1. Privacy Policy
Effective date: 2026-11-07
Last updated: 2026-11-07
GradeVu LLC ("GradeVu," "we," "us," or "our") operates the GradeVu mobile application and the website at gradevu.com (together, the "Service"). This Privacy Policy explains what we collect, how we use it, who receives it, how long we keep it, and the choices you have.
Contact:
GradeVu LLC
100 Plaza Pl, Ste 300, PMB 58
Northlake, TX 76226, USA
Privacy: privacy@gradevu.com
Support: support@gradevu.com
1. Scope
The Service is offered only in the United States.
This Policy does not apply to third-party sites or apps we link to, including Apple's services.
2. Information we collect
(a) Account and sign-in information. When you sign in with Apple, we receive an Apple-generated user identifier and, if Apple shares them with us, your name and email address. If you use Apple's Hide My Email, we receive an Apple private relay address rather than your real address. We store your account identifier, display name, and the email or relay address on file, and we use that address to send you account and report emails and to answer your requests. You can also sign in with your email address: we email you a one-time code, and we keep that address on file with your account. If you delete the app but not your account, your account remains.
(b) Card photos and capture details. When you scan a card, we collect the photographs you take or select, including front, back, corners, edges, and surface images; and capture details such as the scan session identifier, the order of images in a session, the device model you used, the app version, and technical image characteristics used to check photo quality. We may store a downscaled working copy alongside the original. We do not request or use precise location. If an image contains location metadata such as GPS coordinates, we don't accept it, so no location is stored.
(c) Corrections and annotations. If you correct an estimate, label a defect, mark a centering measurement, or leave notes, we store those corrections, labels, and annotations and link them to the underlying images and to your account.
(d) Usage data. We collect in-app events such as screens viewed, features used, scans started and completed, estimates viewed, and session times. We use this to operate, secure, and improve the Service. If you are an invited beta tester, we may also record your app sessions, including what appears on screen, and link those recordings and your events to your account.
(e) Diagnostics. We collect crash logs, error reports, performance timings, device model, operating system version, app version, language, and IP address. IP addresses are used for security, rate limiting, and coarse region checks (United States only).
(f) Support communications. If you email us, we keep your message, attachments, and our reply.
(g) Public content. If you publish a certificate page, create a profile, or post in community features, we store and display that content as described in Section 8.
(h) Certification numbers. If you add a grading company's certificate number to a card, we store it with that scan. We send it to that company's public verification service, or to a web data collection provider acting on our instructions, to retrieve the public record for that card. Certificate numbers are generally not personal information about you, but we treat them as your data.
(i) Condition Call calls. If you play Condition Call, our website game, we may collect the calls you make and when you made them, with any details you add, such as which face decided your call or the spots you tapped. You can play without an account, and calls made without one are not linked to an account. When you play signed in to your GradeVu account, we store them linked to your account; Section 4 explains how we use them.
What we do not collect: precise geolocation, contacts, calendars, health data, biometric templates (Face ID and Touch ID stay on your device), advertising identifiers, or browsing activity in other apps. We do not track you across other companies' apps or websites, we do not run third-party advertising SDKs, and we do not sell personal information.
3. How we use information
Purpose Data used
Create and secure your account; sign you in Account and sign-in data
Generate estimates, sub-scores, and defect reports Card photos, capture details
Show your scan history and certificates Photos, capture details, corrections
Improve accuracy for your account (e.g., re-run estimates as models improve) Photos, corrections
Operate, debug, and secure the Service; prevent abuse and fraud Usage data, diagnostics, IP
Provide support Support communications
Publish certificate pages you choose to publish Public content
Moderate community content and enforce our Terms Public content, usage data, reports
Research, model training and evaluation, and Condition Call — part of using the Service (Section 4) Photos, capture details, corrections, Condition Call calls, derived data
Create, use, license, and commercialize de-identified and aggregated data See Section 5
Legal compliance, tax, and enforcing our rights As required
4. Model training is part of using GradeVu
We use your card photos, capture details, corrections, labels, annotations, and Condition Call calls, and the data we derive from them, for research and evaluation — for example, measuring how our models perform across card types, print runs, and lighting conditions — and to train, fine-tune, evaluate, and improve machine-learning models that we use in GradeVu and that we may license or otherwise commercialize, including models offered to third parties. Your card photos may also appear in Condition Call, our website game, for other players to call. This covers everything you share with GradeVu in the app, on the website, and in the game, whenever you shared it.
This is a condition of using the Service, and it cannot be turned off. Before your first upload, the app tells you plainly that your card photos are used this way. If you do not want your photos used to train our models, do not upload them. You can delete scans or your account at any time (Section 8); Section 6 explains what deletion does not undo.
5. De-identified and derived data
We generate De-Identified Data: numeric and statistical outputs derived from scans — for example, measured centering ratios, edge-wear scores, defect counts by card type, model confidence values, and aggregate accuracy statistics — and other data derived from your scans and corrections, such as features, embeddings, and labels, kept without your account identifier, name, or email. We use De-Identified Data to monitor model performance, produce internal reports, and improve our models. We may also create, use, retain, disclose, publish, license, sell, and otherwise commercialize De-Identified Data and aggregated data for any lawful business purpose, including research, product development, and marketing.
De-Identified Data does not include your card images, your corrections text, your account identifier, your name, or your email. We commit not to attempt to re-identify it, and we require anyone we disclose it to, by contract, not to re-identify it either. We treat card images as linked to your account until you delete them; Section 4 explains how we use them.
