Privacy Policy

1. Who we are

PokeChex is operated by Statsmart Consulting Limited, trading as Sqwosh, registered in England and Wales. For privacy questions or data requests, contact josh@sqwosh.co.uk.

2. What PokeChex does

PokeChex helps users scan Pokemon cards, review likely matches, estimate raw card values, and save cards to a collection. Card values are estimates and are not guaranteed resale prices or professional graded valuations.

3. Data we collect

Depending on how you use PokeChex, we may collect:

• Account data, including name, email address, authentication identifiers, market, user type, preferences, and app settings.
• Card and collection data, including uploaded card photos, chat messages, scan results, card matches, saved cards, collection quantities, and raw value estimates.
• Subscription data, including product ID, provider, transaction identifiers, entitlement status, renewal or expiry dates, and purchase event records. Payment details are processed by Apple or another app-store billing provider, not directly by PokeChex.
• Support data, including your name, email address, subject, message, and related account context needed to respond.
• Usage and diagnostics data, including product interactions, feature usage, device or browser information, approximate technical logs, error information, and analytics events.
• Waitlist and marketing data, including email address and consent/preferences when you join the waitlist or request launch updates.

4. How we use data

• To create and secure your account.
• To scan cards, identify likely matches, estimate raw values, and save collection records.
• To provide subscription access, restore purchases, and process subscription lifecycle events.
• To enforce usage limits, rate limits, and abuse-prevention controls.
• To answer support requests and investigate issues.
• To improve reliability, product flows, analytics, and pricing quality.
• To send waitlist, launch, or service communications where permitted.
• To comply with legal, tax, accounting, security, and app-store obligations.

5. Legal basis for processing

Where UK GDPR or similar law applies, our legal bases may include:

• Contract, to provide the app features, account access, support, and subscription entitlements you request.
• Legitimate interests, to secure, improve, debug, and operate PokeChex.
• Consent, for waitlist or marketing updates where consent is required.
• Legal obligation, for records we must retain for billing, tax, accounting, fraud prevention, or legal compliance.

6. Service providers

We use third-party providers to operate PokeChex, including:

• Supabase for authentication, database, and backend infrastructure.
• Railway, Vercel, or similar hosting providers for API and website hosting.
• PostHog for product analytics and app usage measurement.
• AI and infrastructure providers for card image analysis, text analysis, embeddings, and related processing.
• Marketplace, catalog, and pricing providers for card reference data and pricing signals where available.
• Apple for iOS app distribution, in-app purchases, subscriptions, refunds, and subscription management.
• Loops or similar email tools for waitlist and launch emails.

We do not sell personal data. We do not use uploaded card images for advertising. We do not use app data for cross-app advertising tracking unless this policy is updated and any required consent is obtained.

7. AI and card images

When you submit card photos or chat content for analysis, that content may be processed by PokeChex systems and AI/infrastructure providers to identify cards, estimate raw values, and generate responses. Avoid uploading images or messages that contain information you do not want processed for this purpose.

8. Cookies and analytics

Our website may use essential cookies or similar technologies needed for site operation. The app and website may use analytics to understand product usage, reliability, and feature performance. You can control browser cookies through your browser settings.

9. Data retention and deletion

We keep account and app data while your account is active or as needed to provide the service. You can delete your account in the app from Profile. Account deletion removes your profile, chats, collection, and related app data from our active systems, subject to records we must retain for legal, billing, tax, fraud-prevention, dispute, or security reasons. You can also request deletion or export help by emailing josh@sqwosh.co.uk.

10. International transfers

Our service providers may process data in the United Kingdom, United States, European Economic Area, or other locations where they operate. Where required, we rely on appropriate safeguards for international transfers.

11. Security

We use reasonable technical and organisational safeguards, including HTTPS, restricted database access, backend-mediated sensitive writes, and access controls. No online service is completely secure, and we cannot guarantee absolute security.

12. Children

PokeChex is not intended for children under 13. If you are under 18, use PokeChex only with permission from a parent or guardian.

13. Your rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data.
• Withdraw consent where processing is based on consent.

To exercise these rights, email josh@sqwosh.co.uk. You can unsubscribe from marketing emails using the unsubscribe link in the email.

14. Changes to this policy

We may update this policy from time to time. We will post the revised version here and update the "Last updated" date.