Privacy Policy
1. Who We Are
U.C.M — Universal Cards Market (the "App" and the website ucm-app.app) is operated by OnTracknO, based in Israel ("U.C.M", "we", "us"). We are the controller of the personal data described in this Privacy Policy, which applies to the App and to the website. You can contact us at support@ucm-app.app. We have not appointed a data protection officer because the law does not require one at our size.
2. Information We Collect
Account and profile. When you create an account we collect the information you provide directly: your email address (via email/password, Google sign-in, or Sign in with Apple — if you choose Apple's Hide My Email option, we receive only Apple's private relay address), a username, and your date of birth (collected when you first set up your profile, to check that you meet our minimum age — see Children and Teens below). We also collect your country (you can let the App detect it from your device's location, or simply choose it from a list) and your language. The App sends your device's time zone automatically so we can refresh your prices at your local midnight. Only if you choose to add them, we also store your first and last name, a profile picture, the game categories you collect, and whether you list items as a seller. Passwords are stored only as a salted hash by our authentication provider.
Your collection. When you save a card or product we store its catalogue details (name, set, number, condition, your self-assigned grade, and the price we show) and a link to its official picture. Your own scan photo stays on your device unless you choose to attach it to a scan report (see below). We also keep timestamped price snapshots for each item you save, so the App's price-history charts can show how an item's price, and your portfolio's value, changed over time, and the sales statistics you generate (for example profit on items you sell).
Scanning. Camera frames are processed on your device. On every scan attempt, whether or not you go on to save a card, we record technical diagnostic data tied to your account: the numerical confidence and similarity scores our card-identification system computed and, where applicable, which catalogue entry it matched. This data can include the text the scanner read from the card (such as a name or collector number) but does not include the scan photo; we use it only to monitor and improve scan accuracy and to apply the free-plan scan limit. To find the matching card, your phone also computes a short numeric fingerprint of the photo (a 64-bit perceptual hash) and sends only that fingerprint, never the photo, to our server. If you tap "Report an issue" on a scan result and submit it, we receive what you typed and the photo you just scanned (the report screen tells you the photo is included), stored in a private folder that only we can access. If a scan could not be identified you can also tap "Send photo": we then receive the photo you just scanned and, with it, the text the scanner read from it, the card the app suggested or you chose, and basic technical details (the App version and your device platform), also stored in a private folder that only we can access. The Send photo card tells you this before you tap, and nothing is sent unless you tap it.
Marketplace, friends and messages. If you use the Market Place or Friends features, we store your listings, friend connections, the messages you send to other Users (including any photos or files you choose to attach), and blocks or reports you create. If you choose to add Contact Methods to your profile (email, WhatsApp, Telegram, and/or Instagram), we store the values you enter and, where you complete our verification flow for email or Telegram, whether that method has been verified.
Subscriptions. If you subscribe to U.C.M Ultra, Apple, Google and our subscription provider RevenueCat share your subscription status and purchase metadata with us. RevenueCat identifies you only by your U.C.M account ID. We never receive or store your full payment card number.
Technical data. If the App crashes or hits an error we may receive a technical error report (the error message, App version, device platform and, if you are signed in, your account ID). On Android, Google Play Integrity checks that requests come from a genuine copy of the App; we keep the resulting verdict with your account for abuse protection. Our authentication provider keeps your IP address and device information with your login session. To protect sign-up and password reset from abuse we also process the IP address of those requests for up to one day. Our hosting and security providers process IP addresses in standard request logs, and the card-data and image services your phone contacts directly (see Who Receives Your Data) see your device's IP address, as with any web request.
3. Camera and Photo Library Access
The App requests camera access to let you scan physical trading cards, and photo library access to let you attach an existing photo instead of taking a new one. Camera frames are processed on-device for card detection and are not uploaded anywhere unless you explicitly attach a photo to a scan report, a message, or your profile.
4. Location Access
The App requests location access for one optional, User-initiated purpose only: to auto-detect the country shown on your profile from your device's approximate location. Location access is never required: if you decline the permission, or prefer not to share your location, you can choose your country from a list instead and every feature of the App works the same. Location is never read automatically or in the background — only at the moment you tap to detect your profile country — and only the resulting country name is kept. To turn coordinates into a country name, your device's operating system uses Google's or Apple's location service. The App does not let you send your location to other Users. We do not track, log, or store a history of your location over time.
5. Why We Use Your Information
We use your information to operate your account and Collection; power the Market Place (showing your listings to other Users, and other Users' listings to you); look up pricing for your cards and products from third-party pricing services using only the item's name, set, and identifying number, not your personal data; enable Friends and Messages between Users, including any Contact Methods you choose to share; process and validate subscription purchases; enforce your accepted Terms of Use; send local, on-device notifications you've enabled (such as a weekly scan-streak reminder); and improve the App's reliability and card-identification accuracy. We do not sell your personal information and do not share it for advertising.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: (a) to create and run your account, collection, listings, messages, friends, price tracking and subscription status we use performance of our contract with you (Art. 6(1)(b) GDPR); (b) to keep the App safe and working — rate limits, abuse prevention, app-integrity checks, crash and error reports, scan-accuracy diagnostics, handling reports and bans, and checking profile photos for objectionable content — we use our legitimate interests in running a safe and reliable service (Art. 6(1)(f)); (c) to check your date of birth against our minimum age we use our legitimate interest and our duty to protect children; (d) for detecting your country from your device location, and for the optional AI profile-photo check, we ask for your choice and you can change it at any time (Art. 6(1)(a)); and (e) to keep records needed for legal claims or legal obligations we use Art. 6(1)(c) and (f). Providing your email, username, date of birth and country is necessary to use the App; if you do not provide them you cannot create an account. You can object to processing based on legitimate interests at any time (see Your Rights).
6. Contact Methods and Sharing With Sellers
If you add a Contact Method (email, WhatsApp, Telegram, or Instagram) to your profile, that value is private by default — it is not shown on your public profile or to Users browsing the Market Place. It becomes visible only to a User with whom you have an active message thread, so the two of you can move a transaction to your preferred channel outside the App. Verifying an email or Telegram Contact Method (via a code we send to that email address, or via our Telegram bot) confirms only that you control that address or handle at the time of verification — it is not an identity check, and a "Verified" badge does not mean we have confirmed who you are. Once you share a Contact Method with another User, or receive one from them, any further communication conducted through that channel takes place entirely outside the App and is not monitored, stored, moderated, or controlled by us — see the Terms of Use for the corresponding disclaimer.
7. Sharing With Other Users
Other signed-in Users can see your username, profile picture, country, language, the game categories you collect, whether you are a seller, the date you joined, an "18+" badge if you are an adult, any weekly medals you have earned, and any cards you list on the Market Place. Your date of birth and your real first and last name are never shown to other Users. Messages you send — including any photos or files you attach — are visible to the recipient. Your Contact Methods are shared only as described in Contact Methods and Sharing With Sellers above. Friend requests, friendships, and blocks reflect your own choices and are only visible to the Users involved.
8. Weekly Leaderboard and Medals
Each week, the App calculates four rankings from your account's aggregate activity that week — cards added to your Collection, items listed on the Market Place, your portfolio's percentage gain, and the highest single card value you've added — and shows the Global top 3 performers in each category to every signed-in User, by username and profile picture only. No individual card, listing, price, or other personal or financial detail is shown as part of a ranking — only your relative placement. A Global top-3 placement is permanently recorded as a "medal" and continues to be shown on your own Profile and on your Market Place listings after the week it was earned, until your account is deleted, so other Users can see it when considering a purchase from you. If you do not want to appear on leaderboards, contact us and we will exclude your account.
9. Who Receives Your Data
Our service providers act on our instructions (processors): Supabase (account authentication, database storage, file storage, and the Market Place, Friends and Messages data, including message attachments; servers in Singapore); Resend (delivery of account emails such as email-verification and password-reset codes to the address you provide); RevenueCat (subscription management); Expo (delivery of App updates — when the App checks for an update, Expo's servers receive standard technical request data such as your IP address, device platform and App version, but no account information. Expo also uses this technical request data for its own aggregate statistics and service improvement, as an independent controller under its own privacy policy); Cloudflare (hosting, security and cookie-free statistics for our website; our weekly news page also loads its card pictures from Supabase's file storage, which receives your IP address like any image request); and Anthropic (an AI service used server-side (a) to write U.C.M's own weekly market news from our own price data, which involves none of your personal data, and (b) if you agree when you add a profile picture, to check that picture for objectionable content, which sends only the picture itself — never your name, email, or other account information).
