PocketDex (“we,” “our,” “us”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share information when you use PocketDex (the “Service”). By using PocketDex, you agree to the practices described in this policy. PocketDex operates from Toronto, Ontario, Canada.
Table of Contents
1.1 Account Information. When you register, we collect your email address, display name, and password (stored as a one-way hash — we never store your plaintext password).
1.2 Profile Information. Optionally: avatar photo, location (city/region — see Section 3), bio, and preferred currency.
1.3 Collection Data. The cards you add to your collection, their condition, purchase price, lot information, and associated metadata.
1.4 Scanner Data. Images captured during card scanning are processed to identify cards and are not retained beyond the session unless you explicitly save the scan result to your collection.
1.5 Marketplace Data. Listings you create, offers you make or receive, messages with other users, transaction history, and ratings.
1.6 Usage Analytics. App usage patterns, feature interactions, error reports, and performance data — collected in aggregate to improve the Service.
1.7 Device Information. Device type, operating system version, and app version for compatibility and support purposes.
1.8 Communications. Messages sent through the in-app messaging system between users, which are retained to support dispute resolution and moderation.
We use the information we collect to:
Location is entirely optional. You are not required to provide any location information to use PocketDex.
3.2 City-Level Only. We only store and display your location at the city or region level. We never collect, store, or transmit your precise GPS coordinates.
3.3 Opt-In. Location is collected only when you explicitly set it in Profile → Settings → Location.
3.4 Uses. Your location is used for local marketplace matching (showing listings nearby) and regional leaderboard filtering.
3.5 Removal. You can remove your location at any time from Profile → Settings → Location.
We retain your account data for as long as your account is active. Collection and portfolio data is retained for the life of your account and for 30 days after account deletion, after which it is permanently deleted. Marketplace transaction records may be retained for a longer period as required by applicable law. Anonymized, aggregate analytics data may be retained indefinitely. You can request deletion of your data at any time (see Section 6).
You have the right to:
To exercise these rights, contact privacy@pocketdex.app. We will respond within 30 days.
PocketDex is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information without appropriate consent, please contact privacy@pocketdex.app.
Canadian Privacy Law (PIPEDA)
As a Canadian company, PocketDex complies with the Personal Information Protection and Electronic Documents Act (PIPEDA).
This means we:
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:
Our lawful basis for processing your data is primarily contract performance (to provide the Service you have signed up for) and legitimate interests (analytics, security, fraud prevention). For GDPR-specific requests, contact privacy@pocketdex.app.
We use industry-standard security measures to protect your data, including TLS encryption for all data in transit, encryption at rest for sensitive data, and regular security reviews. We restrict access to personal data to employees and contractors who need it to operate and improve the Service. No method of transmission or storage is 100% secure — we cannot guarantee absolute security, but we are committed to maintaining strong protections and will notify you promptly in the event of a qualifying security breach as required by applicable law.
We may update this Privacy Policy from time to time to reflect changes in the Service, applicable law, or our practices. We will notify you of material changes by updating the “Last Updated” date and, where required by law or where changes are significant, by sending you an in-app notification or email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
For privacy concerns, questions, or to exercise your rights: