Privacy Policy

Summary

Foily has no account system, advertising, analytics, or cross-app tracking. Your saved card collection remains on your device. A card photo you choose is sent to third-party services only when you ask Foily to identify it.

Card identification

When you identify a card, the selected photo and requested display currency are transmitted over an encrypted connection to our Cloudflare Worker. The Worker sends the photo to the Google Gemini API to produce card-identification details. Our Worker processes the request in memory and does not persist the photo or the identification result in a database.

Google may retain API inputs and outputs for a limited period, including up to 55 days for abuse monitoring, safety, and legal obligations, under the Gemini API terms. Inputs flagged by automated safety systems may be reviewed by authorized Google personnel. Do not submit photos containing sensitive personal information.

Market data and currency

After identification, Foily may send factual card details such as game, set, name, and collector number to a market-data provider to locate a current value. The card photo is not sent to that market-data provider. Foily uses European Central Bank reference rates to convert supported currencies.

Purchases

Apple processes payments. RevenueCat manages subscription entitlement status and processes non-linked purchase history for app functionality. Foily does not receive your payment-card details and does not use purchase data for advertising or tracking.

Local data

Saved photos, card records, quantities, selected conditions, and display-currency preferences are stored locally on your device. You can delete individual cards or clear the entire collection from Foily. Uninstalling the app removes its local data, subject to standard device backup behavior controlled by Apple.

Infrastructure and security

Cloudflare processes technical request information, including an IP address, to deliver and rate-limit the identification service and to protect it from abuse. Service providers may retain limited operational and security records under their own policies. Foily does not sell personal information or use it for targeted ads.

Children

Foily is intended for a general collector audience and is not directed to children. We do not knowingly collect personal information from children.

Changes and contact

We may update this policy as Foily or its service providers change. The effective date above will identify the latest version. For privacy questions or deletion requests concerning server-side operational data, email rros00+identifiers@gmail.com.