Grail
Privacy Policy
Last updated: 11 September 2026
Grail is a baseball card scanner. You point your camera at a card and the app tells you what it is and what it is worth. This page explains exactly what data that involves.
The short version. Grail has no accounts. We never ask for your name, email or phone number. Your device is identified by a random identifier, nothing more. Card photos are sent to our processors to be recognised and priced. We do not sell your data, and we do not track you across other apps or websites.
1. Who we are
Grail is operated by Emir Yavcin. For anything in this policy — including a request to delete your data — contact emiryavcin20@gmail.com.
2. What we collect
Device identifier
A per-installation identifier generated on your device. It is how your scan allowance and your collection are recognised when you reopen the app. It is not your name, your Apple ID, or your advertising identifier, and it is not linked to any of them. The app also creates an anonymous sign-in with Firebase Authentication, which produces a second random identifier used only to authorise requests to our own server.
Card photos
When you scan a card, the photo is sent to our server and on to the recognition and pricing providers listed in section 4. When you save a card to your collection, that photo is also stored so the card can show its picture later. Photos you take but do not save are not retained by us after the scan completes.
Your collection
For each card you save: player, year, set, card number, variant, estimated value range, condition estimate, grade range, match confidence, and the date you added it.
Usage and diagnostics
Through Google Analytics for Firebase: screens viewed, scans started and completed, cards added and removed, subscription screen views and purchase outcomes, whether a subscription is active, how many free scans remain, plus standard technical data such as app version, device model, operating system, and country/region derived from your device settings. Your device's country and language are also stored alongside your scan allowance.
Subscription status
Whether you have an active subscription, which plan, and when it renews — supplied by RevenueCat and Apple. Payment details never reach us. Your card number and billing address are handled entirely by Apple.
Marketing attribution (iOS)
If you arrived via an Apple Search Ads campaign, the app collects Apple's attribution token so we can tell which campaign led to an install. This is Apple's AdServices framework and does not identify you personally.
Stored on your device only
Whether you have completed onboarding, your currency preference, scan settings, and cached exchange rates. These never leave your device.
3. What we do not collect
- No name, email address, phone number or postal address.
- No contacts, calendar, microphone or precise location.
- No advertising identifier. On Android the advertising ID permission is explicitly blocked in the app.
- No tracking of you across other companies' apps or websites.
- We do not sell or rent your data to anyone.
4. Why we process it, and on what basis
| Purpose | Data | Legal basis (UK/EU) |
|---|---|---|
| Recognise and price a card | Card photo | Performance of a contract |
| Keep your collection | Card details, photos, device identifier | Performance of a contract |
| Enforce free-scan limits | Device identifier, scan counts | Performance of a contract |
| Manage subscriptions | Subscription status, device identifier | Performance of a contract |
| Improve the app | Usage and diagnostics | Legitimate interests |
| Measure ad campaigns | Apple attribution token | Legitimate interests |
5. Who else processes your data
We use the following providers. Each acts on our instructions and may only use the data to provide their service to us.
| Provider | What they handle | Where |
|---|---|---|
| Google Firebase | Anonymous sign-in, database, photo storage, analytics, configuration | EU / USA |
| Amazon Web Services | Our scan server | EU (Frankfurt) |
| CardSight AI | Card recognition and market sales data | USA |
| OpenAI | Condition scoring; card recognition when CardSight is unavailable | USA |
| RevenueCat | Subscription management | USA |
| Apple | Payments, subscriptions, app distribution | Global |
Exchange rates are fetched from a public rates service. That request carries no data about you.
6. International transfers
Some providers above are based in the United States, so your data may be transferred outside the UK/EEA. Where that happens we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard offered by the provider.
7. How long we keep it
- Cards you save — until you delete them or ask us to delete your data.
- Scan photos you do not save — not retained by us once the scan finishes. Our providers may hold them briefly under their own retention terms.
- Scan allowance and counters — until you ask us to delete your data.
- Analytics — retained by Google for the period set in our Firebase project.
- On-device settings — removed when you delete the app.
8. Your rights
Depending on where you live you may have the right to access, correct, delete, or export your data, to object to or restrict processing, and to complain to your data protection authority.
Because Grail has no accounts, we identify your data by its device identifier. To exercise any right, email emiryavcin20@gmail.com from the device in question and tell us you want your data removed; we will explain the one step needed to confirm which installation is yours. You can delete individual cards at any time inside the app.
9. Camera and photo permissions
Grail asks for camera access to scan a card, and for photo library access if you want to pick an existing photo instead. Both can be refused or withdrawn in your device settings; the app will simply not be able to scan. We only read the specific photo you choose.
10. Children
Grail is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has used the app and provided data, contact us and we will delete it.
11. Security
Requests to our server require a valid signed token; requests without one are rejected. Your collection is readable only by your own installation. All traffic is encrypted in transit. No system is perfectly secure, but we do not store anything that would let someone identify you by name.
12. Changes to this policy
If we change how we handle your data we will update this page and its date. Material changes will be announced in the app.