GradeIQ Privacy Policy

Kejani ("Kejani," "we," "us," or "our") operates GradeIQ, including the GradeIQ website, Android application, and iOS application (together, the "Services"). This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices available to you when you use the Services.

GradeIQ provides AI-assisted sports-card and trading-card-game (TCG) scanning, card identification and value-estimation features, together with related AI features. Please read this policy with the Terms of Service.

1. Information We Collect

1.1 Account and subscription information

When you create or use a GradeIQ account, we may collect your email address, account or authentication identifiers, display name if you choose to provide one, account preferences, and information needed to provide your account across the website and mobile applications. We also process your plan, entitlement, subscription status, and transaction references so that we can provide paid features.

Payments are handled by the applicable payment provider or app store. We do not intentionally collect or store your full payment-card number. We may receive limited billing information, payment status, and transaction or subscription identifiers from the payment provider.

1.2 Information you send to us

We collect information you choose to provide when you contact support, submit feedback, report a problem, or otherwise communicate with us. This may include your email address, the contents of your message, and attachments or diagnostic details that you choose to send.

1.3 Card scans and AI feature inputs

GradeIQ is designed so that your card images, card data, and scan results are stored locally on your device rather than in your GradeIQ account or on our servers. We do not intentionally store that card data on our servers after a requested feature has finished processing.

Some AI-assisted features may need to send a selected image, prompt, or other input to our processing systems or a third-party AI, recognition, or pricing provider to return the result you requested. We send only what is needed for that request and do not use your card scans to build an advertising profile. Do not include sensitive personal information in an image or prompt unless it is necessary for the feature.

1.4 Device, technical, and usage information

When you use the Services, we and our service providers may receive technical information such as app version, device type, operating-system version, browser type, approximate region, timestamps, crash or performance information, IP address, and security or diagnostic logs. We use this information to operate, secure, troubleshoot, and improve the Services.

1.5 Product analytics

We use Mixpanel to understand how people use GradeIQ and to improve the product. We configure product analytics events not to include your email address, name, or GradeIQ account identifier, and we do not intentionally link these events to your account identity. Mixpanel may still process a pseudonymous or device-based identifier, event details, and technical information needed to provide analytics.

The Kejani website may also use Vercel Analytics and standard hosting and security logs to understand aggregate website usage and reliability. These tools may process request, browser, device, and page information. We do not use your card data for advertising.

1.6 Device fingerprinting

If the Kejani device-fingerprint diagnostic page is enabled, it uses FingerprintJS Pro to generate a pseudonymous visitor identifier from device and browser characteristics. We use this information only for the page's stated device-identification, security, abuse-prevention, or troubleshooting purposes. The identifier may be processed by FingerprintJS Pro as our service provider. We do not use it to estimate card values or sell it for advertising.

Fingerprinting may continue to recognize a browser or device even when cookies are disabled. We retain identifiers and related logs only for as long as reasonably necessary for the stated purpose, security, legal obligations, or dispute resolution, subject to the settings and retention terms of the applicable provider.

2. How We Use Information

We use information for the following purposes:

• To create, authenticate, maintain, and secure your GradeIQ account.
• To provide card scanning, identification, value-estimation, and other AI-assisted features.
• To provide access to paid plans, confirm entitlements, and process or support transactions.
• To respond to support requests and communicate about the Services, security, or material changes.
• To measure performance, diagnose errors, prevent abuse, and improve the Services.
• To comply with legal obligations and protect our rights, users, and systems.

We do not sell your personal information. We do not use your card scans or scan results for targeted advertising.

3. When We Share Information

We may share the minimum information needed with the following categories of recipients:

• Service providers: hosting, authentication, databases, customer support, security, analytics, and infrastructure providers that process information for us.
• Fingerprinting providers: FingerprintJS Pro, if the device-fingerprint diagnostic page is enabled, for the purposes described above.
• AI, recognition, and pricing providers: when needed to process an AI feature, image, prompt, card-identification request, or value-estimation request that you initiate.
• Payment providers and app stores: to process purchases, verify subscriptions, prevent fraud, and provide refunds or billing support.
• Legal and safety recipients: when reasonably necessary to comply with law, enforce our terms, investigate abuse, or protect people and the Services.
• Business-transfer recipients: if Kejani is involved in a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law.

Our service providers may process information in countries other than the country where you live. We require appropriate contractual, technical, or organizational protections where applicable.

4. Cookies and Similar Technologies

The website and its providers may use cookies, local storage, pixels, or similar technologies for essential functionality, security, preferences, analytics, and performance. You can manage cookies through your browser settings, but disabling essential technologies may affect the website.

5. Retention and Deletion

We retain account and support information for as long as needed to provide the Services, comply with legal and accounting obligations, resolve disputes, enforce agreements, and protect against fraud or abuse. When you delete your account, we delete or de-identify the account information associated with it within a reasonable period, except for limited information that we must retain for those legitimate purposes.

Aggregated or de-identified analytics that cannot reasonably be linked back to you may remain. Card images, card data, and scan results stored locally on your device are not deleted by a server-side account deletion; you can delete those files from the device or uninstall the app.

To delete your GradeIQ account, visit our Account Deletion page and follow the steps. If you cannot sign in, contact us at kejani29@proton.me.

6. Your Choices and Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of certain personal information, object to or withdraw consent for certain processing, and complain to a data protection authority. We will respond to valid requests as required by applicable law.

To make a request, use the account controls on the website or email kejani29@proton.me. We may need to verify your identity before completing a request. Deleting your account does not automatically delete locally stored device data or necessarily cancel a recurring payment; manage those separately as described at checkout and on the Account Deletion page.

7. Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

8. Children's Privacy

The Services are not directed to children under 13, or the higher minimum age required in a particular jurisdiction. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact us so we can review and delete it where required. We do not knowingly use a child's personal information for targeted advertising.

If we learn that we collected personal information from a child in circumstances requiring parental consent, we will stop the affected collection or use, take reasonable steps to verify the parent's request, and delete the information unless retention is legally required. A parent or legal guardian may contact us at the address below to request access to or deletion of a child's information. This section does not replace any age-screening, parental-notice, or verifiable-consent process required by applicable law.

9. Changes to This Policy

We may update this Privacy Policy when our Services or legal obligations change. We will post the updated policy here and revise the effective date. Material changes may also be communicated through the Services or by email when appropriate.

10. Contact Us

For privacy questions, requests, or complaints, contact Kejani at:
kejani29@proton.me