PULL.

Privacy

Draft: a plain-English summary of how Pull works today. The full legal text is being reviewed.

Your photos

A photo of a card is sent to us only to identify the card and find its price. We keep a fingerprint of the image (a short number used to recognise the same card faster), not the photo. Scans stay on your phone for 30 days so you can fix them, then they’re deleted. If you ask us to add a card we don’t have yet, we keep that photo privately until the card is added, then delete it.

Your account

Pull starts without an account: your vault lives on your phone. If you save it with an email, we use that email only to log you in. We never send marketing email.

Kids

We ask for a 2-year age range, never your birthday or birth year. For anyone under 18 (or whose age we don’t know yet): no public links, values hidden on showcases, no notifications during school hours, and trades wait for a parent’s approval. Under-13s also never show prices in shares, and get no personal analytics profile or location.

What’s public

Only what you choose to share: a share link, or your showcase if you set it to “anyone with link”. Showcases are never listed in search engines.

Payments

Subscriptions go through the App Store, Google Play or our web billing partner. We never see your card number.

Your data is yours

Export your whole collection as CSV at any time (free, always). Deleting your account deletes your vault and everything linked to it.

Questions

Email privacy@pull.gg.