Privacy Policy

Rip & Track — TCG Card Scanner & Collection Tracker

Effective date: October 15, 2026

Short version: Rip & Track reads your card photos on your device with Apple’s Vision framework and never uploads them. To look up a price, only the recognised card text (such as the card name, set and number) is sent to public card databases. Your collection is stored on your device. There are no accounts, no ads and no cross-app tracking; usage statistics are collected with Firebase Analytics and Umeng, and we never sell your data. If you opt in in Profile, the App reports Pro feature usage and purchase identifiers to our refund service so it can share a summary with Apple for refund requests. This sharing is off by default and you can turn it off at any time (section 9).

1. Who We Are

This policy explains how Rip & Track (“the App”, “we”, “us”, or “our”) handles information. It applies to the Rip & Track iOS app distributed on the Apple App Store, published by LIE KUN JI.

Contact: feedback@globalpixelstudio.com

2. What the App Does

Rip & Track identifies trading cards (Pokémon, One Piece Card Game and Magic: The Gathering) from a photo, shows estimated market prices, lets you keep a collection and follow its value over time, and can alert you when a card’s price reaches a level you choose.

3. Data We Do Not Collect

No user accounts. The App works without registration of any kind.
No names, email addresses, contacts, precise location, health data, messages or browsing history. Analytics services may infer a general region or city from the IP address used to connect; we do not request location permission.
No advertising, no third-party advertising SDKs, no advertising identifier (IDFA) and no tracking across other companies’ apps or websites. For this reason the App does not show the App Tracking Transparency prompt.
We do not sell, rent or share personal data with data brokers.

4. Camera and Photos

When you scan a card, the camera image (or the photo you pick from your library) is analysed on your device using Apple’s Vision text-recognition framework to read the printed card name, set code and collector number. The image itself is never uploaded — not to us and not to any third party.

If you choose a photo from your library, the App reads only the photo you select. Any scan image or thumbnail the App keeps for your scan history stays on your device. Camera and photo access can be changed at any time in iOS Settings.

5. Price Lookups

To find a card and its price, the App sends the recognised card text — the card name, set or set code, collector number and game — over an encrypted connection to the public card database for that game:

Pokémon: TCGdex (api.tcgdex.net, see tcgdex.dev)
Magic: The Gathering: Scryfall (api.scryfall.com, see scryfall.com/docs/privacy)
One Piece Card Game: OPTCG API (optcgapi.com)

These requests contain no images, no identifiers of you or your device and no information about your collection, other than the card being looked up. Like any internet request, they reveal your IP address and basic technical information (such as the app version in the request header) to the service you contact, which handles it under its own policies. These services are independent of us.

To keep collection values and price alerts up to date, the App may refresh the prices of cards in your collection in the background using iOS Background App Refresh. These refreshes send the same kind of card-lookup requests and nothing else. You can turn Background App Refresh off for the App in iOS Settings.

6. Your Collection

Your collection, scan history, price history, price alerts and settings are stored only in the App’s storage on your device. We do not run a server that receives or stores your collection. Your device’s own backups (for example iCloud Backup, if you use it) may include this data under Apple’s terms.

If you export your collection as a CSV file, the file is created on your device and goes only where you choose to save or share it.

7. Price Alerts and Notifications

Price alerts are delivered as local notifications that the App schedules on your device after a price check. The App does not use a push-notification server, and no personal data is sent anywhere for notifications. Notification permission is optional and can be changed at any time in iOS Settings.

8. Purchases

Subscriptions and the lifetime purchase are processed by Apple through StoreKit and your Apple Account. We never see your name, Apple Account details or payment information. The App receives only the standard transaction information Apple provides (such as which product was bought, whether it is active and its transaction ID) so it can unlock Rip & Track Pro on your devices. The transaction ID is also used for refund protection as described in section 9.

