Privacy Policy
Hyper Rare (“the app”) is published by AppGrowth ATX LLC (“we,” “us,” “our”), a limited liability company organized in Texas, United States. Hyper Rare is a Pokémon card scanning and collection-tracking app. This policy explains what information the app handles, what it does not, and the choices you have.
We built Hyper Rare to work almost entirely on your own device. We do not have user accounts, we do not run ads, we do not use analytics or tracking software, and we do not sell or share your personal information with anyone.
The short version
- Photos of your cards never leave your device. Card recognition happens entirely on your iPhone or iPad.
- Your collection is stored only on your device. We have no server holding your cards, and we cannot see your collection.
- We have no accounts and no logins. We never ask for your name, email address, or password.
- We do not use advertising or tracking. No ad networks, no analytics tools, no device advertising identifier (IDFA), and no App Tracking Transparency prompt, because we do not track you.
- We do not sell or share your personal information, and we never have.
The only information that leaves your device is described below.
What the app handles, and where it goes
Camera and photo library images
When you scan a card, the app uses your camera or a photo you choose from your library to read the card’s name, collector number, and copyright year.
This processing happens entirely on your device, using Apple’s built-in Vision framework. Card images are held in memory only long enough to identify the card, are never uploaded to us or to anyone else, and are not saved by the app. We never receive them and cannot see them.
The app asks for camera permission only when you first scan a card, and photo library access only when you choose to import a photo. You can decline or revoke either in Settings → Hyper Rare, and the rest of the app continues to work.
Your card collection
The cards you add, the folders you create, and the value history the app records are stored locally on your device using Apple’s SwiftData. This information is not synced to iCloud, is not transmitted to us, and is not accessible to us.
If you delete the app, this data is deleted with it. Because it exists only on your device, we cannot recover it for you, so consider backing up your device if your collection matters to you.
Card information and prices
To show card details and market prices, the app requests information from TCGdex (api.tcgdex.net), an open-source Pokémon card database. These requests contain only the identifier of the card being looked up. They do not include your name, your collection, your photos, or any identifier we have assigned to you. As with any internet request, TCGdex’s servers receive your device’s IP address.
Most card information is already bundled inside the app, so many lookups require no network request at all.
To convert prices between currencies (for example, to show prices in yen, or to convert a Japanese card’s euro price), the app downloads the day’s exchange rates from Frankfurter (api.frankfurter.dev), a free service that republishes the European Central Bank’s reference rates. This request asks only for the rates and contains no information about you or your collection. As with any internet request, Frankfurter’s servers receive your device’s IP address. It happens at most once a day.
Subscriptions and purchases
If you buy a subscription, the purchase is processed by Apple through the App Store. We never see or receive your payment card, billing address, or Apple Account credentials.
We use Adapty, a subscription management service, to determine whether your subscription is active and to display subscription offers. To do this, the Adapty software in the app sends Adapty a device-generated identifier (Apple’s Vendor ID), your App Store purchase receipt, and basic technical details such as your device model, operating system version, country, and IP address.
This information is used only to manage subscriptions and understand which offers are shown and purchased. It is not used for advertising. Adapty acts as our service provider and processes this information on our behalf. Their privacy policy is available at adapty.io/privacy.
You can view, manage, or cancel a subscription at any time in Settings → your name → Subscriptions on your device.
Crash and performance information
If you have enabled sharing of diagnostics with app developers in your iOS settings, Apple may provide us with crash logs and performance statistics. Apple aggregates this information and does not identify you to us. You can turn this off in Settings → Privacy & Security → Analytics & Improvements.
What we do not do
To be explicit, the app does not:
- Collect your name, email address, phone number, or postal address
- Require or offer an account, login, or password
- Track you across other apps or websites
- Use the device advertising identifier (IDFA) or show advertisements
- Include analytics or attribution software such as Google Analytics, Firebase, Mixpanel, or AppsFlyer
- Upload your photos or your collection to any server
- Sell, rent, or share your personal information with third parties for their own purposes
- Access your contacts, location, microphone, health data, or files
Children’s privacy
Hyper Rare is designed to be simple and welcoming, and we expect that some of the people using it are children.
We do not knowingly collect personal information from children. The app has no accounts, no sign-up, no chat or messaging, no user-generated content shared with others, no advertising, and no behavioral tracking. Card photos are processed on the device and never transmitted.
The limited technical information described above (device identifier, purchase receipt, IP address) is handled by Adapty solely to operate subscriptions, not to build a profile of any user or to advertise to them.
Subscriptions are purchased through Apple, and Apple’s parental controls apply. We recommend that parents enable Ask to Buy or restrict in-app purchases in Settings → Screen Time → Content & Privacy Restrictions if they do not want a child making purchases.
If you are a parent or guardian and believe a child has provided personal information to us, please contact us at [email protected] and we will delete it.
Legal basis and your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to its processing.
In practice, almost all of your information already lives only on your device and is fully under your control. You can view it in the app, delete individual cards or folders, or remove everything by deleting the app.
For the limited subscription information held by Adapty on our behalf, or for any other request regarding your information, contact us at [email protected]. We will respond within the time required by applicable law. We do not sell personal information, and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of in that respect.
Where required, our legal basis for processing subscription information is the performance of our contract with you (providing the subscription you purchased) and our legitimate interest in operating and securing the app.
Data retention
Collection data stays on your device until you delete it or delete the app. Subscription records are retained by Adapty for as long as needed to operate your subscription and to meet legal, tax, and accounting obligations. We do not maintain our own database of users.
International transfers
Adapty and Apple may process information in countries other than your own, including the United States. Where required, these transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Security
Information stored on your device is protected by iOS and your device passcode or biometric lock. Network requests use encrypted HTTPS connections. Because we do not operate a server holding your collection or personal information, there is no central database of user data to breach.
Changes to this policy
If we change this policy, we will update the “Last updated” date above and post the revised version at this address. If we ever begin collecting information in a materially different way, we will provide clear notice in the app before the change takes effect.
Contact
AppGrowth ATX LLC is the data controller for the limited information described in this policy.
Questions about this policy, or requests regarding your information:
AppGrowth ATX LLC
Email: [email protected]
We aim to respond to all privacy requests within 30 days.