These companies act under their own terms and privacy policies as independent controllers: Apple (Sign in with Apple, the App Store and subscriptions); Google (Google Sign-In, Google Play and subscriptions, Google Play Integrity, and Google Firebase on Android, which is part of the system notification framework and may create a random app-installation identifier but receives no personal content); and Telegram (if you choose to link a Telegram Contact Method, Telegram's Bot API is used to verify that you control the handle you enter).
Card data and prices. Your phone contacts card-database, price and image services directly: PriceCharting, TCGdex, YGOPRODeck, Scryfall, OPTCG API (optcgapi.com), Lorcast, PokéAPI, and the image servers that host official card art (for example images.pokemontcg.io, images.ygoprodeck.com, cards.scryfall.io, images.scrydex.com, PriceCharting's image storage on Google Cloud and TCGplayer's image network). They receive the card name, set or number being searched and, as with any web request, your device's IP address and standard request headers — not your account information. Some screens open links to outside websites (for example PriceCharting price history or eBay searches) in your browser or an in-app browser; those sites then apply their own policies.
We share with each provider only the data it needs to perform its service, and we require each provider to give your data the same or equal protection as set out in this policy. We do not sell your personal information.
10. International Transfers
Our main database and files are hosted by Supabase in Singapore. Some providers are in the United States or elsewhere. Where data leaves the European Economic Area or the United Kingdom we rely on an adequacy decision (for example for Israel, where we are based, or the provider's participation in the EU-US Data Privacy Framework) or on Standard Contractual Clauses in the provider's data processing agreement. You can ask us for information about these safeguards at support@ucm-app.app.
11. Data Retention and Deletion
How long we keep data. Account, collection, listings, friendships, messages and Contact Methods: until you delete them or your account. Scan diagnostics (the confidence scores and match data described above) and the scan counter: 90 days. Scan reports and their photos: until you delete your account. Crash and error reports: 60 days. Google Play Integrity verdicts: 30 days. Profile-photo check log: 90 days. Rate-limit records: 1 day. Free-period record: if you received a free Ultra period, we keep a one-way hash of your email address (not the address itself) for 12 months after that free period ends, also after you delete your account, so that each person receives the free period only once; our legitimate interest is preventing abuse. Verification and reset codes: deleted within a day after they expire. Login-session records, including IP address and device information: while the session exists and until your account is deleted. Weekly medals: until your account is deleted. If you signed up to test U.C.M early, we keep your name (if you gave it), email and platform to contact you about testing and to apply your free Ultra period, until you ask us to delete them (use the contact address below). Support emails: as long as needed to deal with your request. Deleted data can remain in encrypted backups for up to 7 days before they are overwritten. Providers keep their own logs for the periods stated in their policies.
Deleting your data. You may delete individual cards, listings, friendships, conversations, or Contact Methods at any time from within the App. To delete your entire account, use Profile > Delete Account in the App: you can choose Delete now (your account is erased right away and cannot be restored) or the standard option, which immediately takes down your listings and your leaderboard presence, signs you out, and schedules your account for deletion. If you sign back in within 30 days, your account is fully restored exactly as it was. If you do not sign back in, your profile, collection, listings, messages (including the messages you sent, which also disappear from other people's chats), uploaded files, Contact Methods, friendships and the diagnostic records linked to your account are permanently erased 30 days after you requested deletion, and your profile stops being visible to others. Reports you filed, or that were filed about you, are deleted together with the accounts involved, except for a minimal record (the reason, status and date, with a coded identifier instead of any profile details or message content) that we keep for 12 months to stop repeat abuse and to handle legal claims. If you signed in with Apple, deleting your account also revokes U.C.M's access to your Apple ID sign-in. Your subscriber record with RevenueCat is deleted automatically when your account is deleted, and your payment records are held by Apple or Google, not by us. Deleting your account does not cancel an App Store or Google Play subscription — cancel it in your Apple ID or Google Play account settings. You can also request deletion by emailing support@ucm-app.app (see the deletion page at ucm-app.app/delete-account).
