Gemlo

Privacy Policy

Gemlo: TCG Card Scanner · Effective

Gemlo is a trading card scanner for iPhone made by Dogs in Boots, LLC. This policy explains, in plain words, what Gemlo collects, why, who receives it, how long it’s kept, and how you can delete it. It covers the Gemlo app and this website.

The short version

1. Who we are

Gemlo is made by Dogs in Boots, LLC (“we”, “us”). We decide how the information described here is used, and you can reach us at .

2. What stays on your iPhone

Gemlo reads cards, keeps your collection and works out its value on your iPhone, so much of it works offline. This stays on your iPhone, and our servers don’t keep it:

Gemlo reads your iPhone’s Region setting to choose the currency and the analytics default; it never asks for your location. Searching for a card happens on your iPhone. Like other apps’ data, your collection and settings on your iPhone are included in your iCloud or computer backups; your scans, the US prices and exported files aren’t. Deleting Gemlo from your iPhone deletes what it stored there, except today’s count of free scans, which iOS keeps in the keychain until the next day’s first scan replaces it.

3. What we collect, and why

Your account

The first time you open Gemlo, it creates an account for you automatically: a random account ID, with no name, email or phone number. Your collection, your subscription and your use of online reads are kept with this ID, and RevenueCat and PostHog, which help us run Gemlo, know you by it too.

Signing in is optional. If you sign in, you can bring your collection to another iPhone, or back after you reinstall Gemlo:

To keep accounts secure, our sign-in system keeps a security log of sign-ins and session refreshes (about once an hour while Gemlo is open), with the time, the IP address and device type of each request and, if you signed in, your email address. We keep this log for about 7 days. Each session, anonymous ones included, also keeps the IP address and device type of its latest refresh until it ends. The sign-in system also limits how many accounts can be created from one IP address.

We also store the date you finished setting up Gemlo and which card languages you chose then (English, Japanese or both).

Your collection

Gemlo saves your collection to our servers with your account from your first card, even if you never sign in, so that it can come back when you sign in on a new iPhone or after you reinstall Gemlo:

Gemlo saves a change a couple of seconds after you make it, or when you’re back online. When you remove a card or a binder, our servers keep a marker that it was removed, so your other iPhones remove it too; the marker goes when you delete your account. Nobody else using Gemlo can see your collection.

If you sign in to an account you already had, the collection on this iPhone is added to it. Gemlo then deletes the anonymous account it was using, with the rest of its data, except purchase records we keep for our accounts (see Accounts you can no longer reach for when that can’t happen). When you sign out, Gemlo first tries to save any change not yet saved, then removes your collection, your scans and the US prices from this iPhone; what was saved comes back when you sign in again.

Prices

Subscriptions

If you buy Gemlo Pro, Apple handles the payment. We never see your card or your Apple Account details.

RevenueCat manages purchases for us, so that Gemlo can give you Pro, show your trial and renewal dates, and remind you before a free trial ends. Each time Gemlo opens, even if you’ve never bought anything, it asks RevenueCat whether you have Pro. That request carries your account ID, your App Store country, your IP address and technical details: your iPhone model, iOS and app versions, your language settings, and an identifier Apple gives apps from the same developer on your iPhone. When you buy or renew, RevenueCat receives the purchase from Apple: the plan, price and currency, dates, whether it’s a free trial, whether it will renew, and transaction numbers.

Our servers keep a copy of your Pro status, which decides how much value history you can see and how many online reads you can use, and a log of the purchase notifications RevenueCat sends us.

How Gemlo is used, and errors

We use PostHog to understand how Gemlo is used and to find and fix problems. While analytics are on, Gemlo sends PostHog, linked to your account ID:

Analytics never include what a card says, its picture, which cards you have, their prices, your notes or what you search for. PostHog doesn’t record your screen, what you type or where you tap, and we don’t use it for advertising. Analytics are on by default, wherever you live. You can turn them on or off at any time in Gemlo’s Settings › Privacy; see Your choices.

Measuring our ads

We advertise Gemlo on Meta’s apps, such as Facebook and Instagram, and on other apps Meta works with. To see which ads bring people to Gemlo, Gemlo includes Meta’s software (its SDK), and Meta receives:

Meta never receives your scans, what your cards are, your collection, its value or what you search for. Gemlo asks whether it may track you once, at the end of setup. Meta uses what it receives under its own terms and privacy policy, including to measure and improve our ads. See Your choices to turn it off.

