FoilGemPrivacy Policy
This Privacy Policy explains how the FoilGem mobile app for Android and iOS (the "App"), published by Anmol Kulshreshtha ("we", "us"), handles information. The App does not require an account. Your collection, portfolio and settings are stored on your device.
1. Information the App processes
| Information | How it is used | Where it goes |
|---|---|---|
| Camera images while scanning | Identify the card (name, number, set). | Processed on your device with Google ML Kit and on-device models. Photos are not uploaded or stored by us. |
| Card searches | Find cards by name, number or set. | Run on your device against a card catalogue the App downloads from our servers (Google Firebase Hosting). Search terms are not sent anywhere. |
| Card catalogue, card images and daily prices | Show card details and market prices. | Downloaded from our servers (Google Firebase Hosting) and from TCGdex (tcgdex.net) for card images. No personal data is sent. |
| Collection, portfolio, wishlist, decks, purchase prices you enter | Shown in the App and used to calculate values and profit & loss. | Stored only on your device, and in your device's own backup (Google or iCloud) if you have it turned on. Shared only when you choose backup, CSV export or share. |
| Questions you type in AI card chat, plus the card's details and catalogue image | Generate answers about the card. | Sent to Google's Gemini API through Firebase (Google LLC). Only used when you open AI chat. Google may keep prompts for a limited time to detect abuse. Your chat history is stored only on your device; you can delete it in the chat screen. You can report an AI reply in the app: the reply's text and the reason you pick are sent to Firebase Crashlytics (Google LLC) so we can review it; your question is not included. |
| How you use the App: screens viewed, features used (for example scans, searches, adding cards), purchase and trial events, app version, device model and OS, language, an app instance ID and the anonymous app user ID | Understand which features work, fix problems and improve the App. | Google Analytics for Firebase (Google LLC). Google derives an approximate location (country or city) from your IP address. |
| On Android: how you use the App, purchase and trial events, approximate location and the device advertising ID | Measure and improve our ad campaigns (for example which ads lead to trials and subscriptions). | Google Analytics shares this data with Google Ads (Google LLC), which may use it for ad measurement and ad audiences. The App does not show ads. On iOS this data is not used for advertising: the App does not ask for tracking permission, does not use the advertising identifier (IDFA) and does not track you across other companies' apps or websites. |
| Crash reports: what went wrong in the code, device model, OS and app version, an installation ID and the anonymous app user ID | Find and fix crashes. | Firebase Crashlytics (Google LLC). |
| Purchase and subscription status, an anonymous app user ID, device and OS type, and a short summary of app usage (for example which features were used before a purchase) | Unlock Pro features, restore purchases and understand subscriptions. | RevenueCat, Inc. and Google Play / the Apple App Store. |
| App integrity tokens | Confirm requests come from a genuine copy of the App, to prevent abuse. | Firebase App Check (Google LLC), using Google Play Integrity or Apple App Attest. |
| Display currency | Convert prices to your currency. | Exchange rates are fetched from Frankfurter (frankfurter.dev). No personal data is sent. |
| Emails you send us (feedback, a data deletion request, or more details about a reported AI reply) | Reply to you and act on your request. | Sent from your own email app. The App fills in the app version, OS, language and plan; for deletion requests your anonymous app IDs; for AI reply reports the reply's text. |
When the App contacts any online service, that service receives your IP address as part of the normal network connection. All of these services receive data only as needed to provide their service to us.
2. Your choices
- In the European Economic Area, the United Kingdom and Switzerland, the App asks for your consent before analytics and ad measurement use identifiers. If you decline, Google Analytics receives only limited, cookieless signals without identifiers, nothing is used for ads, and the App does not send the usage summary to RevenueCat or link crash reports to your app user ID. You can change your answer at any time in Profile → Privacy choices.
- On Android you can reset or delete your advertising ID in your device settings.
- You can use the App without AI card chat; nothing is sent to Gemini unless you open it.
3. What we do not do
- We do not require sign-up, and the App does not collect your name, email address, contacts or precise location. (If you email us, we receive your email address.)
- We do not sell personal information. The App contains no ads.
- We do not upload the photos you take while scanning.
4. Third-party services
- Google ML Kit (on-device text recognition): terms
- Google Firebase (Analytics, Crashlytics, App Check, Hosting), Gemini API and Google Ads: Google Privacy Policy, how Google uses information from apps that use its services
- RevenueCat: privacy policy
- Google Play / Apple App Store payments, under their own privacy policies
- TCGdex (tcgdex.net) for card images
- Frankfurter (frankfurter.dev) for currency rates
Links to marketplaces such as TCGplayer, Cardmarket or eBay open in your browser. Those sites have their own privacy policies.
5. Purchases
Payments are handled entirely by Google Play or the Apple App Store. We never see or store your card or bank details. You can manage or cancel subscriptions in your Google Play or App Store account settings.
6. Data retention and deletion
Data stored on your device stays there until you delete it in the App or uninstall the App. Google Analytics keeps event data for no longer than 14 months. Crashlytics keeps crash reports for 90 days. RevenueCat keeps purchase records needed to provide and restore your purchases.
To ask us to delete the data linked to your anonymous app IDs (analytics, crash reports and purchase records), use Profile → Delete my data in the App, which prepares an email with those IDs, or email us at the address below. We act on requests within 30 days. Records the app stores keep for purchases you made are subject to Google's and Apple's own policies.
7. Children
The App is not directed to children under 13, and we do not knowingly collect personal information from children.
8. Your rights
Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct or delete personal information, or to object to processing. Because most data stays on your device, you can view and delete it directly in the App. For anything else, email us.
9. Security
All network requests use HTTPS. Data on your device is protected by your device's own security.
10. Changes to this policy
We may update this policy. The effective date at the top will change, and significant changes will be noted in the App or on its store listing.
11. Contact
Anmol Kulshreshtha
Email: [email protected]
This website
The foilgem.com website sets no cookies, stores nothing on your device and has no sign-in. When you open a page or tap the Google Play button, the site sends an anonymous count to our own analytics server: the page address, the host name of the site you came from, and the page language. It does not include your name, an advertising ID or any other identifier.
Cloudflare hosts the website. It processes your IP address to deliver the pages and may give us combined, cookieless visit statistics.