Privacy Policy
Sleeved! Privacy Policy
Sleeved! (the “App”) is a trading card scanner, price tracker and AI grading app developed and published by Aziz Gündoğdu (the “Developer”, “we”, “us”). This Privacy Policy was executed by and between the Developer as the “Data Controller” and you. It explains our data protection policy and describes the types of information we may process when you use the App and the website sleevedapp.ai. “Personal data” refers to any information relating to an identified or identifiable natural person. “Processing” means any operation performed on personal data, such as collection, recording, storage, use, and disclosure. This Privacy Policy applies to all users who access the App.
Information We Process
When you use the App, we collect the following categories of information:
1. Personal Data You Provide
- Account information. You can use the App anonymously, tied only to your device, or sign in with Apple. When you sign in with Apple we receive the identifier Apple assigns to you and, if you choose to share it, your name and email address (or an Apple private relay address).
- Collection data. The cards you scan or add, quantities, conditions, notes, grades, purchase prices and any lists or portfolios you build.
- Card images. Photos you take or import to identify or grade a card (see “Card Images” below).
- Contact information and messages you send us (e.g., support emails, feedback).
2. Automatically Collected Data
- Device information (e.g., device identifiers, operating system, model, language, time zone).
- Usage data (e.g., screens viewed, scans performed, features used, session length).
- Approximate location derived from your IP address.
- Purchase and subscription status (via the App Store and our subscription provider).
- Crash reports and diagnostic logs.
Card Images
The App uses your camera and, if you choose, your photo library to capture images of trading cards. Card detection runs on your device. To identify a card and fetch its prices, a cropped image of the card (or a mathematical fingerprint derived from it) is sent to our servers. To grade a card, images of its front and back are sent to our servers and may be processed by artificial-intelligence models hosted by our cloud and AI service providers.
Card images are intended to depict trading cards only. The App does not collect, store or use biometric identifiers or facial recognition data, and does not identify or authenticate people. Please avoid including people or personal documents in your card photos.
We retain card images only as long as necessary to provide the scan or grading result and to improve recognition accuracy, and delete them within 30 days unless you ask us to delete them earlier. Recognition fingerprints stored with your collection are kept for as long as your collection exists. Our service providers process images on our behalf, do not use them for their own purposes, and do not use them to train their models unless explicitly disclosed and consented to.
How We Use Your Data
- To identify cards, show market prices and produce AI condition grades.
- To store and sync your collection across sessions and devices.
- To manage your account, subscription and free scan allowance.
- To respond to your support requests and feedback.
- To measure, secure, debug and improve the App and our recognition models.
- To measure the effectiveness of our own marketing campaigns.
- To comply with legal obligations.
User Rights
You have the following rights regarding your personal data:
- Access: Request information on whether your personal data is being processed.
- Rectification: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Restriction: Request restriction of processing activities.
- Portability: Request transfer of your personal data to another service provider.
- Objection: Object to the processing of your personal data.
- Complaint: Lodge a complaint with a data protection authority.
You can delete your account and all associated collection data at any time from the App’s settings. You can also export your collection as a CSV file from the App. To exercise any other right, contact us through the support link on the App’s App Store page or the contact option in the App’s settings. We will respond within thirty days.
Legal Basis for Processing
Our legal bases for processing your personal data include:
- Your explicit consent.
- Performance of a contract (providing the App to you).
- Compliance with legal obligations.
- Protection of vital interests.
- Legitimate interests pursued by the Developer.
Data Sharing
We may share your personal data with third parties for the following purposes:
- Authentication and payments: Apple (Sign in with Apple, App Store, in-app purchases).
- Subscription management: RevenueCat.
- Analytics and attribution: Adjust, the Developer SDK, Google (Google Ads on-device conversion measurement).
- Cloud computing and storage: Amazon Web Services.
- AI model providers used for card recognition and grading, such as Google (Gemini) and Anthropic (Claude).
- Card catalogue and market price data providers.
For more information, refer to the privacy policies of our service providers.
International Data Transfers
Your personal data may be transferred to countries outside your jurisdiction, including the European Union and the United States, where our servers and service providers are located. We ensure that appropriate safeguards are in place to protect your data during such transfers.
Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Your collection data is kept for as long as your account exists and is deleted when you delete your account. Card images are deleted within 30 days. Other data will be deleted or anonymized when no longer needed and, at the latest, 2 years after the relevant record was created.
Security Measures
We implement industry-standard security measures to protect your personal data from unauthorized access, disclosure, or destruction, including encryption in transit. Despite these measures, no method of transmission over the internet is 100% secure.
Children’s Privacy
We do not knowingly collect personal data from children under 16 years of age. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.
Changes to the Privacy Policy
We may update this Privacy Policy periodically. Changes will be posted on this page and, where appropriate, notified to you in the App or via email. Please review this policy regularly for updates.
Contact Information
If you have any questions about this Privacy Policy, please contact us through the support link on the App’s App Store page or the contact option in the App’s settings.
Opt-Out Options
To opt out of tracking and attribution:
- On iOS, decline the App’s tracking prompt, or go to Settings > Privacy & Security > Tracking and turn off “Allow Apps to Request to Track”.
- To turn off personalised ads across apps, go to Settings > Privacy & Security > Apple Advertising.
The Purposes of Collecting and Processing Personal Data
The Developer collects your personal data automatically whenever you download the App to your device or use the App, whenever you send us your feedback or convey your information or support requests directly to the Developer, or interact with the Developer advertisements presented on other platforms. In general, the information we collect about you relates to your device and helps us to identify your device. The Developer also collects data from the Apple App Store (the “Platform”) and our business partners. The Developer might collect your personal information (user name, name if provided, IP address, the date and time of access, the screens accessed while in the App) and the activities taking place in the App to provide better service to you, make suggestions, improve its services, and facilitate the use of the App related to your interests and preferences, within the framework of applicable legislation.
