Privacy Policy
Sleeved! Privacy Policy
Sleeved! (the “App”) is a trading card scanner, price tracker and AI grading app developed and published by Aziz Gündoğdu (the “Developer”, “we”, “us”). This Privacy Policy was executed by and between the Developer as the “Data Controller” and you. It explains our data protection policy and describes the types of information we may process when you use the App and the website sleevedapp.ai. “Personal data” refers to any information relating to an identified or identifiable natural person. “Processing” means any operation performed on personal data, such as collection, recording, storage, use, and disclosure. This Privacy Policy applies to all users who access the App.
Information We Process
When you use the App, we collect the following categories of information:
1. Personal Data You Provide
- Account information. The App does not ask you to create an account or sign in. On first launch it creates an anonymous account identified by a random identifier derived from your device’s vendor identifier (IDFV). We never receive your name, email address or phone number unless you send them to us yourself.
- Binder data. The cards you identify or add, how many copies you hold and in which finish, when you added them, and the condition reports you request. The price you record as paid for a card stays on your device and is never uploaded.
- Card images. Photos you take or import to identify or grade a card (see “Card Images” below).
- Contact information and messages you send us (e.g., support emails, feedback).
2. Automatically Collected Data
- Your anonymous account identifier and the device’s vendor identifier (IDFV), used to recognise your account and to apply the daily allowance.
- Server request logs: the time of each request, the feature used (identify, grade, sync), your IP address, and the response status. We use them to run, secure and debug the service and to count requests against the daily allowance.
- Crash reports, only if you have opted in to sharing them with app developers in your iOS settings; they reach us through Apple and contain no account data.
The App contains no analytics, attribution or advertising software, does not read the advertising identifier (IDFA), and does not track you across apps or websites. It therefore never shows the iOS “Allow tracking” prompt.
Card Images
The App uses your camera and, if you choose, your photo library to capture images of trading cards. Nothing is analysed on your device. To identify a card and fetch its prices, the photo you took is sent to our servers. To grade a card, photos of its front and back are sent to our servers and may be processed by artificial-intelligence models hosted by our cloud and AI service providers.
Card images are intended to depict trading cards only. The App does not collect, store or use biometric identifiers or facial recognition data, and does not identify or authenticate people. Please avoid including people or personal documents in your card photos.
We retain card images only as long as necessary to provide the identification or grading result and to improve recognition accuracy, and delete them within 30 days unless you ask us to delete them earlier. Our service providers process images on our behalf, do not use them for their own purposes, and do not use them to train their models unless explicitly disclosed and consented to.
How We Use Your Data
- To identify cards, show market prices and produce AI condition grades.
- To store your binder so it can be restored if you reinstall the App.
- To apply the daily allowance for identification and grading.
- To respond to your support requests and feedback.
- To secure, debug and improve the App and our recognition models.
- To comply with legal obligations.
User Rights
You have the following rights regarding your personal data:
- Access: Request information on whether your personal data is being processed.
- Rectification: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Restriction: Request restriction of processing activities.
- Portability: Request transfer of your personal data to another service provider.
- Objection: Object to the processing of your personal data.
- Complaint: Lodge a complaint with a data protection authority.
You can export your binder as a CSV file from the App’s More tab at any time. To have your account and all server-side binder data deleted, or to exercise any other right, contact us through the support link on the App’s App Store page and quote the account id shown in the App’s More tab. We will respond within thirty days.
Legal Basis for Processing
Our legal bases for processing your personal data include:
- Your explicit consent.
- Performance of a contract (providing the App to you).
- Compliance with legal obligations.
- Protection of vital interests.
- Legitimate interests pursued by the Developer.
Data Sharing
We may share your personal data with third parties for the following purposes:
- Cloud computing and storage: Amazon Web Services.
- AI model providers used for card recognition and grading, such as Google (Gemini) and Anthropic (Claude).
- Card catalogue and market price data providers.
For more information, refer to the privacy policies of our service providers.
International Data Transfers
Your personal data may be transferred to countries outside your jurisdiction, including the European Union and the United States, where our servers and service providers are located. We ensure that appropriate safeguards are in place to protect your data during such transfers.
Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Your binder data is kept for as long as your account exists and is deleted when we delete your account at your request. Card images are deleted within 30 days. Other data will be deleted or anonymized when no longer needed and, at the latest, 2 years after the relevant record was created.
Security Measures
We implement industry-standard security measures to protect your personal data from unauthorized access, disclosure, or destruction, including encryption in transit. Despite these measures, no method of transmission over the internet is 100% secure.
Children’s Privacy
We do not knowingly collect personal data from children under 16 years of age. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.
Changes to the Privacy Policy
We may update this Privacy Policy periodically. Changes will be posted on this page and, where appropriate, notified to you in the App or via email. Please review this policy regularly for updates.