6. What deletion does not undo
Deleting a scan or your account does not require us to retrain, recall, untrain, or delete models that were already trained with your data, and we may keep using those models. Trained models do not store retrievable copies of your photos, and they cannot be un-taught. This is a material term of the Service and is stated again in the Terms of Use.
If you want your photos deleted entirely, use the in-app deletion controls or delete your account (Section 8).
7. Retention
Data Retention
Card photos and capture details Until you delete them or delete your account
Corrections and annotations Same as the linked photos
Account and sign-in data While your account is open, then 30 days after deletion
Research, training, and evaluation datasets Your photos and corrections stay in them until you delete them or your account, then are removed in the next scheduled dataset refresh (within 90 days); De-Identified Data in them and already-trained models are kept
Usage data 24 months
Diagnostics and crash logs 12 months
Support emails 24 months
Tax and legal records As required by law
De-Identified Data and trained models Retained indefinitely (not personal information)
Backups Purged on a rolling 90-day cycle
8. Account deletion, and what survives it
You can delete your account in-app at Settings → Account → Delete Account, or by emailing privacy@gradevu.com from your registered address. We will verify and process the request within 30 days (45 days where a state law allows an extension, with notice).
On deletion we delete your account record and sign-in identifiers, your original photos and any working copies, your scan history, and your profile, and we delete or de-identify your corrections and annotations.
What may survive deletion, and why:
De-Identified Data (Section 5) — it is not linked to you and cannot be used to identify you.
Derived data — measurements, features, embeddings, and labels derived from your scans and corrections, kept as De-Identified Data without your account identifier.
Already-trained models — a trained model does not contain a retrievable copy of your photos.
Published certificate pages you made public — these are public records by design. Deleting your account unpublishes them and removes your display name, but we may retain a minimal, non-identifying record of the certificate identifier and outcome for integrity and anti-fraud purposes. See the Public Certificate Page Notice.
Records we must keep — tax, accounting, and legal-hold records.
Copies in research and training datasets — removed in the next scheduled dataset refresh (within 90 days).
Residual backups — purged within 90 days.
We may keep and continue to use what survives, as Sections 4 and 5 describe. We do not keep using your photos, your account, or anything else linked to you after deletion, except the records the law requires us to keep, copies in research and training datasets until that refresh, and backups until they are purged.
9. Who receives information
We share personal information only with:
Our affiliates — companies under common control with GradeVu, for the purposes in this Policy.
Apple — Sign in with Apple, App Store distribution, and push delivery.
Hosting, storage, and database providers — cloud infrastructure that stores images and account records on our behalf (Cloudflare).
GPU and compute providers that run our models — Runpod runs GradeVu's own models on our instructions: our own models, on infrastructure we control.
Grading companies' public verification services and web data collection providers — to retrieve the public record for a certificate number you add. Oxylabs, a web data collection provider acting on our instructions, retrieves those records.
Diagnostics and analytics providers — crash reporting and product analytics, configured without advertising identifiers and without cross-app tracking. For invited beta testers, PostHog records app sessions and events linked to the tester's account.
Email and support providers — to send transactional email and answer your requests.
Moderation and trust-and-safety providers — to screen public content and detect abuse.
Professional advisers, auditors, and insurers — under confidentiality.
Authorities and counterparties in a corporate transaction — where legally required, or in connection with a merger, financing, acquisition, or sale of assets, including a transfer of the Service or of GradeVu's business.
Other users — the public content you choose to publish, and your card photos, which may appear in Condition Call, our website game, for other players to call.
We do not sell personal information, do not share it for cross-context behavioral advertising, and do not disclose it for targeted advertising. De-Identified Data and aggregated data are not personal information; we may share, license, or sell them as Section 5 describes.
10. Your privacy rights
Depending on your state of residence (for example California, Texas, Colorado, Virginia, Connecticut, Utah, Oregon, Montana, and others), you may have the right to:
Know and access the personal information we hold about you and how we use and share it;
Correct inaccurate personal information;
Delete personal information, subject to exceptions;
Port a copy of certain information in a machine-readable format;
Opt out of sale, sharing for targeted advertising, and certain profiling — we do none of these, so there is nothing to opt out of;
Limit use of sensitive personal information — we do not collect sensitive personal information as defined by these laws;
Non-discrimination for exercising your rights;
Appeal a refusal — reply to our decision with "Appeal" and we will respond within the period required by your state's law;
Use an authorized agent, with proof of authorization.
To exercise any right, use the in-app controls or email privacy@gradevu.com. We will verify your identity using your account and sign-in method and respond within 45 days. California residents: we have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months.
11. Security
We use encryption in transit, encryption at rest for stored images, access controls, and least-privilege internal access. No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as required by law.
12. International transfers
We provide the Service in the United States only. We store and process data in the United States. If you access the Service from outside the United States, you do so on your own initiative and the Service is not intended for you.
13. Cookies and tracking
Our website uses only strictly necessary cookies and basic first-party analytics. We do not use advertising cookies, we do not use pixels that build cross-site profiles, and we honor Global Privacy Control signals where technically applicable. The app does not track you across other companies' apps or websites.
14. Changes
We may change this Policy at any time by posting the updated version here and updating the date above. Changes take effect when posted, and your continued use of the Service after that means you accept them. Where the law requires it, we will also notify you of a material change, for example in the app, and ask for your consent.
15. Complaints
Contact privacy@gradevu.com first. You may also complain to your state attorney general, or in California to the California Privacy Protection Agency.