Genivox Limited (“we,” “our,” or “us”) operates Grail, a mobile application for scanning, identifying, organising and valuing trading cards. This Privacy Policy explains what information the App handles, where it goes, and what we do and do not keep.
The short version
Your card collection lives on your phone, not on our servers. We have no user accounts, so we never learn your name, email address or payment details. Card photos are sent to Google’s AI only at the moment you scan a card, and are not stored by us afterwards. We do not run ads, we do not sell data, and we do not track you across other apps or websites.
By downloading and using Grail, you agree to this Privacy Policy. If you do not agree, please do not use the App. We may change this policy from time to time. If a change materially affects your rights, we will make the updated policy available in the App and on this page before it takes effect.
You must be 13 years or older to use Grail. If you are at least 13 but under 18, please review this Privacy Policy with a parent or legal guardian before using the App.
We are aware that trading cards are popular with children. Grail is not directed at children under 13, and we do not knowingly collect information from them. Because the App has no accounts and no sign-up, we do not collect names, ages, email addresses or any other information that would identify a child. If you believe a child under 13 has provided us with information, contact us and we will delete it.
When you scan a card, the App captures a photo using your camera, or reads one you choose from your photo library. These photos are saved on your device only, inside the App’s private storage.
A card photo leaves your device in one situation: when the App asks our AI identification service to recognise the card. This is described in section 4.
We do not ask for, want, or knowingly process photographs of people. Grail is built to photograph trading cards. We perform no face detection, no facial geometry measurement and no biometric analysis of any kind.
Card names, sets, numbers, conditions, quantities, notes, prices and grading reports are stored in a database on your device. This data is not uploaded to us, is not backed up to our servers, and is not visible to us or anyone else. There is no account and no cloud sync.
Your collection is included in your device’s own iCloud or iTunes backups if you have those enabled. Those backups are controlled by Apple and by you, not by us.
We, and the service providers listed in section 5, may receive:
Grail does not collect any of the following:
Grail uses artificial intelligence in three separate places. They behave differently, and only one of them sends anything off your device.
The App reads the text printed on a card (its name, set code and collector number) using Apple’s built-in Vision text recognition, which runs entirely on your iPhone. Nothing is uploaded and no internet connection is required for this step.
To identify a card accurately, the App sends the photo of that card to our own secure server function, which forwards it to Google’s Gemini AI model. Gemini analyses the image and returns structured text describing the card: the game, the card name, the set, the collector number, the rarity and, for sports cards, the player and year.
What this means in practice:
If you do not want a photo processed this way, do not scan that card. You can still add cards manually using the search function, which sends only text.
The App’s condition and centering analysis examines the pixels of your photo directly on your iPhone to measure borders, corners, edges and surface. This runs locally. The photo is not uploaded for this feature, and the resulting report is stored only on your device.
This analysis is an automated estimate produced by software. It is not a professional grading service, it is not affiliated with PSA, BGS, SGC, CGC or any grading company, and it must not be relied on as an appraisal. See our Terms of Use for details.
We do not sell or rent your information. The App relies on the following services, and this is everything each one receives:
| Service | Why it is used | What it receives |
|---|---|---|
| Google Gemini (via our server) | Identifying a scanned card | The photo of the card. No identifier, no collection data. |
| Google Firebase (App Check, Remote Config) |
Verifying requests genuinely come from the App, and delivering configuration such as pricing | A device attestation token and an anonymous installation ID. No photos, no collection data. |
| Superwall | Understanding how the subscription screen performs | Anonymous app and purchase events, device model and OS version. No photos, no collection data, no advertising identifier. |
| eBay and JustTCG (via our server) |
Looking up current market prices | The card name, set and number being priced. Nothing about you or your device. |
| Card databases (TCGdex, Scryfall, YGOPRODeck, Lorcana API, OPTCG API) |
Looking up official card details and images | The card name or number being searched. Nothing about you or your device. |
| Apple | Processing subscriptions | Handled entirely by Apple under Apple’s privacy policy. We receive only whether a subscription is active — never your payment details. |
Grail contains no advertising, no advertising SDKs and no attribution or ad-measurement services. We do not access your Advertising Identifier (IDFA), and the App therefore does not show the “Allow app to track” prompt.
We do not track your activity across other companies’ apps or websites, and we do not share any information with data brokers.
Your photos, your collection and your grading reports are stored on your device. We operate no database, no image storage and no user accounts, so there is no copy of your collection for us to lose, disclose or be compelled to hand over.
The server functions that pass requests to Google, eBay and JustTCG are hosted on Google Cloud in the United States. They are stateless: they receive a request, forward it, return the answer and retain nothing. If you use the App from outside the United States, these requests are processed there.
Because your data is stored on your device, you control it directly:
Card photos sent for AI identification are not retained by us at any point, so there is nothing for us to delete on your behalf. Anonymous analytics events already collected cannot be tied back to you, and so cannot be individually identified or removed.
All communication between the App and our servers uses encrypted HTTPS connections. Requests to our server functions are verified using Apple’s App Attest through Firebase App Check, so they can only be made by a genuine copy of the App. API credentials are held on our servers and are never included in the App.
We apply reasonable, industry-standard measures to protect information, but no method of transmission or storage is completely secure.
Depending on where you live, you may have rights to access, correct, export, restrict or delete personal information we hold about you, and to object to its processing.
In practice, Grail holds no personal information about you: there is no account, and your collection never leaves your device. You can exercise the equivalent of all of these rights yourself at any time by viewing, editing or deleting your data in the App. If you have a question about your data or wish to make a formal request, contact us at hgappleacc@icloud.com and we will respond within 30 days.
Genivox Limited is established in Hong Kong SAR. Requests made by the App are processed on servers in the United States, which may be outside your country of residence. Where required, we rely on appropriate safeguards for these transfers.
This Privacy Policy is governed by and interpreted in accordance with the laws of the Hong Kong Special Administrative Region, without regard to its conflict of laws principles.
We may update this Privacy Policy as the App changes. The date below shows when it was last revised. Material changes will be communicated in the App.
For any question about this Privacy Policy or your data, contact us at hgappleacc@icloud.com.
By using Grail, you agree to this Privacy Policy.