9. Refund Protection (Usage Reporting)

Apple decides refund requests for App Store purchases. When you ask Apple for a refund, Apple sends us a request for information about how the purchase was used, and its rules allow us to answer through the App Store Server API. Sharing is off by default. If you enable Profile > Share refund usage with Apple, the App reports the following to our refund-protection service after paid Pro features are used successfully (reports are grouped and resent later if the device is offline):

a random install ID created by the App (not the advertising identifier and not the IDFV). The App stores it with its data on your device and may also keep a copy in iCloud key-value storage, so it may stay the same if you reinstall the App;
the original transaction ID and product ID of your active subscription, or of your most recent purchase such as Pro Lifetime;
the number and times of successful uses of Pro features: card scans, CSV exports and price alerts set;
the App’s bundle ID and version, the platform, your preferred language, the time of the report, your refund-sharing consent setting and a promotional-notification setting that is off.

These reports never include card photos, card names, prices, your collection, your name, email address, Apple Account details or the advertising identifier.

The service runs on Google Cloud Functions and Cloud Firestore in a Firebase project operated by us, in the United States. The records cannot be read by the App or by other users; only our service and the people who operate it can access them. Only when it has your affirmative consent, when Apple sends a request about a refund you asked for, the service adds up the usage recorded for that transaction and reports to Apple, as Apple’s rules describe: whether the content was delivered, what share of the purchase was used, and our refund preference. Apple makes the final decision. We do not use this data for advertising or analytics, and we do not share it with anyone except Apple for the refund request.

This sharing is optional and is based on your consent. You can withdraw it at any time by turning the Profile setting off, without losing Pro access. The App stops collecting refund usage, discards unsent usage and sends your withdrawal to the service; if offline, it retries when connected. After the withdrawal is received, the service does not send further consumption information to Apple. Previously collected records are kept only as long as needed for the purchase and can be deleted on request (section 11).

10. Analytics

To understand how the App is used and to improve it, the App records basic usage events, for example which screens were viewed, whether a scan was completed and whether a match was found, which features were used, paywall views and purchase or subscription events (such as a purchase started, completed or restored, and the product). These events never include card photos.

These events are sent to two analytics services, Google Firebase Analytics and Umeng (U-App), together with basic device information such as device model, OS version, app version, language/region, approximate location inferred from the connection IP address, network type, an app-instance identifier and a per-vendor device identifier (IDFV). This data is used in aggregate and is not linked to your name or contact details. It is not used for advertising and the App does not track you across other companies’ apps or websites. Firebase processes data under Google’s terms (firebase.google.com/support/privacy); Umeng processes data under its privacy policy (umeng.com/page/policy), and data sent to Umeng may be processed on servers in mainland China.

If you have opted in to sharing analytics with app developers in iOS Settings, Apple may also provide us with aggregated, anonymised crash and usage statistics.

11. Data Retention and Deletion

Your collection, scan history, alerts and settings live only on your device. You can remove individual cards inside the App, and deleting the App removes your collection, scan history, alerts and settings from your device. If you want to keep a copy, export your collection as CSV first. Deleting the App also deletes the refund-protection install ID from your device; a copy kept in iCloud key-value storage, if any, contains nothing else.

Refund-protection records (section 9) are kept on our service as described there. To have them deleted, email us; telling us roughly when you bought Rip & Track Pro and attaching the Apple receipt email helps us find them.

Analytics data is kept by Firebase and Umeng for the periods set in their policies. Because it is not linked to your name or contact details we usually cannot single it out, but if you email us we will do what we can with our providers.

12. Your Rights

Depending on where you live (for example under the GDPR in the EU/UK or the CCPA in California), you may have the right to access, correct, delete or object to the processing of your personal data. We do not hold accounts or your collection on our own servers, so most data can be removed simply by deleting the App; for the refund-protection records, see section 11. For any request, email us at the address below.

13. Children

The App is a general-audience reference tool and is not directed at children under 13. It has no accounts, no ads and no chat, and we do not knowingly collect personal information from children. If you believe a child has provided personal information through the App, contact us and we will help.

14. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected on this page with a new effective date.

15. Contact

Questions about this policy? Email feedback@globalpixelstudio.com.