When you contact us

If you email us, we receive your email address and what you write, and use them only to help you. When you use Report a problem in Gemlo, your email app opens a message for you to send, with the app version, your price currency and, from a card’s page, which card and print it is; nothing is sent until you send it. Our email is hosted by Google.

This website

This website sets no cookies. To count visits and see how quickly its pages load, it uses Cloudflare Web Analytics: Cloudflare adds a small script to each page, and your browser downloads it from Cloudflare. For each page you view, the script sends Cloudflare:

The script doesn’t use cookies or store anything on your device, and its ID changes with every page, so these reports don’t recognize you when you come back. Cloudflare receives your IP address with each report and says it discards it at the nearest Cloudflare data center, without storing it in its core databases or logs. Its reports show us visits by country, browser, operating system and type of device. Cloudflare says it doesn’t fingerprint visitors or track them across its customers’ websites. Content blockers can stop the script, and Gemlo’s Settings › Privacy switch covers the app, not this website. Cloudflare, which hosts this website, also processes visitors’ IP addresses and request details to deliver and protect it. If a page fails to load, some browsers also send Cloudflare a short error report: the page’s address, the page that linked to it and the kind of error. Cloudflare says it drops the IP address at once.

4. Checking a card online (AI)

Gemlo reads cards on your iPhone. When it can’t read one, you can tap Check online: Claude, an AI made by Anthropic, reads the card’s name and number from its photo. The first time, Gemlo asks your permission; nothing is sent until you agree. You never have to use it: you can also search for the card or pick it from the closest matches.

What Gemlo sends

The AI only reads what the card prints. Gemlo checks its answer against Gemlo’s own card list and asks you “Is this your card?”: nothing the AI says is accepted without you. Our servers don’t keep the photo or the answer; they record that you used an online read, and whether it worked, for 30 days, to apply limits. An online read counts as one of your free scans only when you confirm the card.

What Anthropic does with it

Anthropic is our service provider for these requests. It stores and processes them in the United States. Under its commercial terms, it doesn’t use them to train its models, and it deletes them within 30 days. If Anthropic’s safety systems flag a request for breaking its usage policy, Anthropic may keep it for its own safety work, under US law: the request for up to 2 years, and its safety classification scores for up to 7 years.

Turning it off

You can turn online reads off at any time in Gemlo’s Settings › AI › Check cards online. That withdraws your permission, and Gemlo sends nothing more to Anthropic until you agree again. Signing out or deleting your account also clears your permission.

5. Who receives your data

These companies run parts of Gemlo for us, and each receives what its part needs, for the purposes in this policy:

Supabase
Hosts our database, sign-in, file downloads and server code, and so stores everything we keep on our servers, your collection included.
RevenueCat
Manages purchases (see Subscriptions).
PostHog
Analytics and error reports (see How Gemlo is used, and errors).
Anthropic
Reads the cards you check online (see section 4).
Meta
Receives what Measuring our ads describes, and uses it under its own terms and privacy policy.
Resend
Delivers sign-in code emails. It receives your email address and the message.
Cloudflare
Delivers card pictures, hosts this website and counts its visits (see Prices and This website).
Expo
Delivers updates to the Gemlo app. When Gemlo starts, it asks Expo’s servers whether an update is ready. That request carries your IP address, a random ID for this installation of Gemlo (not your account ID), technical details about the version of Gemlo you have and, if an update failed to start, the error it caused. Gemlo’s analytics switch doesn’t turn this check off.
Google
Hosts our email, including the messages you send to gemlo@nookpages.com and our replies.

These companies act on our behalf, under agreements that limit their use of your data to providing their service to us, except that Anthropic may keep requests its safety systems flag for its own safety work (section 4), and Meta uses what it receives under its own terms (Measuring our ads). They protect your data at least as well as this policy does.

Apple processes App Store purchases, refunds and Sign in with Apple, under its own terms and privacy policy. If you’ve chosen in iOS to share analytics with app developers, Apple also gives us crash reports and app usage statistics that don’t identify you.

Cardmarket and JustTCG are where our prices come from. Our server fetches prices from them; they don’t receive anything about you.

We may also disclose information if the law requires it, to protect someone’s safety, or as part of a merger or sale of our business, in which case this policy keeps applying to it.

