Privacy policy

Last updated October 8, 2026

This policy explains what information the BountyScope app and the bountyscope.app website collect, how we use it and the choices you have. BountyScope is made by AppZoot Inc. (“we”, “us”), a company based in Alberta, Canada. We handle personal information in line with Canadian privacy law, including Alberta’s Personal Information Protection Act.

You don’t need to give us your name, email address or a password to use the app.
Your camera feed is processed on your phone. We don’t receive it.
A small share of scanned card images is sent to us to improve the scanner. These images are not linked to you or your account.
We don’t sell your information.

Information we collect

Your anonymous account

The first time you open the app, it creates an anonymous account through Google Firebase Authentication. The account is a random ID; it doesn’t contain your name, email address or phone number. Our server stores that ID, whether you use iOS or Android, and the date the account was created. The app uses the account to sign its requests to our server.

Camera

The app asks for camera access so it can scan cards. Finding and identifying the card in the camera image happens on your phone. Camera images are not uploaded, except for the scan feedback described next.

Scan feedback

To make the scanner more accurate, the app sends us an image from a small share of scans (for example about one in a hundred successful scans, plus some scans it could not identify or that you corrected). Each upload contains:

a cropped, straightened image of the card;
sometimes a slightly wider image of the card cut from the camera frame, which can show a narrow strip of whatever is around the card, such as a table or fingertips;
technical details of the scan, such as which card the scanner matched, how confident it was, the app version, the phone model and its operating system version.

We remove the image metadata (such as EXIF data) before storing an upload. Uploads are not stored with your account ID, your IP address or anything else that identifies you, so we can’t tell who sent a given image. We keep these images for up to 36 months.

Scan counts

When you scan a card, our server adds one to an hourly and daily count of scans and their total card value. These totals are not linked to you.

Purchases

If the app offers subscriptions or other in-app purchases, payment is handled by Apple (App Store) or Google (Google Play). We never see your card or payment details. We use RevenueCat to check which purchases are active on your anonymous account; RevenueCat receives the purchase details from the store together with your anonymous ID.

Server logs

Like most web servers, ours record each request they receive, including the IP address, the time, the page or API address requested and the browser or app version. We use these logs to keep the service running and secure, and they are deleted automatically after a limited time.

This website

bountyscope.app doesn’t set cookies of its own and has no advertising trackers. Requests to the site pass through Cloudflare, which protects and speeds up the site and processes your IP address to do so. Cloudflare may set a short-lived security cookie to tell people from bots.

We use Cloudflare Web Analytics to count visits to the website. It doesn’t use cookies or fingerprinting and doesn’t track you across sites. It records the page you visit, the referring site, your browser and device type, your country and how fast the page loaded, and shows us only totals. The app does not use it.

How we use information

To identify cards and show their prices, sales and other details.
To keep your purchases active on your account.
To improve the scanner’s accuracy, using scan feedback images.
To see how many people visit the website and which pages they read.
To protect the service from abuse, for example by limiting how many requests one account can make.
To answer you when you contact us.

Who we share it with

We use these service providers to run BountyScope. They process information only on our behalf:

Google Firebase, for anonymous accounts;
Cloudflare, for network delivery and protection, website analytics and storing scan feedback images;
InMotion Hosting, which hosts our servers;
RevenueCat, for purchases;
Apple and Google, which run the app stores.

Card prices and sales come from third-party market data. Looking up a price doesn’t send any of your information to those sources. We may also disclose information if the law requires it, or to protect our rights or the safety of others. We don’t sell personal information, and we don’t share it for advertising.

How long we keep it

Your anonymous account: until you delete it.
Scan feedback images: up to 36 months.
Server logs: a limited time, after which they are deleted automatically.
Scan counts: indefinitely, as they contain nothing about you.

Your choices and rights

You can delete your account and the data linked to it at any time. See Delete your data for how. You can also ask to see the personal information we hold about you, ask us to correct it, or withdraw your consent to how we use it (which may mean you can no longer use some features). Depending on where you live, you may have other rights too. To make a request, email support@bountyscope.app. We answer within 30 days.

If you’re not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada, or to the privacy authority where you live.

Children

BountyScope is not directed at children under 13, and we don’t knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Where information is processed

We are based in Canada, but our servers and our service providers (Google, Cloudflare, InMotion Hosting and RevenueCat) are mainly in the United States and may also process information in other countries. Information stored outside Canada is subject to the laws of the country where it is held, and courts, law enforcement and national security authorities there may be able to access it. To ask how our service providers outside Canada handle your information, email support@bountyscope.app.

Security

All traffic between the app or website and our servers is encrypted, and access to our systems is restricted. No method of transmission or storage is completely secure, but we work to protect the information we hold.

Changes to this policy

If we change this policy, we will update it on this page and change the date at the top.

Contact

Our privacy contact answers questions about this policy and requests about your information: support@bountyscope.app.