Contact Information
If you have any questions about this Privacy Policy, please contact us through the support link on the App’s App Store page or the contact option in the App’s settings.
The Purposes of Collecting and Processing Personal Data
The Developer processes personal data whenever the App talks to our servers (to identify or grade a card, to fetch prices, or to back up your binder) and whenever you send us feedback or a support request. In general, the information we process relates to your device and your binder and helps us recognise your anonymous account. The Developer does not buy or receive data about you from the Apple App Store (the “Platform”), data brokers or advertising partners.
Personal Data That is Collected While You Are Using the App
When you use the App, the Developer processes the following data from your device: the device’s vendor identifier (IDFV) and the anonymous account identifier derived from it, the App version, your internet protocol (IP) address and the approximate country it indicates, the time of each request to our servers, and the binder data described above. The Developer does not read the advertising identifier (IDFA), does not record the screens you view or how long you use the App, and does not share any of this data for advertising purposes.
The App offers nothing for sale. No payment data is ever requested or processed by the App or the Developer.
Personal Data That is Collected When You Contact Us
When you contact us, we may ask for contact information (e.g., email) when you request information about the App, request technical support, or contact us for any other reason. Your contact information will be processed to fulfil your requests and communicate with you.
Data That is Collected by Third Parties
If the personal data provided to the Developer by you is requested by official institutions/organizations as necessitated by the law, the data may be transmitted to the relevant authorities and courts if requested by the courts.
The service providers listed under “Data Sharing” process data only on our behalf and on our servers’ instructions; none of them has software running inside the App. When our servers call them (for example to run an AI model on a card photo) they may see the card image, the request time and our servers’ IP address, but not your device identifiers. You may access the privacy policies of these third parties from their websites.
Children’s Data
The Developer never knowingly or willingly collects any personal data concerning children under 16 years of age.
The Legal Grounds of Processing Your Personal Data
The legal grounds that the Developer relies upon while processing your personal data are the following:
- Explicit consent and/or your request.
- In cases where it is necessary to disclose such information in accordance with applicable laws or regulations or a court judgment or administrative order issued.
- Being necessary for the establishment and execution of an agreement.
- Being necessary for the Developer to fulfil its legal obligations as a data controller.
- Being necessary for the establishment, exercise, and protection of any right.
- Without prejudice to your fundamental rights and freedoms, being compulsory for the Developer’s legitimate interests.
In data processing activities where your personal data is processed based on explicit consent, you have the right to withdraw your consent at any time.
the Developer’s legitimate interest in processing your device and usage data is to provide better service to you, improve card recognition and grading accuracy, improve and update the App, and facilitate the use of the App related to your interests and preferences, within the framework of applicable legislation.
The Developer undertakes to keep your data and any confidential information strictly private and confidential, to regard it as an obligation to keep confidentiality, to take all measures and act with due diligence to prevent all or any part of your information from entering the public domain or being subject to unauthorized use, and to take measures to prevent the confidential information from disclosure to any third party. If, despite all necessary data security measures taken by the Developer, the confidential information is damaged as a result of attacks on the system or captured by third parties, the Developer shall have no responsibility in that respect to the extent permitted by law.
The Transfer of Your Personal Data
Your personal data may be transferred to our business partners and service providers located abroad for the purposes of providing and improving the App and identifying and grading cards. In case a public institution is authorized to request personal data by law, your personal data can be transferred to such authorized public institution in accordance with the applicable personal data protection legislation. Requests from judicial authorities will also be fulfilled in accordance with the applicable legislation.
Your personal data may be transferred to the business partners and service providers stated below:
Cloud computing and AI services
- Amazon Web Services, Inc.
- Google LLC (Gemini models)
- Anthropic, PBC (Claude models)
Your Rights Regarding the Protection of Your Personal Data
According to the relevant legislation, you have the right to:
- Learn whether or not your personal data is being processed.
- Request information as to processing if it has been processed.
- Learn the purpose of personal data processing and whether the personal data is used appropriately in line with such purposes.
- Know the third parties to which your personal data is transferred domestically or abroad.
- Request correction if your personal data is incompletely or incorrectly processed.
- Request deletion or destruction of your personal data.
- Request the transmission of your correction, deletion, and destruction requests to third parties to whom your personal data has been transferred.
- Object to any consequence that occurred against you by analysing your processed data exclusively through automated systems.
- Request compensation in case you incur any damage due to the unlawful processing of personal data.
- Request restriction of data processing activities.
- Request data portability.
- Lodge a complaint with the relevant data protection authority and claim damages in case of impairment because your personal data is processed in violation of the relevant legislation.
You can submit all your claims and questions with respect to such rights through the support link on the App’s App Store page or the contact option in the App’s settings. Your requests will be answered as soon as possible and within thirty days at the latest.