6. What we never do

7. Where your data is processed

Our service providers store your data in the United States and process it there, with these exceptions: some requests, including downloads, card pictures and checks for app updates, may first be handled by servers closer to you; Google, which hosts our email, may store and process the emails you send us in other countries; this website’s visit reports are processed at the Cloudflare data center nearest you; and Meta processes what it receives in the United States and other countries. If you live outside the United States, this means your data is transferred to the United States, where it is protected as this policy describes but may be accessed by US courts, law enforcement and national security authorities under US law. Section 12 says how we protect transfers from the EU, the EEA and the UK.

8. How long we keep it

On your iPhone
Your collection: until you remove it, sign out (what was saved comes back when you sign in again), delete your account, or delete the app. Your scans: the latest 200; those over a day old go the next time you open the scanner, and all of them when you sign out. US prices: those of the most recent 20,000 cards you looked at, plus your own cards, until you sign out, delete your account, or iOS clears them. Exported files: until your next export, or the next time you open Gemlo once they’re a day old. Your settings: until you delete the app. Today’s count of free scans: until the next day’s first scan.
Your account
Your account ID, email and Apple sign-in, the date you set up Gemlo and the card languages you chose, your Pro status, and the IP address and device type your sessions last used: until you delete your account.
Your collection
Until you remove a card or binder, or delete your account; the markers of what you removed stay until you delete your account.
Accounts you can no longer reach
If you delete Gemlo from your iPhone without having signed in, the anonymous account Gemlo was using stays on our servers and at PostHog, with no set end date, and RevenueCat keeps its purchase records. It has no email address, but it keeps your collection, and the IP address and device type it last used; PostHog keeps its analytics profile, and its events for up to 1 year. It can no longer be deleted from Gemlo. To delete it, use Settings › Delete account before you delete Gemlo. That includes the new anonymous account Gemlo starts right after you sign out or delete your account. When you sign in to an account you already had, Gemlo deletes the anonymous one it was using, once your collection and purchases have moved; if that can’t happen within an hour (for example, Gemlo is offline or closed), the anonymous account stays too.
Limits
How many prices your account looked up: 2 days. Your online reads (that you used one, and whether it worked): 30 days.
Subscription records
RevenueCat keeps your purchase history as part of the purchase records we keep for our accounts, also after you delete your account. Our log of purchase notifications for your account is deleted with it.
Analytics events and error reports
Up to 1 year. When you delete your account, we ask PostHog to delete them, and it does within about a week.
Your analytics profile
Until you delete your account, when we ask PostHog to delete it along with your events.
After you delete your account
We keep its account ID for 48 hours, only to ask PostHog a second time to delete anything that reached it meanwhile. If PostHog couldn’t be reached, we keep the ID until that’s done.
Server logs and backups
About 7 days, our sign-in security log included. Server logs include IP addresses, the approximate location our hosting provider works out from them, device types and account IDs. They don’t include your collection, unless our database refuses a change from Gemlo: then its log may show that change.
Meta
Meta keeps what it receives under its own terms and privacy policy.
Anthropic
Up to 30 days. If a request is flagged for misuse, Anthropic may keep it for its own safety work for up to 2 years, and its safety classification scores for up to 7 years.
Sign-in code emails
Resend keeps each sign-in email (your address and the message, whose code expires within an hour) and its delivery log for 30 days.
Website visit reports
Cloudflare keeps every report for 7 days, then only a sample, and lets us see the last six months.
Support emails
As long as we need them to help you and to keep a record of our conversation.

9. Deleting your account and data

To delete your account, open Gemlo and go to Settings › Delete account, near the bottom. Any account can be deleted, including an anonymous one. This deletes:

Two days later, we ask PostHog again, for anything that reached it meanwhile. If PostHog can’t be reached when you delete your account, your account is still deleted, and we keep asking until it confirms.

Deleting your account doesn’t remove:

You can also email us to ask for a copy of your data, to correct it, or to delete it. So that we give your data only to you, we answer a request only when it comes from your Gemlo account’s email address, or when you make it in Gemlo while you’re signed in to that account, such as deleting it in Settings › Delete account. An anonymous account has no email address, so we can’t confirm that a request about it is yours: you can delete it yourself in Settings › Delete account. You can export your collection as a CSV file at any time, in Settings.

