Privacy Policy
The short version
Your collection, chase list, goals and card photos live on your iPhone. SlabVanta has no user accounts yet.
When you scan a card or check a market value, the photo or the card details are sent to our server and to an AI provider to produce the result.
We do not sell your information, show ads, or use advertising or analytics trackers.
This Privacy Policy explains how SlabVanta AI (“SlabVanta,” “we,” “us”), the iPhone app and the website at slabvanta.com, handles information. SlabVanta AI is operated by Eric Morris, an individual developer in the United States. By using the app or website you agree to this policy.
1. Information the app keeps on your device
These stay in the app’s storage on your iPhone and are not uploaded to a SlabVanta account, because accounts do not exist yet:
- Your collector profile and preferences (collector type, sports, favorite players and teams, budget, goals).
- Your collection, chase list, goals, saved searches, saved deals, value history, alerts, notification settings and scan history.
- Photos of your cards that you take or choose, including the copies the app resizes and stores for display.
Deleting the app, or using Profile → Privacy → Delete all my data, removes this information from your device. Because it is only on your device, we cannot recover it for you, so use the backup and export tools in Profile if you want a copy.
2. Information sent to our servers
The app contacts our server only when you use a feature that needs it:
| Feature | What is sent | Why |
|---|---|---|
| Scanning a card | A resized copy of the card photo (a JPEG up to about 1280 pixels wide). | To identify the card. |
| Market check and Deal Intelligence | Card details (player, year, set, number, parallel, grade) and, for deal explanations, the figures the app calculated. | To research an estimated value and explain a deal. |
| Listing drafts and hold/sell advice | Card details and your own price or cost figures. | To draft text or explain advice. |
| Every request | Your invite code, and the technical details any internet connection reveals (such as your IP address and the time of the request). | To let only invited testers in, prevent abuse, and keep the service running. |
Our server does not save your card photos. It passes them to the AI provider described below, receives the answer, and returns it to your phone.
Server logs. We keep operational logs that record the time, the type of request, its size, how long it took, and whether it succeeded or failed. We design these logs to exclude photos, your invite code and API keys. They are used to fix problems and detect abuse and are kept for a limited time.
3. Service providers who process information for us
- Anthropic provides the AI that reads card photos, researches market values (including web search), and writes explanations. Photos and card details sent to our server are forwarded to Anthropic through its API. Anthropic’s handling is governed by its own commercial terms and privacy policy, which describe retention and state that API content is not used to train its models by default. Review them at anthropic.com.
- Neon (a Databricks company) hosts our server in the United States.
- Hostek hosts this website and handles the messages sent through the contact form.
- Apple distributes the app (TestFlight or the App Store) and may provide us with limited crash and feedback reports according to your Apple settings.
Market estimates are AI web research. When an estimate cites web sources, the links and titles are shown to you; opening a link takes you to that website under its own policies.
4. The website and contact form
The website uses no cookies, advertising trackers or analytics. Our hosting provider keeps standard web server logs (such as IP address, pages requested and time).
If you use the contact form we receive the name, email address, topic and message you enter, plus your IP address and the time. We use them only to answer you, to keep a record of the conversation, and to prevent spam and abuse. We keep contact messages for up to 24 months unless you ask us to delete them sooner. The form is protected by anti-spam checks, including a hidden field and rate limits.
5. How we use information
- To provide the features you ask for: identifying cards, estimating values, and explaining deals.
- To keep SlabVanta secure, prevent misuse and control costs.
- To fix bugs and improve the product, using aggregate operational data.
- To answer your messages and meet legal obligations.
We do not sell your personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles.
6. Personalization stays on your device
MyIQ suggestions and your collector identity are worked out on your phone from the information in section 1. The optional “Learn from my collection” setting uses only cards already in the app, runs on the device, and can be turned off at any time.
7. Notifications
Notifications are generated on your device. They only appear if you allow them in iPhone settings, and you can turn them off at any time. We do not use push notification servers.
8. Your choices and rights
- Access and deletion. Your app data is on your device and under your control. Use Profile to export, back up, or delete it.
- Camera and photos. The app asks for camera and photo access only to scan cards. You can change this in iPhone Settings, and you can enter cards by hand instead.
- Contact data. You can ask us to access, correct or delete a contact message by writing through the contact page.
- Regional rights. If you live where laws such as the California Consumer Privacy Act or the EU/UK GDPR apply, you may have rights to know, correct, delete or restrict the use of your personal information, and to object or complain to a regulator. We will respond to verified requests made through the contact page.
9. Children
SlabVanta is not directed to children under 13 and we do not knowingly collect personal information from them. People under 18 should use SlabVanta with a parent or guardian’s permission. If you believe a child has sent us personal information, contact us and we will delete it.
10. Security
We use encrypted connections (HTTPS) between the app, the website and our servers, keep secret keys on the server rather than in the app, limit what we log, and restrict access to the service with invite codes. No system is perfectly secure, so please do not send sensitive information through the contact form.
11. International use
SlabVanta is operated from the United States and our providers process information in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.
12. Changes to this policy
We may update this policy as the app grows (for example when accounts, cloud sync or paid plans arrive). We will change the effective date above and, for material changes, tell you in the app or on this site before they apply.
13. Contact
Questions or requests about privacy: use the contact page and choose “Privacy or data request.”