Holofolio Privacy Policy
The short version: your collection lives on your phone. Holofolio has no accounts and no servers that store your data. We never see what you own. The only third party that receives data about your device is Google AdMob, which shows the banner ad.
Who we are
Holofolio is published by R. Iglesias, trading as Holofolio, a sole trader based in England ("we", "us"). For any privacy question, contact support@holofolio.info.
What stays on your phone
- Your collection: the cards, sealed products and graded slabs you add, with quantities, conditions, grades and certificate numbers. This is stored only in the app's own database on your device. Android backups of this database are switched off, so it isn't copied off the device.
- Settings, theme and visit streak: also stored only on your device.
- Camera and photos: the camera is used only while the scanner is open, to recognise cards on your phone itself. Card recognition runs entirely on the device. Photos are never uploaded. Photos you choose to import are read on the device in the same way.
- NFC: used only when you tap a graded slab's chip, to read its certificate number.
Uninstalling the app deletes all of this. You can export your collection at any time from Settings.
What leaves your phone
- Card prices and images: to show prices and pictures, the app downloads public card data from the Pokémon TCG API (pokemontcg.io) and card images from its image servers. These requests ask for public set and card information. They don't include your collection or anything that identifies you, beyond the IP address every internet request carries.
- Advertising (Google AdMob): the free app shows a banner ad served by Google AdMob. AdMob may collect your device's advertising ID, IP address and information about ad interactions, to show ads, limit repeats, measure performance and prevent fraud. In the UK and EEA you're asked for consent before personalised ads are shown, and you can change that choice at any time. You can also reset or delete your advertising ID in your phone's Google settings. See how Google uses data from apps that use its services.
- Buy and sold-price links: the "Buy" and "Sold prices" buttons open TCGplayer or eBay in your browser. These links may carry an affiliate tag, so we may earn a commission if you buy something. Those sites have their own privacy policies. We receive no personal information from them, only anonymous commission reports.
What we don't do
- We don't sell your data.
- We don't run accounts, logins or cloud storage.
- We don't track your location.
- We don't read your contacts or files, apart from photos you choose to import.
Legal basis (UK GDPR)
Storing your collection on your own device needs no legal basis from us, because we never receive it. Advertising data is processed by Google on the basis of your consent (for personalised ads) or legitimate interests (for non-personalised ads and fraud prevention).
Children
Holofolio is intended for collectors aged 13 and over and is not directed at children under 13.
Your rights
You have the right to ask what personal data we hold about you. Because we hold none on our side, most requests are answered by the fact that your data never left your phone. For advertising data, use Google's controls or contact us and we'll help. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes, we'll update the date at the top and, for significant changes, mention it in the app.