Privacy Policy

Last updated October 13, 2026

1. Who we are

This Privacy Policy explains how CatCardia LLC ("we", "us") handles information when you use the RuneVault app and its related services (the "App"). If you have questions, email support@runevault.dev.

2. What we collect

Account information. When you sign in, we receive your email address and a sign-in identifier from the method you choose (Apple, Google, or an emailed code). If you sign in with Apple and choose to share it, we also receive your name. If you use Apple’s "Hide My Email", we only see the relay address Apple gives us.

Collection data. The vaults you create and the cards you add to them, including card, finish, condition, quantity, and when entries were added or changed.

Technical information. Like most online services, our hosting provider automatically records basic request information, such as IP address, device and app version, and time of request, to operate and secure the service.

Searches. Card searches are sent to our servers so we can return results. We don’t use them to build a profile of you.

Crash reports and feedback. If the App crashes or hits an error, it sends a report with technical details (what went wrong, the screen involved, device model, operating system and app version) and your account identifier, but not your email address. If you send feedback from the App, we receive your message and, only if you enter it, your email address.

3. What we don’t collect

Camera. The scanner reads card text on your device. Camera images and video are not saved and are never sent to us.

We don’t use advertising, ad identifiers, or third-party analytics or tracking tools, and we don’t track you across other apps or websites.

We don’t collect your contacts, photos, precise location, or payment information.

4. How we use information

We use your information only to run the App: to sign you in, store your vaults and sync them across your devices, show card prices and vault values, respond to support requests, keep the service secure and prevent abuse, and comply with the law.

5. Information stored on your device

The App keeps some data on your device so it works quickly and offline: your sign-in session, an offline copy of your vaults, cards you added while offline that are waiting to sync, your scan queue, scanner settings, and a local copy of the card catalog. Signing out clears your offline vault copy. Deleting the App removes all of it.

6. How information is shared

We don’t sell or rent your personal information, and we don’t share it for advertising.

We use a small number of service providers to run the App, who process information only on our behalf: Supabase (account sign-in, database, and hosting), Sentry (crash reports and in-app feedback), and Apple and Google (only if you choose to sign in with them). Card and price data comes from RiftHunt; we don’t send them any of your information.

We may also disclose information if required by law, to protect the rights, safety, or property of our users or others, or as part of a merger, sale, or transfer of the App, in which case this policy will continue to apply to your information.

7. How long we keep it

We keep your account and collection data for as long as your account exists. When you delete your account in the App, your account and all your vaults are deleted from our database right away. Copies may remain in routine backups and logs for a limited time, typically up to 30 days, before they are removed.

8. Your choices and rights

You can view and edit your vaults in the App at any time, and you can delete your account and all its data from the Account tab.

Depending on where you live (for example, in California, the EU, or the UK), you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict how we use it. To make a request, email support@runevault.dev from the address on your account. We won’t treat you differently for exercising these rights.

9. Security

Your data is sent over encrypted connections, and our database restricts each account to its own vaults. No system is perfectly secure, so we can’t guarantee absolute security, but we work to protect your information and will notify you as the law requires if a breach affects it.

10. Children

The App is not intended for children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us at support@runevault.dev and we will delete it.

11. Where data is processed

We are based in the United States, and our service providers may process your information in the United States or other countries. Those countries may have different data protection laws than where you live.

12. Changes to this policy

We may update this policy as the App changes. When we make significant changes, we’ll let you know in the App. The date at the top shows when it was last updated.

13. Contact

Questions or requests about your privacy? Email us at support@runevault.dev.