12. Children and Teens
U.C.M is for people aged 13 and over. The App asks for your date of birth when you first set up your profile; if it shows you are under 13, the account is not allowed and is deleted straight away. The App is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has circumvented this age check or otherwise provided us with personal information, contact us at support@ucm-app.app and we will delete the associated account and data. In some countries a person must be older than 13 (up to 16) before an online service may rely on their consent, or before a contract with them is binding without a parent's permission: if you are under 18, please make sure a parent or guardian is happy for you to use the App. Other Users can see an "18+" badge only if you are an adult; your date of birth is never shown. Once your date of birth is set it cannot be changed in the App; if it is wrong, contact us at support@ucm-app.app. An adult cannot start a conversation with an account under 18, although an under-18 account can write first and the adult can then reply. Everyone can block and report other Users.
13. Reporting Violations and Content Moderation
If you encounter a listing, message, or User that violates our Terms of Use or applicable law, you can report it directly within the App, or by emailing us at support@ucm-app.app. We review reports and, where warranted, remove the reported content or restrict the reported account. To keep objectionable content out of the App, usernames and first/last names are automatically checked against a list of offensive terms and rejected if they match. If you agree when adding a profile picture, the picture is sent to Anthropic's AI service shortly after you upload it and is removed if it shows nudity, sexual content, violence, hate or other objectionable material; if the check cannot run, the picture stays visible until it is reported or a later check succeeds. This automated removal is the only automated action that affects your account, and you can ask a person to review it at support@ucm-app.app. You can also block any User at any time. We have zero tolerance for objectionable content or abusive Users. See the Terms of Use for more detail, including our process for copyright complaints.
14. Data Security
We use industry-standard security measures, including encrypted transport (HTTPS), access controls on every database table, and private storage for messages and scan-report photos, to protect your information. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security. If a personal-data breach affects you and the law requires it, we will tell you and the relevant authorities.
15. Your Rights
You can ask us at any time to give you a copy of your data (access and portability), correct it, delete it, restrict or stop certain processing (objection), or withdraw a choice you made (such as the AI profile-photo check or location detection). We answer within 30 days (one month under EU/UK law; we may extend once for complex requests). We may ask you to reply from your account email, or to confirm your username, to check that it is you. Most things you can do yourself in the App: edit your profile, delete cards, listings, conversations and Contact Methods, and delete your account.
If you are in the EU/EEA you may complain to your local data protection authority; in the UK, to the Information Commissioner's Office; in Israel, to the Privacy Protection Authority; in the United States, to your state attorney general or the FTC. Residents of California and other US states have equivalent rights to know, delete and correct. We do not sell or share personal information for advertising, so there is no opt-out link, and we treat browser Global Privacy Control signals as a request not to sell or share (we do neither). We do not make decisions with legal effect about you by automated means.
16. Website Visitors
This policy also covers the website ucm-app.app. When you visit it, our host Cloudflare processes your IP address and request data to deliver the site and keep it secure, and Cloudflare Web Analytics counts visits without cookies and without tracking you across sites. The Videos page loads a YouTube player (youtube-nocookie.com) only after you click a video; YouTube/Google then receives your IP address and may store information on your device under its own policy. The free card scanner at ucm-app.app/scan reads the photo you choose inside your own browser: the photo is not uploaded to us or anyone else, and only this site's own files (a list of card names and the text-reading engine) are downloaded; your browser may keep the engine's language file in its local storage so it loads faster next time. The website sets no cookies of its own.
17. Changes to This Policy
If we make a material change to this Privacy Policy we tell you in the App or by email at least 30 days before it applies, may ask you to confirm that you have read the new version, and the new version carries a new date at the top. Earlier versions are available on request. If you do not agree to a change, you can delete your account.
18. Contact Us
For any privacy question, data access or deletion request, content report, or copyright complaint, contact OnTracknO at support@ucm-app.app. You can also delete your account directly from Profile > Delete Account, which schedules your profile, collection, listings, messages, Contact Methods, and friendships for permanent deletion 30 days later — signing back in before then fully restores your account.