Privacy Policy

Echan Ventures, LLC, operating as Rectifi ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Rectifi mobile application (the "App") or visit our website, getrectifi.com.

1. Information We Collect

Account Information: When you launch the App, we create an anonymous account, identified by an app-generated identifier, that links your data on our servers. Signing in with a supported third-party authentication provider (currently Apple Sign-In) is optional and only needed if you want to back up your scan history across devices. When you sign in, we receive a provider-issued user identifier and, depending on the provider and the information you choose to share, your name and email address. We do not receive or store any third-party password. Your use of a third-party authentication provider is also subject to that provider's privacy policy.

Card Images: When you use the App to analyze a trading card, you provide images via your device's camera or photo library. Centering analysis runs on your device. By default, your centering images and the resulting analysis are also uploaded to secure cloud storage under your account. You can turn off "Save to Cloud" in the App's settings; when it is off, your centering scans stay on your device. Condition Scan always uploads, as described below.

Condition Scan Images: When you use Condition Scan, the captured images are uploaded to and analyzed on our servers. Unlike centering, this analysis cannot run on your device, so starting a Condition Scan always uploads that card's images and saves the result to your history, even when "Save to Cloud" is off. Alongside the images we upload the capture details the analysis needs, such as your device model and iOS version and, for each photo, camera settings and device-motion readings taken at the moment of capture. Images are transmitted over encrypted connections and processed in our own Google Cloud project, whether or not you have turned on Help Improve Rectifi. Condition Scan images and results are kept and deleted as described under "Condition Scans" in Section 5.

Scan History & Analysis Data: The App stores metadata about your analyses (such as centering ratios, grades, dates, and rectification method used) in our cloud database alongside your card images. Depending on your plan, the App shows this history and syncs it across devices when you are signed in.

Public Links: If you share a scan with a public link, anyone with the link can view that scan's card image and centering results for 7 days. Deleting the scan removes the shared copy.

Usage & Analytics Data: We collect usage analytics to improve the App, such as feature usage (for example, which analysis methods are used and paywall interactions), session data, device model, operating system version, and crash reports. Analytics events are associated with your app-generated account identifier, not your name or email address. When you visit getrectifi.com, Google Analytics for Firebase records page views and basic browser and device information.

Subscription Information: If you subscribe to Rectifi Pro, Apple processes your payment and we verify your subscription through Apple's StoreKit framework. We do not receive or store your payment information or Apple ID password. We store your current subscription status, a link between your subscription and your account, and a record of subscription events that Apple reports to us (such as renewals, expirations, and refunds). These records identify your subscription by Apple's transaction identifier rather than by your name or Apple ID, and the link to your account is deleted when you delete your account.

Device Integrity: The App uses Apple's App Attest to confirm that requests to our servers, such as Condition Scan requests and linking your subscription to your account, come from a genuine, unmodified installation of the App. It also uses Apple's DeviceCheck, which keeps a small amount of state about your device with Apple, so we can tell when a new installation is a device we have seen before. We record the result of each DeviceCheck check with your app-generated account identifier. We do not receive your device's serial number or any other permanent hardware identifier.

Information You Send Us: When you use a form in the App, such as the feedback form, we store what you enter, which can include a message, your answers and an email address. If you are signed in with Apple, forms pre-fill your Apple ID email address, which is sent unless you clear it. We store each submission with your app version, iOS version, device model and app-generated account identifier, along with context such as the card you sent it from or your subscription's transaction identifier. We use what you send to reply to you, to act on your request and to improve the App. If a form tells you how it will use your email address, such as to tell you when larger plans are available, we use the address only for that. To stop those emails, contact us at the address at the end of this policy.

Notifications: If you turn on notifications, we store a push token for your device with your account, along with your notification setting and app version, so we can tell you when a Condition Scan finishes. If you turn notifications off in the App, we stop sending them to that device. Signing out removes this device's token, and Delete My Data or Delete Account removes all of them.

2. How We Use Your Information

• Centering Analysis: Card images are processed on your device to calculate centering ratios. When "Save to Cloud" is on, the images and results are stored in our cloud storage under your account.
• Condition Scan: Captured images and capture details are analyzed on our servers to detect defects on your card.
• App Improvement: Usage analytics help us understand how the App and our website are used and improve their features and performance.
• Subscription Management: We use your verified subscription status to unlock Pro features, and we use the stored subscription records to investigate billing or access issues and to understand subscription activity in aggregate.
• Fraud and Abuse Prevention: App Attest protects our servers, including Condition Scan analysis, from requests that do not come from a genuine installation of the App. DeviceCheck helps us detect abuse of our free tier by recognizing returning devices.
• Service Improvement and Machine Learning: Unless you turn off Help Improve Rectifi in the App's settings, we keep a copy of your centering scans, and may add a copy of your Condition Scan captures, to improve our services and train our models. Condition Scan training data can include human labeling. "ML Training Data" in Section 5 explains how these copies are kept and what turning the setting off changes.

