TradeScale privacy policy

Last updated: July 28, 2026

This policy covers TradeScale, the iOS and Android app by North Fox Apps ("we", "us") for pricing trades and tracking a trading card collection. Our Shopify apps are covered by a separate policy.

TradeScale works without an account, and most of it always will. You can scan, search, price trades and keep a collection without telling us anything about yourself. Signing in is optional and exists for one reason: so a collection survives losing the phone it lives on.

If you sign in

Accounts use Sign in with Apple on iOS and Google on Android. We never see or handle a password. The provider gives us an account identifier and, if you allow it, an email address — and Apple's Hide My Email lets you sign in with a relay address instead, which works fine here. Google sign-in shares your Google account email with us and nothing else.

Signing in stores a copy of your ledger — your logged deals, manual collection adjustments, and shows — so it can be restored and kept in step across your devices. That copy is held by Supabase, our database provider, and is readable only by your own account: the database enforces this per row, not merely in the app. Card images, prices and the catalogue are not part of it; those come from our public mirror and are the same for everyone.

You can sign out at any time, which leaves the collection on your device untouched. To delete the stored copy entirely, email us and we will remove it — or ask in the app and we will do the same.

What stays on your phone

Without an account, your collection, deals, shows and settings never leave your device. They are stored in the app's own local storage and are not uploaded or synchronised anywhere. That means we cannot see your collection — and equally that we cannot recover it if you lose or reset your phone, which is why the account exists.

Your settings, the trade you are part-way through, and which tab you were last on stay on the device either way. They are never uploaded, with or without an account.

The Settings screen also has a CSV export of your collection and deals, which goes directly from your phone to wherever you send it and does not pass through us.

What is sent to us

The app talks to our servers for one purpose: identifying cards and getting their prices.

• Card searches. When you search for a card or open a set, the app sends the search text or the set identifier to our pricing service. We do not store these queries against any identifier, because there is no identifier to store them against.
• Card photos, to identify a card. The scanner reads the card's name and number on your device, using your phone's own text recognition. Nothing is sent for a scan we can resolve locally. When the text alone is ambiguous — several printings share a name and number — the photo of the card is sent to our image-matching service, which converts it into a numeric fingerprint and compares that against our catalogue. That photo is not stored. It is held in memory for the length of the request, used to compute the fingerprint, and discarded. It is never written to disk, never logged, and never shared.
• Card photos you agree to share, to improve the scanner. This one is different, and it is the only place we keep an image. The first time a scan would send anything, the app asks. If you agree, then each time you confirm, correct or reject a scan, the cropped picture of that card and what the scanner guessed are uploaded and kept, so the recognition can be measured and improved. The crop contains the card and nothing around it. It carries a random tag that changes every time the app launches — no account, no device identifier, no location, and nothing linking it to your collection. You can decline when asked, and change your mind at any time under Settings → Scanner → Share scans. Declining costs you nothing: the scanner works identically either way.

Point the camera at a card and only that card's image is involved. Please avoid scanning anything you would not want transmitted, as with any camera feature.

Subscriptions

TradeScale Pro is an auto-renewing subscription sold through Apple. Payment is handled entirely by Apple — we never see your card details, billing address, or Apple ID.

Subscription status is managed for us by RevenueCat, Inc., which issues a random identifier for your installation so it can tell the app whether a subscription is active. We do not join that identifier to your account, so a subscription and a signed-in collection are kept separate. RevenueCat's own privacy policy is at revenuecat.com/privacy.

What we do not do

TradeScale contains no analytics SDK, no advertising SDK, no crash-reporting SDK, and no third-party trackers of any kind. We do not sell, rent, or share your data with anyone, and we do not use it to build a profile of you. The processors named on this page — Apple, Supabase and RevenueCat — hold data only to provide the features described here.

Children

TradeScale is not directed at children under 13 and we do not knowingly collect information from them. Without an account we hold nothing personal about anyone; with one we hold an account identifier and possibly an email address. If you believe a child has signed in, email us and we will delete the account and its data.

Your rights

Everything in the app can be edited or deleted from inside it, and the CSV export gives you a copy of your own data in a format anything can read.

If you have never signed in, there is no server-side copy for us to return or erase — deleting the app removes everything. If you have signed in, email us and we will delete the stored copy of your ledger and your account record.

If you have subscribed and want the anonymous subscription record deleted, email us and we will ask RevenueCat to remove it. Note that this does not cancel a subscription — that is done through your Apple ID's subscription settings.

Third-party data sources

Card prices come from JustTCG and PriceCharting, and card images are served from TCGplayer's image CDN. These requests carry card identifiers only. Loading an image involves your device contacting that CDN directly, which, as with loading any image on the internet, exposes your IP address to it.

Changes

If this policy changes materially, we will update the date at the top and note the change in the app's release notes.

Contact

Privacy questions: northfoxapps@gmail.com.