Personal Data That is Collected While You Are Using the App
When you download and/or use the App via the Platform, the Developer collects certain personal data from you and/or your device. In this regard, the Developer may collect your advertising identifier (IDFA, only if you allow tracking), other device identifiers (IDFV), operating system, model, producer information, hardware type, operating system version, memory usage, country, time zone and preferred language information, internet protocol (IP) address, location information according to your IP address, operator information, data regarding your in-app interactions (the time you spent using the App, the scans you performed, your in-app purchases) and the time of installation and first opening of the App.
The advertising identifier (IDFA) is a unique identifier for mobile devices that advertisers use for attribution and personalised advertising and that is consistent across mobile applications, allowing cross-app tracking. We only access it if you allow tracking when the App asks, and you may withdraw this at any time from the privacy settings of your device.
Payments for in-app purchases and subscriptions are carried out by the Platform. The Developer does not collect personal data such as your name, surname, credit card number and e-mail address that you share with the Platform for the payment; only the purchase status needed to unlock what you bought is shared with us and our subscription provider.
Personal Data That is Collected When You Contact Us
When you contact us, we may ask for contact information (e.g., email) when you request information about the App, request technical support, or contact us for any other reason. Your contact information will be processed to fulfil your requests and communicate with you.
Data That is Collected by Third Parties
If the personal data provided to the Developer by you is requested by official institutions/organizations as necessitated by the law, the data may be transmitted to the relevant authorities and courts if requested by the courts.
Our business partners or service providers listed under “Data Sharing” can use server log files, software development kits or other tracking tools in the App. They can collect data regarding your IP address, your advertising identifier (IDFA, if you allow tracking), other device identifiers (IDFV), your mobile device’s type, operating system, version, model, hardware type and other device identifiers that are automatically determined for your device when you connect to the internet. You may access the privacy policies of these third parties from their websites.
Children’s Data
The Developer never knowingly or willingly collects any personal data concerning children under 16 years of age.
The Legal Grounds of Processing Your Personal Data
The legal grounds that the Developer relies upon while processing your personal data are the following:
- Explicit consent and/or your request.
- In cases where it is necessary to disclose such information in accordance with applicable laws or regulations or a court judgment or administrative order issued.
- Being necessary for the establishment and execution of an agreement.
- Being necessary for the Developer to fulfil its legal obligations as a data controller.
- Being necessary for the establishment, exercise, and protection of any right.
- Without prejudice to your fundamental rights and freedoms, being compulsory for the Developer’s legitimate interests.
In data processing activities where your personal data is processed based on explicit consent, you have the right to withdraw your consent at any time.
the Developer’s legitimate interest in processing your device and usage data is to provide better service to you, improve card recognition and grading accuracy, improve and update the App, and facilitate the use of the App related to your interests and preferences, within the framework of applicable legislation.
The Developer undertakes to keep your data and any confidential information strictly private and confidential, to regard it as an obligation to keep confidentiality, to take all measures and act with due diligence to prevent all or any part of your information from entering the public domain or being subject to unauthorized use, and to take measures to prevent the confidential information from disclosure to any third party. If, despite all necessary data security measures taken by the Developer, the confidential information is damaged as a result of attacks on the system or captured by third parties, the Developer shall have no responsibility in that respect to the extent permitted by law.
The Transfer of Your Personal Data
Your personal data may be transferred to our business partners and service providers located abroad for the purposes of providing and improving the App, identifying and grading cards, managing subscriptions, measuring the effectiveness of our own advertising, and carrying out measurements and analysis regarding your use of the App. In case a public institution is authorized to request personal data by law, your personal data can be transferred to such authorized public institution in accordance with the applicable personal data protection legislation. Requests from judicial authorities will also be fulfilled in accordance with the applicable legislation.
Your personal data may be transferred to the business partners and service providers stated below:
Authentication, payments and subscriptions
- Apple Inc. (Sign in with Apple, App Store, StoreKit)
- RevenueCat, Inc.
Analytics and attribution
- Adjust GmbH
- The Developer SDK (operated by the Developer)
- Google LLC (Google Ads on-device conversion measurement)
Cloud computing and AI services
- Amazon Web Services, Inc.
- Google LLC (Gemini models)
- Anthropic, PBC (Claude models)
Your Rights Regarding the Protection of Your Personal Data
According to the relevant legislation, you have the right to:
- Learn whether or not your personal data is being processed.
- Request information as to processing if it has been processed.
- Learn the purpose of personal data processing and whether the personal data is used appropriately in line with such purposes.
- Know the third parties to which your personal data is transferred domestically or abroad.
- Request correction if your personal data is incompletely or incorrectly processed.
- Request deletion or destruction of your personal data.
- Request the transmission of your correction, deletion, and destruction requests to third parties to whom your personal data has been transferred.
- Object to any consequence that occurred against you by analysing your processed data exclusively through automated systems.
- Request compensation in case you incur any damage due to the unlawful processing of personal data.
- Request restriction of data processing activities.
- Request data portability.
- Lodge a complaint with the relevant data protection authority and claim damages in case of impairment because your personal data is processed in violation of the relevant legislation.
You can submit all your claims and questions with respect to such rights through the support link on the App’s App Store page or the contact option in the App’s settings. Your requests will be answered as soon as possible and within thirty days at the latest.