Last updated: July 12, 2026
PokEYE is an independent iPhone app for scanning, identifying, pricing, and tracking physical Pokémon trading cards. This policy explains what information the app collects, how it is used, and the choices you have. We built PokEYE to work for you first: your collection works fully offline, we never sell your data, and we never show ads or track you across other apps or websites.
You can use PokEYE as a guest without an account. If you choose to sign in, we use Sign in with Apple. Apple gives us a unique identifier for your account, and — only if you choose to share it — your name and an email address (which may be Apple's private relay address). We store an internal account identifier so your collection can sync across your devices.
The cards you save, quantities, binders, notes, favorites, and scan history are stored on your device. If you are signed in, this data syncs to the PokEYE server so it is available on your other devices. Pricing and graded-population (PSA) data is provided by the PokEYE server.
Apple processes all payment information; we never receive your payment-card details. To provide and support PokEYE Pro, we receive and process subscription and entitlement information from Apple and StoreKit, such as the product purchased, subscription status and expiration date, transaction identifiers, the App Store environment, and refund or cancellation status.
To understand how the app is used and where to improve it, PokEYE records usage and interaction events through PostHog (a product analytics service). Examples include which screens you open, when a scan succeeds or fails, when you view a card or its price, and when you save a card. These events are pseudonymous — they are tied to a randomly generated identifier, not your name or email. If you sign in, events are associated with your PokEYE account identifier (a random ID, never your name or email) so we can understand subscription, sync, and multi-device behavior.
Each event also carries basic technical context: app version and build, device model, operating-system version, language/region, and your preferred display currency. We do not collect the advertising identifier (IDFA), do not record your screen or capture interactions automatically, and never include personal content such as your purchase prices, personal notes, or card photos in analytics events.
Product analytics is on by default but is fully optional — you can turn it off at any time in Settings → Privacy, and your choice is honored immediately.
PokEYE sends crash reports and performance diagnostics through Sentry (device model, OS version, app version, error logs, and stack traces) to help us find and fix bugs. This is on by default but fully optional — you can turn it off at any time in Settings → Privacy, and your choice is honored immediately. Diagnostics never include card images, collection notes, or other personal content.
The card photos you scan stay on your device; we do not upload them. Settings includes an option to contribute scanned card images to help improve card recognition — it is off unless you choose it, and you can change your choice at any time. If you opt in, contributed images are uploaded to our private cloud storage (Amazon Web Services) under the license described in our Terms of Use, and are used only to improve card-recognition accuracy. We keep a de-identified copy that is not linked to your account; see Data retention below.
If you contact us, we collect the information you provide — such as your email address, message content, attachments, and support history — so we can help you.
If you join the waitlist on our website, we store the email address you enter so we can contact you about TestFlight access and availability, along with your IP address and browser identifier, which we keep solely to prevent abuse of the signup form. We don't use waitlist emails for anything else, and you can ask us to remove yours at any time via support@pocketeye.app.
Like most online services, our servers process IP addresses, technical request details, and timestamps in short-lived operational logs used to operate, secure, debug, and prevent abuse of the Service. These logs are rotated automatically and are not stored in our application database or tied to your collection.
We do not use your information for advertising, and we do not sell or rent it to anyone.
We share data only with the service providers needed to run the app, and only for the purposes above. Our providers process data to provide services to us and are not permitted to use it for their own advertising or cross-context tracking:
| Provider | Purpose | What it receives |
|---|---|---|
| Apple | Sign in with Apple; subscriptions, payments, and refunds | Account identifier; purchase and billing data Apple already controls |
| PostHog | Pseudonymous product analytics | Usage events + technical context (no card images, purchase prices, or notes) |
| Sentry | Crash & performance diagnostics (on by default; opt-out in Settings) | Diagnostic and crash data |
| Amazon Web Services | Server hosting, storage, and infrastructure | Server data; contributed card images if you opt in |
We may also disclose information if required by law, to protect the rights, safety, and security of our users and our service, or in connection with a merger, acquisition, financing, restructuring, or sale of assets. We do not sell personal information and do not share it for cross-context behavioral advertising.
PokEYE is operated from the United States, and data may be processed in the United States and other countries where our service providers operate. Where required, we rely on appropriate transfer safeguards, such as standard contractual clauses and data-processing agreements offered by our providers.
Where the GDPR or UK GDPR applies, our legal bases are: contract performance for your account, sync, subscription entitlements, and support; consent for contributed training images, and for product analytics and crash diagnostics where consent is required; legitimate interests for security, fraud prevention, service improvement (including product analytics and crash diagnostics), and basic operational logs, unless overridden by your rights; and legal obligations for tax, accounting, and compliance requests.
Deleting your PokEYE account does not cancel an Apple subscription; subscriptions must be cancelled through Apple.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; appeal a decision; or complain to a data-protection authority. We will not discriminate against you for exercising privacy rights. To exercise rights, use the in-app tools or contact support@pocketeye.app; we may need to verify your request.
We do not sell personal information, do not share personal information for cross-context behavioral advertising, and do not use personal information for targeted advertising. We do not knowingly sell or share the personal information of users under 16. If a state privacy law applies to you, we will honor the rights it provides as described in the section above.
PokEYE is not intended for children under 13, and children under 13 may not create an account or purchase PokEYE Pro. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without required parental consent, we will disable the account and delete the information as required by law. Parents or guardians may contact support@pocketeye.app to request deletion.
Data is transmitted over encrypted connections (HTTPS), and access to our systems is restricted. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard safeguards.
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app.
Questions about this policy or your data? Email support@pocketeye.app.