — processed, not stored. When you scan a card, the photo is sent to our card-reading service to identify the card. The photo is not retained. After identification we keep only a one-way fingerprint (a SHA-256 hash) and non-image details (detected card, quality flags, timing/cost) to improve accuracy and prevent abuse. Photos are never used for advertising and never sent to our analytics tools.
4. Feedback you send. If you use "Send feedback", we store your message and the optional contact you provide, plus your app version and platform, so we can act on it and reply.
5. Diagnostics (crash reports). To keep the app stable we collect crash and error reports (device model, OS version, app version, and the technical stack trace). These do not include your photos or the contents of your collection. This is a legitimate-interest processing to fix bugs.
6. Usage analytics — only with your consent. During onboarding we ask whether you'll share anonymous usage statistics (e.g., "opened the scanner", "added a card", screen views). If you decline (or you are under 13), we collect none of this. Analytics never include your photos, card notes, name, or email. You can change this anytime in Settings → Share anonymous usage stats.
7. Technical basics. Standard app/device info needed to run the service (app version, platform, OS version) and your IP address as seen by our servers (used transiently for rate-limiting/abuse prevention, not stored as a profile).
We do not collect: precise location, contacts, health data, advertising identifiers (no IDFA), or any data for cross-app tracking. The app therefore does not show Apple's App Tracking Transparency prompt.
We use these providers strictly to run the app:
DexFolio is not directed to children under 13. We ask your age at first launch and do not create an online account or collect usage analytics for anyone who indicates they are under 13; the app remains usable in a local-only mode. If you believe a child under 13 provided us personal information, contact us and we will delete it.
Data is transmitted over encrypted HTTPS/TLS. Access to your collection is protected by per-user database security rules. No system is perfectly secure, but we take reasonable measures to protect your information.
Our providers are located in the United States and the European Union. By using the app you understand your data may be processed in those regions under appropriate safeguards.
We may update this policy; the "Last updated" date will change and, for material changes, we'll notify you in-app.
DexFolio is an independent app and is not affiliated with, endorsed, sponsored, or approved by Nintendo, The Pokémon Company, GAME FREAK, or Creatures Inc. Pokémon® and all related names are trademarks of their respective owners.