Privacy Policy v1.0.1

_Last updated: 2026-04-17 · Effective on acceptance · Version 1.0.1_

This Privacy Policy explains what information TUKAR collects, how we use it, and the choices you have. By using TUKAR, you agree to this policy.

1. What We Collect.

• Account info: email, username, display name, password hash, optional profile photo and bio.
• Location (fuzzy only): we store a ~5 km geohash plus an optional city name. We do not store your exact GPS coordinates on our servers.
• Listings and trades: cards you add, trade history, messages, reviews, meetups you coordinate.
• Scan activity: when you scan a card, the image crop is sent to our server for recognition and is discarded after matching. We log anonymous scan counts for subscription limits.
• Device info: OS version, app version, and crash diagnostics (for stability).
• Subscription info: if you purchase TUKAR Pro, we receive anonymous purchase and renewal events from the app store.

2. What We Don't Collect.

• Precise GPS coordinates (only the fuzzy geohash).
• Background location tracking.
• Payment card numbers (handled by the App Store / Google Play).
• Contacts, calendar, or other device data we don't need.

3. How We Use It.

• Find nearby traders, Local Game Stores, and matches.
• Operate account, notifications, and subscription management.
• Improve card recognition and fix bugs.
• Safety: prevent fraud, abuse, and counterfeit activity.

4. Third-Party Services.

• Scryfall / JustTCG: card data and pricing.
• RevenueCat: subscription entitlement.
• Google / Apple: OAuth sign-in (if you choose it).
• We do not sell or share your personal information, including as those terms are defined under California law (CCPA/CPRA). If that ever changes, we will update this policy and obtain consent where required.

5. Your Choices.

• You can request a copy of your data, correct inaccuracies, or delete your account at any time from Profile → Settings, or by emailing support@tukar.app.
• You can disable location sharing in app settings; distance-based features will stop working.

6. Retention. We keep account data while your account is active. After deletion, personal data is anonymized or removed within 30 days, except where we must retain records for legal, tax, or fraud-prevention reasons.

7. Security. We use industry-standard measures (HTTPS, hashed passwords, access controls) to protect your data. No system is perfectly secure — contact us at support@tukar.app immediately if you suspect your account has been compromised.

8. Children. TUKAR is not intended for users under 13. If under 18, a parent or guardian must consent.

9. Changes. We may update this policy. Material changes require re-acceptance; minor edits are notified in-app.

10. Contact. support@tukar.app