10. Your choices

11. Children

Gemlo is a general-audience app for collectors. It has no chat, no social features and no ads, and nobody else can see your collection. It isn’t directed to children under 13, and we don’t knowingly collect personal information from children under 13. A parent can leave online reads off and turn analytics and Meta’s SDK off in Gemlo’s Settings. If you think a child under 13 has given us personal information, email us and we’ll delete it. If the child used Gemlo without signing in, open Settings › Delete account on their iPhone instead: we can’t find an account that has no email address.

12. Your rights

Wherever you live, you can ask us what information we hold about you, for a copy, to correct it, or to delete it, and you can withdraw your permission for online reads, or turn analytics off, at any time. Email gemlo@nookpages.com. We’ll confirm the request is yours (see how) and reply within the time your local law requires. We won’t treat you differently for using these rights.

Complaints. If you think we’ve mishandled your information, email gemlo@nookpages.com with “Privacy complaint” in the subject. The person in charge of protecting personal information at Dogs in Boots, LLC looks into it and replies with what we found and what we’ll do. If you’re not satisfied, you can contact your regulator (below).

United States

If you live in California or another state with a consumer privacy law, you also have the right to opt out of the sale of personal information, targeted advertising and certain kinds of profiling. We don’t sell personal information or use it for such profiling. What Meta receives to measure our ads (see Measuring our ads) may count as targeted advertising under some of these laws; to opt out, turn off Share usage analytics in Gemlo’s Settings › Privacy. In the categories California law uses, we collect identifiers (account ID, installation ID, IP address and, if you sign in, your email address), commercial information (purchase history, and the cards you own and what you paid for them), internet or other electronic network activity (how you use Gemlo), geolocation data (an approximate location worked out from your IP address, never your precise location), and the photo of a card you check online. You can use an authorized agent to make a request. If we decline a request, you can appeal by replying to our answer.

European Union, European Economic Area and United Kingdom

If you’re in the EU, the EEA or the UK, the General Data Protection Regulation (GDPR), or the UK GDPR, applies, and Dogs in Boots, LLC is the controller of your personal data. We use it on these legal bases:

You have the right to access your data, to correct it, to have it deleted, to restrict how we use it, to receive it in a portable format (Gemlo’s CSV export gives you your collection at any time) and to object to uses based on our legitimate interests. Email gemlo@nookpages.com; we reply within one month, as the GDPR requires. We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects on you. You can also complain to the data protection authority where you live or work, or, in the UK, to the Information Commissioner’s Office (ICO).

Your data is transferred to the United States (see section 7). For these transfers we rely on our providers’ data processing terms, which include the European Commission’s standard contractual clauses and the UK’s addendum to them, or on the EU-U.S. Data Privacy Framework and its UK extension where a provider is certified under them.

Canada

Under PIPEDA and, in Quebec, the Act respecting the protection of personal information in the private sector, you can access and correct your information and withdraw your consent. The person in charge of protecting personal information at Dogs in Boots, LLC can be reached at gemlo@nookpages.com. If you aren’t satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

Japan

Under the Act on the Protection of Personal Information, you can ask us to disclose, correct, stop using or delete your personal information. Our service providers in the United States handle it on our behalf, under agreements that require them to protect it as this policy describes; the United States has no single national privacy law like Japan’s, but its laws and the providers’ own commitments apply. You can also contact the Personal Information Protection Commission.

Brazil

Under the LGPD, you have the rights described above, including to confirm whether we process your data and to have it anonymized, blocked or deleted. You can also contact the Autoridade Nacional de Proteção de Dados (ANPD).

Australia and New Zealand

We follow the Australian Privacy Principles: you can ask to access or correct your information, and complain to us (see Complaints); if you’re not satisfied, you can contact the Office of the Australian Information Commissioner. Under New Zealand’s Privacy Act 2020, you can access and correct your information, and complain to the Office of the Privacy Commissioner.

13. Security

Gemlo’s connections are encrypted, and on our servers each account can reach only its own collection. Our providers encrypt stored data and limit who can access it. No system is perfectly secure; if a breach puts your data at risk, we’ll tell you and the authorities as the law requires.

14. Changes to this policy

When we change this policy, we’ll update this page and the date at the top. If a change is significant, we’ll also let you know in Gemlo or on this page before it takes effect. The Spanish and Japanese versions of this policy are translations; if they differ, this English version applies.

15. Contact us

Dogs in Boots, LLC