Legal
Privacy Policy
This service is built for adult collectors and treats card media, collection records, search history, saved searches, location signals, and marketplace activity as personal data.
Search data
HoloScout uses search data to run card search, show local recent searches, power explicit Saved Scout Searches and alerts, and improve multilingual search quality. Local recent searches stay on the device. Cloud Search Memory is off by default and stores account-linked recent searches only after you enable it. Saved Scout Searches are created only when you choose Save Search.
What search quality does not store
Anonymous Improve Search Results events are minimized, sanitized, and not linked to your account. HoloScout does not intentionally store raw IP addresses, raw user-agents, advertising IDs, exact device IDs, emails, phone numbers, payment data, tokens, photo URLs, raw OCR image IDs, or precise location in search quality logs.
Search retention
Anonymous search quality events are retained for up to 30 days before deletion or aggregation. Cloud Search Memory is retained for up to 90 days unless you delete it sooner. Saved Scout Searches and alert rules stay in your account until you delete them.
Media analysis
Uploaded images and videos are used to identify Pokemon cards, extract visible card text, suggest likely matches, and support pack-opening analysis. When production AI recognition is enabled, Gemini or another approved backend service is called only from HoloScout servers after the user chooses an assisted recognition flow.
Collection and marketplace data
Collection records may include owned cards, quantities, condition, language, purchase price, acquisition date, notes, estimated values, and outbound marketplace click records. Mobile clients and browsers call HoloScout backend APIs rather than provider APIs directly.
Code card scanner data
Code card scanning is treated as sensitive. Raw code values are masked in normal screens, duplicate checks use protected metadata, and any vault-style retention requires an explicit user action.
Subscription and entitlement data
Subscription status, App Store transaction identifiers, restore-purchase status, and entitlement summaries are processed server-side. HoloScout does not trust client-only purchase flags for premium access.
Analytics and diagnostics
Operational diagnostics are minimized and redacted. HoloScout does not intentionally log authorization headers, payment secrets, raw card codes, precise location, private notes, or uploaded media URLs in customer-facing logs.
App waitlist
The app waitlist collects email, country, collector type, consent, request id, and signup timestamp so HoloScout can plan iPhone and Android launches. Users can request deletion of waitlist data by contacting the privacy address below.
Data sources
HoloScout currently uses eBay active listing data and optional Rakuten Ichiba retail listing data through approved server-side APIs when configured. Guided review experiences may show clearly labeled review data without contacting live marketplace providers. Additional marketplace partners may be added only after approval, source-provenance controls, and clear user-facing labels.
PokeMap location
PokeMap location use is optional. The service must not show precise user location unless browser permission is granted. City-level browsing, filters, and store inventory reports can work without precise location access.
Deletion and export
Users can request deletion or export of collection data, uploaded media, account data, and related activity records by contacting the service. Account deletion can be requested from the app or the data deletion page. Search Privacy Center lets you disable Cloud Search Memory, disable Improve Search Results, delete search memory, and request export or deletion of account-linked search data.
Regional privacy notices
California residents may request access, deletion, correction, and information about data practices. EU/UK users may request access, correction, deletion, portability, restriction, or objection where applicable. Korea PIPA and Japan APPI rights are supported at a practical account-data level through export, deletion, and privacy contact workflows.
Contact
Questions, deletion requests, export requests, and compliance notices can be sent to admin@holoscout.app.