Your collection. Your choices.
Privacy Policy
Effective September 28, 2026
Chron Studios LLC operates Grandfolio, an iOS app for discovering and collecting One Piece trading cards. This policy explains how the app and our support service handle information. Contact support@getgrandfolio.com with privacy questions or requests.
Information you provide
- Account and profile: email address, authentication and account identifiers, username, optional display name, bio and chosen avatar. Sign in with Apple may provide a relay email address. We do not receive your Apple password.
- Your collection: exact card printings, quantities, condition/grading, optional prices paid and custom values, Wishlist, favorites, set goals, scanning/addition receipts and preferences.
- Social features: friend requests, sharing choices, blocks, messages, reactions, read status and reports, including the content needed to review a report.
- Optional features: notification settings and device push/installation identifiers; taste choices and feedback; verified App Store transaction and entitlement information when purchasing or restoring Pro. Apple handles payment details; Grandfolio does not receive your payment card number.
- Support: your email, message and attachments you choose to send. Please do not send passwords, payment details or unnecessary personal information.
Camera, photos and searching
Camera recognition and artwork comparison run on your iPhone. Grandfolio does not upload camera photos or video for card recognition. If you enable personalized JEV insights, optional scan refinement can send recognized text and candidate card information to TypeSafe/JEV; text recognition may include background text, so keep unrelated documents out of view. A profile photo you deliberately choose is uploaded to our private storage. Granting camera access is optional; manual card search remains available.
Search terms and filters go to our backend to retrieve matching cards. Recent searches, artwork caches, appearance settings and pending edits are also stored on your device. Guest browsing uses public catalog data without creating an account. Account features require sign-in.
How information is used and shared
We use this information to authenticate you, synchronize your cards, show prices, provide the features you select, verify purchases, prevent abuse and answer support requests. Collections start private. You choose which accepted friends can see your collection; the shared view excludes prices you paid and custom values. Profile identity can appear in social discovery. Messages are available to their participants. Blocking stops new contact and collection access but does not erase previous chat history. Recipients can retain information they have already seen or copied.
Supabase provides our authentication, database, file storage and backend functions. Apple provides sign-in, App Store purchases, push delivery and operating-system services. Resend delivers account emails. Cloudflare hosts our public pages and routes support email to our support inbox, which uses Google Gmail. These services process the information necessary to perform those tasks, including network and security information such as IP addresses.
TypeSafe/JEV personalization is optional and off until you allow it. With permission, we send card and price facts, owned quantities, Wishlist, favorites, collecting interests, set progress/gaps and taste choices to help select recommendations, highlights and Smart alerts. Account identity, passwords and credentials are excluded from that payload. You can turn sharing off in Settings; existing requests may finish before the app confirms the change. Turning it off removes Grandfolio's cached personalized insights, but cannot recall data already sent. TypeSafe's retention period has not been verified, and turning sharing off does not request deletion from TypeSafe. Public market analysis can use public card/price facts independently of this choice.
Card metadata, artwork and prices come from external catalog/artwork sources and JustTCG. Fetching images can reveal ordinary network information to the image host. Retailer links open external services with their own policies. Grandfolio does not use advertising SDKs or track you across unrelated apps or websites for advertising.
Diagnostics
The app keeps a bounded local history of coarse navigation events and crash/hang diagnostics to investigate failures. The optional export excludes account identifiers, credentials, message contents, collection contents and search text. It is not automatically uploaded; you choose whether and where to share it. Apple may separately provide crash/performance reports according to your device and distribution settings. Our hosting services also maintain operational and security logs.
Retention and deletion
Account data remains while needed to provide your account and chosen features. You can edit/remove cards and profile content and change sharing or notification choices. Delete your account in Account & privacy; the flow requires confirmation and removes the active account and its associated Grandfolio data, including purchase associations. Account deletion does not cancel an Apple subscription; manage it in Apple's subscription settings. Other people's saved copies, Apple's transaction records and data already processed by external services are separate.
Local diagnostic entries are kept for up to seven days subject to smaller item limits; an export you save or send has separate retention. Social report evidence expires after 90 days, or sooner after resolution, and associated report rows are removed with account deletion. Operational logs, provider backups and support correspondence follow the applicable service or operational retention; we do not promise immediate erasure from all backup systems. Ask support about access, correction or deletion of information we hold, and we may need to verify your identity.
Your choices
You can browse without an account, use manual search instead of the camera, decline personalized JEV processing, choose per-friend collection sharing, block or report abusive users, change notification permissions in iPhone Settings, and delete your Grandfolio account. Your local pending changes may need to finish syncing before you sign out or delete an account. Information may be processed in countries other than where you live by the service providers described above.
We will update this page when our practices change and revise the effective date. Material changes to optional processing will be reflected in the app's choices.