Updated August 28, 2026

Privacy Policy

1. What we collect

Breakalytix collects the minimum data needed to deliver the service:

• Card and lot images — photos you submit for analysis are transmitted to OpenAI's API for AI identification. They are not intentionally stored on our servers after analysis is complete.
• Sourcing and tracker records — signed-in cards, budgets, purchases, sales, adjustments, and decisions may be cached on your device and synced to our cloud database (Supabase) under your user ID. Guest tracker entries are temporary and are not intended to persist between visits.
• Account information — if you sign up, we store your email address. Authentication is handled by Supabase Auth.
• Session cookies — a signed HttpOnly cookie tracks guest scan usage for rate limiting. It contains only a random ID and is never shared.

2. How we use your data

• To identify sports cards and visible lot contents using OpenAI AI models.
• To calculate informational resale estimates and store or sync sourcing and tracker records for signed-in users.
• To enforce the free-tier scan limit (5 free scans per month; resets on the 1st of each month).
• We do not sell, share, or use your data for advertising.

3. Third-party services

• OpenAI — submitted card or lot images and related prompts are sent to OpenAI's API for analysis and handled under OpenAI's applicable privacy policy and API data practices.
• Supabase — cloud database and authentication provider. The current project is hosted in the United States (US West).
• Google Fonts — Inter font is loaded from Google Fonts CDN.

4. Data retention

Breakalytix does not intentionally retain submitted images after the analysis request completes. Device-cached data remains until it is cleared by the Service or by your browser. Cloud-synced account data is generally retained while your account is active or until deletion is requested, subject to security, backup, fraud-prevention, and legal retention needs.

5. Your rights

You may download available exports or backups, clear browser site data, and request deletion of cloud-stored account data through the contact method provided by Breakalytix. Depending on your location, applicable law may provide additional rights to access, correct, delete, or obtain a copy of personal information.

6. Children

Breakalytix is not directed at children under 13. We do not knowingly collect personal information from children.

7. Contact

For privacy questions, contact us through the app or at the email listed in the app store listing.