Last updated: 2026.05.29
Reverse Holo TCG ("we", "us") is a Pokémon trading card portfolio and grading-analysis service. This policy describes what information we collect when you use our iOS app, Android app, or website at reverseholo.io (collectively, "the service"), and how we use it.
When you create an account we collect your email address and a password (stored as a salted hash; we never see or store the plaintext password). You may optionally provide a username, display name, and profile photo. When you add cards to your inventory or run analyses, we store that data so we can show it back to you later. When you contact support or submit feedback we keep the message and your email so we can respond.
When you use the service we automatically receive standard request data: IP address, device type, operating system, app version, and the URLs you visit within the service. We use this for security, debugging, and rate limiting. We do not use third-party analytics, advertising SDKs, or behavioral tracking.
If you use the AI centering analysis feature, we receive the card photo you upload and store it together with the resulting measurements so the report remains viewable later. Photos are associated with your account and not shared with other users. You can delete an AI centering report at any time from the reports list; deletion removes both the report and its photo from our storage.
Subscriptions purchased on the iOS app are processed by Apple; we receive only the entitlement status (whether your subscription is active) via RevenueCat. We never see your payment information. Subscriptions purchased on the web are processed by Stripe; we receive your billing email and a Stripe customer ID, but never your card number or full card details — those stay with Stripe.
We rely on the following processors to operate the service: Supabase (database hosting and authentication), Stripe (web billing), Apple App Store / RevenueCat (mobile billing), Resend (transactional email), TCGAPIs and pokemontcg.io (card metadata and market prices), PokeTrace (graded card sale data), and Render or similar (server hosting). Each processor has its own privacy policy and we share with them only what is needed for the service to function. We do not sell personal information.
If you opt in to push notifications on the mobile app, your device registers a push token with us. We use it only to deliver notifications you have opted into (price alerts, daily summaries, account events). You can disable push notifications in iOS Settings or Android Settings at any time; the token becomes inert.
We send transactional emails (verification, password reset, receipts, account events) regardless of marketing preference because they are required for the service to function. We do not currently send marketing email. If we add a marketing mailing list in the future, it will be strictly opt-in with a one-click unsubscribe link.
We keep your account data as long as your account is active. When you deactivate your account from settings, your personal data and collection are deleted within 30 days. Some anonymized or aggregated data (e.g. error logs without your user ID, financial records required for tax purposes) may be retained longer where required by law or for legitimate business operation.
You can access and edit most of your data from inside the app (collection items, profile information, notification preferences). You can deactivate your account from settings at any time. If you are in the EU, UK, California, or other jurisdiction with formal data-protection rights, you may also request a copy of your data or its deletion by emailing support@reverseholo.io. We respond within 30 days.
The service is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has provided personal information, email us and we will delete it.
We use industry-standard security practices including encryption in transit (HTTPS), encryption at rest for the database, hashed passwords, and access controls on administrative tools. No system is perfectly secure; if we become aware of a breach affecting your information we will notify you as required by applicable law.
Our service is operated from the United States. If you use the service from outside the US, your information will be transferred to and processed in the US.
We may update this policy as the service evolves. Material changes will be reflected in the "Last updated" date above and, where appropriate, communicated by email. Continued use of the service after a change constitutes acceptance.
Questions or requests: support@reverseholo.io.