Gradr by CardEX StudioThis Privacy Policy explains how CardEX Studio Corporation (“CardEX,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes information in connection with the Gradr Exchange mobile application, our websites, and related services (collectively, the “Services”). By downloading, accessing, or using the Services, you acknowledge that you have read and understood this Policy and agree to the practices described in it. If you do not agree, do not use the Services.
01Scope
This Policy applies to information we process about users of the Services. It does not apply to third parties that we do not control, including Apple, sign-in providers, and any external websites or services you access through the Services. Your use of those third parties is governed by their own terms and privacy policies.
02Information we collect
We collect the following categories of information:
- Account information. When you sign in with Apple or Google, we receive identifiers such as your name, email address (or a relay email you choose to share), and a unique user identifier. We use these to create and secure your account.
- Card images and content. Photos you capture of your cards, together with any grades, collections, notes, listings, and other content you create or submit through the Services.
- Grading and collection data. The grades, subgrades, confidence scores, card identifications, valuations, ROI calculations, alerts, and portfolio information generated from your use of the Services.
- Purchase information. Records of subscriptions, in-app purchases, entitlements, and transaction status. Payment card details are handled by Apple; we do not receive your full payment card number.
- Device and usage data. Device model, operating system, app version, language, identifiers, settings, interactions, feature usage, session data, and log information.
- Diagnostics. Crash reports, performance metrics, and error data used to keep the Services stable.
- Approximate location. Coarse location inferred from your IP address (for example, country or region). We do not collect precise GPS location.
- Communications. Information you provide when you contact support, respond to surveys, or otherwise communicate with us.
03Card images and AI processing
To generate a grade, the Services transmit your card images and related data to our servers and to third-party artificial-intelligence and cloud providers that perform image analysis on our behalf. By using the grading features, you direct and authorize us to transmit, store, copy, process, and analyze your images and content for the purpose of providing, maintaining, evaluating, and improving the Services.
04How we use information
We use information for any lawful purpose consistent with this Policy, including to:
- provide, operate, secure, personalize, and maintain the Services;
- generate grades, valuations, identifications, alerts, and other outputs;
- process transactions and manage subscriptions and entitlements;
- develop, test, evaluate, train, tune, and improve our features, models, and algorithms;
- analyze usage and trends, conduct research, and produce statistics and insights;
- communicate with you about the Services, including updates, security notices, and marketing where permitted;
- prevent fraud, abuse, and security incidents, and enforce our Terms of Service and other agreements; and
- comply with law and respond to lawful requests.
Where required by applicable law, we rely on your consent, our legitimate interests, the performance of our contract with you, and/or compliance with legal obligations as the basis for processing.
05Aggregated and de-identified data
We may create aggregated, anonymized, or de-identified data from information collected through the Services, including from card images, grades, and usage. Such aggregated or de-identified data is not personal information, is owned by us, and may be used, retained, and disclosed by us for any purpose, indefinitely, without restriction, including to operate, improve, and promote the Services and to develop new products and machine-learning models. We will not attempt to re-identify de-identified data except as permitted by law.
06How we share information
We do not sell your personal information for money. We may share information as follows:
- Service providers. With vendors and processors that perform services for us, such as cloud hosting, storage, AI inference, pricing data, analytics, crash reporting, and customer support.
- Affiliates. With our current and future affiliates and related entities for purposes consistent with this Policy.
- Business transfers. In connection with any merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our assets, in which information may be transferred as a business asset.
- Legal and safety. Where we believe disclosure is reasonably necessary to comply with law, enforce our agreements, protect rights, property, or safety, or respond to lawful requests.
- With your direction or consent. When you ask us to share information or otherwise consent to sharing, including content you choose to make public or share (such as slab-style share images).
- Aggregated or de-identified data. Which we may share freely as described in Section 5.
07Third-party services
The Services rely on third parties that process information on our behalf or in connection with features you use, including:
- Apple (app distribution, Sign in with Apple, in-app purchases, push notifications);
- Google Firebase (authentication, database, storage, cloud functions, crash and performance reporting, messaging);
- AI and cloud inference providers (image analysis to generate grades); and
- Card pricing data providers (market valuations).
These providers process information under their own terms and privacy policies. We may add, change, or remove providers at any time.
08Data retention
We retain information for as long as we deem necessary to provide and improve the Services, operate our business, and fulfill the purposes described in this Policy, and for as long as permitted or required by law. We may retain de-identified and aggregated data, backups, and records of transactions indefinitely. Retention periods may vary based on the type of information and applicable legal requirements.
09Your choices and rights
You can:
- Delete your account. You may request deletion of your account and associated personal content from within the app or by contacting us. We will delete or de-identify such information as required, subject to information we may retain for legal, security, backup, and legitimate business purposes, and to de-identified and aggregated data.
- Manage notifications. Adjust push notifications in your device settings and marketing preferences where offered.
- Manage subscriptions. Manage or cancel subscriptions through your Apple account settings.
Depending on where you live, you may have additional rights under laws such as the GDPR, UK GDPR, or CCPA/CPRA — including rights to access, correct, delete, or port certain personal information, and to object to or restrict certain processing. We honor these rights to the extent required by applicable law. To exercise them, contact us using the details below. We may verify your request and may decline where an exception applies.
10Security
We use reasonable technical and organizational measures designed to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You use the Services and transmit information at your own risk.
11Children
The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
12International use
We operate the Services from, and process information in, jurisdictions that may differ from yours and that may not offer the same level of data protection. By using the Services, you consent to the transfer, storage, and processing of your information in those jurisdictions, including Canada and the United States.
13Changes to this Policy
We may update this Policy at any time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after any change constitutes your acceptance of the updated Policy.
14Contact us
Questions about this Policy or our privacy practices? Contact:
CardEX Studio Corporation
support@cardexstudio.com