Privacy Policy

Last Updated: September 5, 2026

This Privacy Policy (the "Policy") explains how Chasing Tens LLC, a Florida limited liability company ("Chasing Tens," "we," "us," "our"), collects, uses, shares, and protects information when you use the Chasing Tens mobile application (the "App"). For the personal data described in this Policy, Chasing Tens LLC is the data controller: we decide why and how it is processed.

Definitions

"Personal data" means any information relating to an identified or identifiable natural person — someone who can be identified, directly or indirectly, by reference to an identifier such as a name, an email address, an account or device identifier, or an online identifier.
"Controller" means the person or organization that, alone or jointly with others, determines the purposes and means of processing personal data. For the App, that is Chasing Tens LLC.
"Processing" means any operation performed on personal data, such as collecting, storing, using, sharing, or deleting it.
"Service" means the App together with the accounts, subscriptions, collection tools, scanning and grading features, and related communications we provide through it.
"Terms" means our Terms of Service, the agreement that governs your access to and use of the Service.
"You" means the person who uses the App, whether or not you hold a paid subscription.

1. Information We Collect

1.1 Account Information

When you register, we collect:

Email address
Display name (optional)
Avatar image (optional)

1.2 Card Images and Scan Data

When you use the scanning feature, we collect:

Photos of trading cards you capture or upload
AI-generated grade predictions, confidence scores, and defect analysis for each scan
Card metadata you provide (name, set, card number)
If you use the "Submit Grade Result" feature: the actual grade you received from a professional grading company (PSA, BGS, CGC, SGC, etc.)

1.3 Usage and Device Information

We automatically collect:

App usage events (e.g., scans started/completed, cards saved, subscription changes)
Device type, operating system version, and app version
Crash reports and error logs

1.4 Subscription and Payment Information

Subscription payments are processed by Apple App Store, Google Play, and RevenueCat. We do not collect or store your credit card number or full payment details. We receive subscription status (active, cancelled, expired) and a customer identifier from RevenueCat.

2. How We Use Your Information

We use the information we collect to:

Provide grade predictions and generate your TENS Report
Maintain your card collection and portfolio
Process and manage your subscription
Send service-related communications (e.g., scan limit notices, subscription renewal reminders)
Analyze app usage to improve features and fix bugs
Improve the accuracy of our on-device AI grading model (see Section 3 below)

2.1 Legal Bases for Processing

We process your personal data only where we have a lawful basis to do so:

To perform our contract with you — creating and securing your account, maintaining your collection, generating your TENS Reports, managing your subscription, and sending service messages. This includes the contribution of scan data to model training, which is a condition of the scanning features under the Terms and Section 3.
For our legitimate interests, where those interests are not overridden by your data protection rights — understanding how the App is used so we can improve it, keeping the Service secure, and preventing fraud and abuse.
With your consent — for optional data you choose to provide, such as a display name or avatar, and for any processing where we ask you first. Where we rely on consent, you may withdraw it at any time by removing the data in the App or contacting us; withdrawal does not affect processing that took place before it.
To comply with a legal obligation, such as responding to a lawful request or retaining records we are required to keep.

3. AI Model Training — How Your Scans Improve Chasing Tens

Chasing Tens uses an on-device AI model to grade your cards. We do not send your images to any third-party AI provider (such as OpenAI) — all grading happens locally on your device.

Improving that model is a core part of the Service itself. When you use the scanning features, the following is collected and becomes part of our proprietary model-training corpus:

The image of the card you scanned
The grade and subgrades our model predicted
If you submit a real grading result via "Submit Grade Result," the actual grade you received

This is gold-standard training data: it lets us compare our predictions to real-world outcomes and retrain the model to be more accurate for every collector. Improved models are distributed to all users as a downloadable update — they never require an app store update.

Please understand this before using the App:

Contribution of scan data to model training is a mandatory part of the scanning features and cannot be disabled or opted out of. If you do not agree, do not use the App's scanning features.
Once collected, training data is de-identified — disassociated from your account and identity — and becomes part of Chasing Tens' proprietary training corpus. De-identified training data is not subject to deletion requests and is retained after account deletion (see Section 7).
Card images are photographs of trading cards, not of people. Do not include faces, personal items, or documents in your scans.

Training data is stored in a private, access-controlled storage bucket. It is never made public, never shared with third-party AI providers, and never sold.

4. Third-Party Service Providers

We share information with the following service providers, each of which processes data on our behalf under their own privacy and security obligations:

Supabase — authentication, database, and file storage. Receives account info, card images, and scan data.
RevenueCat — subscription management. Receives subscription status and an anonymized customer ID.
First-party analytics (no third party) — product usage events are recorded in our own database. They are not sent to any third-party analytics provider, and never include card images.
Sentry — error monitoring and crash reporting. Receives crash logs and device info.
Cloudflare — hosting and security for our website (chasingtens.app), plus Cloudflare Web Analytics for aggregate visitor statistics on that website. Web Analytics uses no cookies, does not fingerprint visitors, and does not track anyone across other sites. This applies to the website only — not to the App.
Apple App Store / Google Play — payment processing, handled entirely by Apple/Google under their own privacy policies.

We do not sell your personal data. Not to advertisers, not to data brokers, not to anyone — ever. The sharing above exists solely so these processors can run the Service on our behalf.

5. Data Retention

Account and collection data is retained as long as your account is active.
If you delete your account, your profile, cards, and scan reports are deleted within 30 days, except where retained for legal, security, or fraud-prevention purposes.
Training data collected under Section 3 is retained in de-identified form after account deletion as part of our proprietary training corpus, used solely for model development (see Section 7).
When we no longer have a need to retain personal data, we delete it or reduce it to aggregate, non-identifying form. Where immediate deletion is not possible — for example, data held in encrypted backups until they age out — we securely store it, isolate it from any further processing, and delete it when deletion becomes possible.

6. Your Rights

We do not sell your personal data — there is no "sale" to opt out of. This applies across every document we publish and every jurisdiction we operate in.

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and associated personal data
Export your collection data
Object to or restrict certain processing (EU/UK residents under GDPR)
Know and delete personal information (California residents under CCPA)

Deletion rights apply to your personal data (Section 5). De-identified training data is not associated with you and is retained per Sections 3 and 7.

To exercise these rights, contact us at support@chasingtens.app.

7. Training Data Ownership and Retention

The de-identified training corpus described in Section 3 is owned by Chasing Tens. Because it is disassociated from user identities and is fundamental to how the Service improves for every collector, it is excluded from deletion and opt-out requests and survives account deletion. Deleting your account removes your profile, your collection, your scan reports, and the images stored under your account — the de-identified copies in the training corpus remain.

8. Children's Privacy

Chasing Tens is not directed to children under 13, and children under 13 may not create accounts. We do not knowingly collect personal information directly from children under 13. A parent or legal guardian may let a younger child use the App under the parent's own account and supervision; in that case the account, the email address, and any subscription belong to the parent, and the personal information we hold is the parent's. If you believe a child has created an account or provided us with personal information directly, contact us at support@chasingtens.app and we will delete it. Users under 18 should review this Policy with a parent or guardian, particularly regarding paid subscriptions.

9. Data Security

We use industry-standard security measures, including encrypted data transmission, Row Level Security (RLS) on all database tables, and private (non-public) storage buckets for all images. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Our service providers may process data in the United States or other countries. If you are located outside the United States, your information may be transferred to and processed in a country with different data protection laws than your own.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via in-app notice or email prior to taking effect. Continued use of the App after changes take effect constitutes acceptance.

12. Contact Us

Questions about this Privacy Policy can be directed to:

Chasing Tens LLC

support@chasingtens.app