3. Third-Party Services

The App and our website use service providers that process data on our behalf. They may use it only to provide their services to us and are required to protect it at least as well as this policy describes:

• Google (Firebase and Google Cloud): account sign-in, storing your scans and images, usage analytics and crash reports, website analytics, app-integrity checks, running our servers, including Condition Scan analysis, and delivering notifications. See Google's Privacy Policy.
• Apple: subscription payments (StoreKit), device-integrity checks (DeviceCheck and App Attest), optional Sign in with Apple, and delivering notifications (Apple Push Notification service). Payment processing is handled entirely by Apple. See Apple's Privacy Policy.

4. Data Storage and Security

Card images and analysis data are stored in our cloud infrastructure, provided by Google, which employs industry-standard encryption for data in transit and at rest. Local copies on your device use Apple's standard data protection mechanisms. Account authentication data is managed securely by our authentication provider.

Rectifi is operated from the United States. Your account information and the photos you upload are processed and stored in the United States by our service providers, including Google Cloud and Firebase. Where data protection law requires it, these transfers rely on Google's standard contractual clauses and its certification under the EU-U.S. Data Privacy Framework and its UK Extension.

5. Data Retention and Deletion

Local Data: Most data stored on your device is removed when you delete the App. Small counters recording your use of free Pro Scans are kept in your device's keychain and are not removed when you delete the App or delete your account, so that reinstalling does not reset your free allowance.

Cloud Data: Card images and analysis data stored on our servers persist after you delete the App. You can delete them in the App's settings at any time: use Delete My Data if you have not signed in, or Delete Account if you have signed in with Apple. Either removes your scans, images and analysis history from our servers. Delete My Data also resets your anonymous account, and Delete Account also removes your sign-in data. If you cannot use either option, contact us at the email address below.

Turning off "Save to Cloud" stops new centering uploads. It does not remove data already uploaded, and Condition Scan always uploads, as described in Section 1.

Information You Send Us: What you send through a form in the App, including any email address you provided, is deleted when you use Delete My Data or Delete Account. Contact us at the address at the end of this policy to have it deleted sooner.

Device Integrity State: Our records of DeviceCheck results are deleted when you use Delete My Data or Delete Account. The state Apple keeps for DeviceCheck is designed to persist after you delete the App, and it is not removed when you delete your data or your account.

Condition Scans: While you have an active subscription, your Condition cards are kept until you delete them. Without an active subscription, each Condition card, including its images and its result, is deleted from our servers 60 days after it was scanned or 60 days after your subscription ended, whichever is later. The App shows the date a card will be deleted, and subscribing before that date keeps it.

Subscription Allowance Records: We retain a limited subscription accounting record indefinitely, including after your subscription ends or you delete your account, to enforce scan allowances and prevent repeated claims of one-time bonuses. It contains the subscription transaction identifier, allowance-period and usage information, accounting timestamps, and bonus records. It does not contain card photos, scan results, card identifiers or your Rectifi account identifier.

ML Training Data: While Help Improve Rectifi is on, we keep a copy of each centering scan's images, including screenshots you import, and its analysis data. That copy carries no account identifier, but while your scan exists it can be matched to it; deleting the scan removes that link. A copy of your Condition Scan images and capture data may also be added. It is separated from your account first: it carries no account, scan, or device identifiers and no precise capture time. While your card exists, Rectifi can attach your later review actions to the data you shared. It is kept under this paragraph, not the "Condition Scans" retention rule, and deleting a scan does not remove it. Data shared through Help Improve Rectifi is kept after you delete your account, with no link to you. Turning the setting off stops new scans from being added; copies already added are kept, and a Condition scan you submitted before turning it off may still be added.

Server Logs: Our servers keep operational logs, which can include your account identifier, to run and troubleshoot the service. They are deleted automatically after 30 days and are not removed earlier when you delete your account.

Analytics: Usage analytics, associated with your app-generated account identifier, are kept indefinitely and are not removed when you delete your account.

6. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Export your data in a portable format
• Opt out of having your scans added to our ML training data

To exercise these rights, contact us at the email address below. Deleting your data or account in the App does not remove the records Section 5 says are kept after deletion. If you make a request under data protection law, we review it against those records and the legal grounds for keeping them.

If you are in the European Economic Area or the United Kingdom, we process your data on these legal bases: to provide the App and the services you request, including scan processing and storage (performance of a contract); to prevent fraud and abuse and to understand how the App is used (our legitimate interests); to add data from your scans, and your Condition Scan review actions, to our ML training data to improve our analysis (our legitimate interests); and to email you about larger plans when a form asks for your email address for that purpose (your consent, which you can withdraw at any time by contacting us). We respond to requests within one month. You also have the right to lodge a complaint with your local data protection authority.

Right to Object: You can object at any time to processing based on our legitimate interests. To stop your future scans and review actions from being added to our ML training data, turn off Help Improve Rectifi in the App's settings. A scan you submitted before turning it off may still be added, and data already added is kept as described under "ML Training Data". To object to other processing, contact us at the email address below.

8. California Privacy Rights

If you are a California resident, you have the right to request disclosure of the categories of personal information we collect and the purposes for which it is used. We do not sell personal information to third parties. To make a request, contact us at the email address below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by updating the effective date at the top of this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

support@getrectifi.com