Privacy Policy

Grail Swap (“Grail Swap,” “we,” “us”) is a trading‑card marketplace and collection app. This policy explains what we collect, why, and the choices you have. By using Grail Swap you agree to this policy.

Information we collect

• Account information — your email address and authentication details (handled by our auth provider, Clerk), plus any username, profile photo, and bio you add.
• Collection & listing data — the cards, conditions, grading, photos, prices, and notes you add to your vault, wishlist, and listings.
• Photos & camera — images you capture or upload of your cards. Card photos may be sent to a third‑party AI provider (Anthropic) solely to identify the card and pre‑fill its details.
• Location — approximate location (e.g. from a ZIP code or device location, if you enable it) used to show nearby trades and listings.
• Transactions — orders, trades, offers, and messages. Payments for physical cards are processed by Stripe; subscriptions are processed by Apple or Google and managed via RevenueCat. We do not store full payment card numbers.
• Usage & device data — app interactions, device type, and diagnostics to operate and improve the service.
• Communications — messages, comments, and reports you send within the app.

How we use information

To provide and operate the marketplace; match wishlists and suggest trades; process payments and subscriptions; show approximate distance for local deals; identify cards from photos; prevent fraud and abuse; moderate user content; provide support; and comply with law.

How information is shared

• Other users — your public profile, public/for‑trade/for‑sale listings, and messages you send are visible to the users you interact with. Private vault cards are not shown publicly.
• Service providers — authentication (Clerk), payments (Stripe), subscriptions (Apple / Google / RevenueCat), cloud storage (AWS S3), card identification (Anthropic), card price data sources, and push/email delivery. They process data only to provide their service to us.
• Legal — when required by law or to protect users and the platform.

We do not sell your personal information, and we do not show third‑party advertising.

User‑generated content & safety

Listings, messages, comments, and profiles are user‑generated. You must accept our Terms/EULA, which prohibit objectionable content. You can report or block any content or user; reports are reviewed within 24 hours.

Data retention & deletion

We keep information while your account is active. You can delete your account in Settings → Delete Account, which removes your account and scrubs personal data (some records may be retained where required for legal, tax, or fraud‑prevention purposes). You can also email us to request deletion.

Security

We use industry‑standard safeguards such as encryption in transit and access controls. No method of transmission or storage is 100% secure.

Children

Grail Swap is not directed to children under 13 (or the minimum age in your region) and we do not knowingly collect their data. If you believe a minor has provided us data, contact us and we will delete it.

Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. Contact us to exercise them.

International users

Your information may be processed in the United States and other countries where we or our providers operate.

Changes

We may update this policy and will post the new date here; for material changes we will notify you in the app.

Contact

Questions or requests: support@grailswap.app.