Sleevit is operated by Sleeve & Ink LLC ("Sleevit", "we", "us"), based in the United States. This Privacy Policy explains what information the Sleevit app collects, how we use it, who we share it with, and the choices you have. We aim to collect the minimum data needed to run the app well, and we do not sell your personal data or use it for third-party advertising.
Account info: email, username, and optional display name, bio, and avatar/banner images.
Collection data: binders, scanned cards, wishlist items, tags, price alerts, and (for storefronts) listings and prices you create.
Scan & camera data: photos you take while scanning, the predicted and confirmed card identity, and an anonymized image embedding (a vector of numbers used to match cards). You can opt out of contributing scan photos to model training in Settings → Privacy → Data Sharing.
Photos you upload: images you choose from your photo library for avatars, binder covers, or card art. We only access photos you explicitly select.
Location data: if you grant permission, we use your device location to show nearby card shops and events on the community map. You can decline or revoke this in your device settings; the rest of the app still works.
Social content: posts, comments, likes, follows, and blocks you create, which are visible to others according to your privacy settings.
Usage data: anonymized analytics about how you interact with the app (screens visited, features used), captured via PostHog.
Device & diagnostic data: device model, OS and app version, a push-notification token, and crash/error reports.
Subscription data: subscription status and entitlements via RevenueCat.
Vendor data (vendors only): business information needed for identity verification and payment processing through Stripe.
To operate and improve the app, sync your collection across devices, show nearby shops and events, deliver notifications and price alerts you opt into, process subscriptions and vendor payments, prevent fraud and abuse, and respond to support requests.
We also use scan photos (from users who have not opted out) and the associated match data to train and improve our card-recognition models. We do not sell scan photos, and we do not use them for advertising.
We share data with the following providers strictly to provide the service:
• Supabase — authentication, database, and file storage • RevenueCat — subscription management • PostHog — product analytics • Sentry — crash and error reporting • Firebase Cloud Messaging (Google) — push notification delivery • Stripe — vendor identity verification and payment processing • Apple App Store / Google Play — subscription billing • Card data APIs (e.g. pokemontcg.io, Scryfall, TCGdex, Bandai catalogs) — card lookups; we send card identifiers, not your personal info • Canny — feedback board (only data you submit there)
Each provider has its own privacy policy. We do not sell your personal data to advertisers.
We send transactional messages required to run the app (e.g. order receipts, security notices, and push notifications you enable). With your consent we may also send occasional product or marketing emails; you can opt out at any time via the unsubscribe link in those emails or in Settings. Turning off marketing does not stop essential transactional messages.
Sleevit does not run third-party advertising and does not track you across other companies’ apps or websites. Our analytics (PostHog) are first-party and used only to improve Sleevit. Because we do not use your device advertising identifier for tracking, we do not show the App Tracking Transparency prompt.
Sleevit is not intended for users under 13. We require age confirmation at signup. If we learn we have collected data from a user under 13, we will delete it.
We use industry-standard practices including TLS encryption in transit and Supabase Row-Level Security to limit data access. No system is perfectly secure; we encourage strong passwords and ask that you notify us of suspected breaches.
We keep your data for as long as your account is active. When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required by law (for example, transaction records).
You can access, correct, or delete your data through Settings, or by contacting privacy@sleevit.app. Users in the EU/UK have additional rights under GDPR (access, rectification, erasure, portability, objection); users in California have additional rights under the CCPA/CPRA, including the right to know and delete and the right not to be discriminated against for exercising them. We do not sell personal information. Email us to exercise any of these rights.
Sleevit is operated from the United States. By using the app, you consent to the transfer of your data to the U.S. Where required, we rely on standard contractual clauses for international transfers.
We will post any updates here and notify users of material changes in-app or by email. The "Last updated" date above reflects the latest revision.
Sleeve & Ink LLC Privacy questions: privacy@sleevit.app General support: support@sleevit.app