Golden PullPrivacy Policy
Last updated:
We only use your data to make the App work: your account, your collection and your chats. We don't sell data, show ads or use tracking tools. Your PIN and your fingerprint or face never leave your device.
Contents
1. Controller
Data controller: Idoia Sastre Carrasco, trading as Sassy Kitten. Contact for any privacy matter: sassykittendev@gmail.com.
2. What data we process
- Account: your email address, used to send you sign-in codes.
- Profile: username, display name, bio, profile picture and birth date (only to check you're an adult; never shown to anyone).
- Collection: cards, lots, condition, quantities, purchase price, dates, notes, wishlist and the daily value of your collection.
- Social: friendships and requests, blocked users, chat messages and the files or photos you attach.
- Notifications: an identifier for your device to send you push notifications, and whether you have them turned on.
- Settings: whether your profile is public, and the version of these texts you accepted.
- Technical data: our servers temporarily log data such as your IP address to protect the service against abuse.
3. What stays on your device
Your PIN is stored only on your phone, and never in plain text (it is hashed). If you turn on fingerprint or face unlock, the operating system handles it: the App only gets a "yes" or "no" and never accesses your biometric data.
The camera is only used to read a friend's QR code, and your photos or files only when you choose one. We keep nothing else from them. Language, theme and currency are also stored only on the device.
4. Purposes and legal bases
- Providing the service (account, collection, cloud backup, friends and chat): performance of the contract you accept with the Terms (GDPR art. 6.1.b).
- Push notifications: your consent, which you can withdraw in Settings or in your system settings (art. 6.1.a).
- Security, abuse prevention and handling reports: our legitimate interest in keeping the App safe (art. 6.1.f).
- Detecting and fixing errors and crashes in the App: our legitimate interest in it working properly (art. 6.1.f).
- Complying with legal obligations where applicable (art. 6.1.c).
We don't make automated decisions that significantly affect you, and we don't profile you for commercial purposes.
5. Who can see your data
Any user who knows your username can see your display name, picture and bio. Your collection and wishlist are only shown if you turn on "Public profile" in Settings. Your messages are only seen by you and the people in the chat (they're end-to-end encrypted; not even we can read them), unless someone in the chat reports one: their phone then sends us that message's text, not its attachments, so we can review it. People you've blocked can't see your profile.
6. Service providers
To run the App we use providers that process data on our behalf, under contract and only on our instructions:
- Supabase: database, sign-in, file storage and real-time messaging.
- Render: API servers.
- Expo, Google (Firebase Cloud Messaging) and Apple (APNs): delivering push notifications.
- Resend: emailing us each report, with its content.
- Sentry: logging errors and crashes in the App (technical data about the device, the App and the error, and an internal id for your account; never your email, username or the content of your chats).
Card and price searches are made by our servers to card data providers without sending them your personal data. Card and Pokémon images are downloaded from third-party servers (such as GitHub), which can see your device's IP address.
We don't sell your data or share it for advertising.
7. International transfers
Some of these providers are in the United States or may access data from there. In those cases the transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
8. How long we keep it
For as long as you have an account. If you delete it from Settings, we immediately erase your profile, collection, friendships, blocks, notification tokens and the chats you took part in (for the other person too), along with their attachments. Our providers' backups are overwritten within a limited period, normally no longer than 30 days.
If you delete a chat only on your side, it is erased completely once the other person deletes it too.
Reports (who reported whom, the reason and, for a message, its text) are kept even if one of the accounts is deleted, for as long as needed to handle them and any related claims, and at most 2 years.
Error reports are deleted automatically after 30 days.
9. Your rights
You can request access, rectification, erasure, portability, restriction or objection to the processing of your data, and withdraw your consent at any time, by writing to sassykittendev@gmail.com. You can make many of these changes yourself in the App (edit profile, public profile, notifications or delete account).
If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.
10. Security
Communications are encrypted and database access is restricted to each user's own data. Chats are end-to-end encrypted: messages and attachments are encrypted on your phone and only the chat's members can decrypt them; we only store the encrypted content and can't read it (except the text of messages someone in the chat sends us when reporting them). Your account's key is kept on your device and, so you can restore it on another one, encrypted with a random recovery key only you have. You can check in person that you're talking to who you think (safety number in "Verify encryption"), and the App warns you if someone's key changes. No system is infallible: if we detect a breach that affects you, we'll tell you as the law requires.
11. Minors
The App is only for people aged 18 or over. If we learn that an account belongs to a minor, we will delete it.
12. Changes
If we change this policy in a meaningful way, we'll tell you in the App before the change applies. The last-updated date is shown at the top.