Privacy Policy

1. Who we are

Nett is a personal finance and trading-card collection app, available at nett.finance and on mobile app stores, operated by its developer ("Nett", "we", "us") from Israel. This policy covers the Nett mobile app and the nett.finance website. Contact: hello@nett.finance.

2. Data we collect

Account data

• When you sign in with Google or email (via Supabase authentication), we collect and store your email address and, for Google sign-in, the name and profile details Google shares for authentication.
• On Android and iOS, the Google sign-in flow is facilitated by Google's Firebase Authentication service on the device; the resulting Google token is then exchanged with Supabase, where your session and account are established. Firebase does not store your Nett portfolio data.

Content you add

• Your portfolio and collection: cards, assets, debts, watchlists, settings, scan history, and net-worth history. This is stored in our database (hosted on Supabase) and synced to your account to provide the Service. It is private to your account by default and is never made public unless you actively use a sharing feature.

Waitlist / marketing

• If you join the launch or beta waitlist on our website, we store your email address (in our Supabase database) solely to send you launch and early-access updates. We do not use it for anything else or share it. Every email includes a one-click unsubscribe link, and you can opt out or request deletion at any time by emailing hello@nett.finance.

Card scan images

• When you scan a card, the image is transmitted over an encrypted connection to our servers (Cloudflare) and to AI processing services — Voyage AI for visual matching, and in some cases Anthropic for AI-assisted identification — for the purpose of identifying the card and returning a match. See section 4 for detail.

Purchase data

• If you subscribe to Nett Pro, billing is handled by the app store (e.g. Google Play) and our subscription platform, RevenueCat. We receive your subscription status, product identifier, and related transaction events. We do not receive or store your payment card details.

Diagnostics, analytics and abuse prevention

• Crash and error reports: the error message, app version, device browser identification string, and which screen was open. Reports are scrubbed on your device before sending. Reports stored in our own systems are automatically deleted after 14 days; reports processed by Sentry, our error-reporting provider (EU data region), are retained by Sentry for 90 days.
• Standard device information (device model, OS version, app version) for crash reporting and compatibility.
• Usage counters tied to your account (for example, your credit balance and scan usage) to operate the credit system and prevent abuse.
• Aggregate usage patterns — for example which games, sets, and features are used most — to improve scanner accuracy and prioritise development.

3. How we use data

• Provide the Service: store and back up your portfolio, sync it to your devices, identify scanned cards, display market prices, and manage subscriptions and credits.
• Improve the product: diagnose crashes, improve scanner accuracy, and prioritise which card sets and features to build.
• Aggregate insights: we may compile anonymised, aggregate statistics about card market trends and usage (for example "most-scanned sets this month"). These are derived from patterns across all users combined and do not identify individual users or their specific holdings.
• Communicate: service updates and responses to support requests.
• Protect the Service: enforce limits, prevent fraud and abuse, and comply with legal obligations.

We do not sell your personal data, and we do not use your portfolio or collection data for advertising.

4. Card scanning and AI processing — how it works

Card identification is the heart of Nett, so here is exactly what happens to a scan:

• The photo you take is sent over an encrypted connection to our backend on Cloudflare.
• The image is processed by Voyage AI, which converts it into a mathematical representation used to match it against our card catalogue. For some scans, Anthropic's AI vision service is used to assist identification.
• The purpose of this processing is limited to identifying your card. Nett does not use your scan images to build an advertising profile, and does not retain scan images as part of your account — what we keep is the resulting match (the card's identity) in your scan history.
• These providers process images as our service providers under their own terms; see Voyage AI and Anthropic for their privacy practices.

5. Services we rely on

Market data displayed in the app comes from providers including TCGplayer (via TCGCSV), PriceCharting, Cardmarket, Scrydex, eBay, CoinGecko and others. These providers receive our price queries and card identifiers — not your personal information. When you tap through to eBay, you leave Nett and eBay's own privacy policy applies; eBay may set cookies, and as an eBay Partner Network member Nett may earn a commission on qualifying purchases.

6. Advertising (free tier only)

Free accounts can optionally watch rewarded video ads served by Google AdMob to earn scan credits. To serve and measure ads, Google may collect and process your device's advertising identifier and related signals under Google's Privacy Policy. You can reset or limit your advertising ID, or opt out of personalised ads, in your device settings. Nett Pro contains no ads.

7. Sharing you control

Your portfolio is private by default. Nett has no public profile, leaderboard, or feed that exposes your holdings. The only way your data becomes visible to anyone else is if you actively use a sharing feature — for example, generating a shareable image of your collection, assets, or net worth. When you do:

• Sharing is opt-in per action — nothing is shared until you choose to share it.
• Exact amounts are hidden by default in shared images; you must actively choose to reveal them.
• You choose what you share (a specific collection, assets, or net worth) and where you post it.

8. Data storage, sync and backup

• Free accounts: your data lives on your device and is backed up to your account daily.
• Pro accounts: real-time sync across your signed-in devices.
• All data is encrypted in transit (HTTPS/TLS) and encrypted at rest by our hosting providers.

9. Data retention

• Account and portfolio data: kept while your account exists; deleted when you delete your account.
• Crash diagnostics: deleted from our systems after 14 days; error reports processed by Sentry are retained by Sentry for 90 days.
• Scan images: processed for identification and not retained as part of your account; what persists is the identified card in your scan history.
• Anonymous aggregate statistics: retained indefinitely, as they cannot be linked to individuals.
• Records we are legally required to keep (for example subscription transaction records) are retained for the required period.

10. Deleting your account

You can permanently delete your account and all associated data at any time from inside the app: Profile → Delete Account & All Data. This removes your assets, history, collection, cloud data, and login — permanently, with no recovery. You can also request deletion by emailing hello@nett.finance from your account email address; we will complete deletion within 30 days.

11. Your rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to the processing of, or delete your personal data, and to withdraw consent where processing is based on consent. Export (CSV) and deletion are available directly in the app; for anything else, contact hello@nett.finance. You also have the right to complain to your local data protection authority.

Israel

We comply with the Protection of Privacy Law, 5741-1981, as amended (including Amendment 13). Under Israeli law, financial information is treated as especially sensitive data, and we handle the portfolio data you enter accordingly — with encryption, strict per-account access controls, and access limited to what is necessary to operate the Service. You may exercise your rights of access, correction, and deletion as described above, and may contact us in Hebrew or English. You may also complain to the Israeli Privacy Protection Authority.

European Economic Area and United Kingdom

We process personal data in accordance with the GDPR and UK GDPR. Our legal bases are: performance of a contract (providing the app), consent (for optional processing such as personalised advertising, where required), legitimate interests (keeping the Service secure and working), and legal obligation. You have the rights described above and may complain to your national supervisory authority (in the UK, the Information Commissioner's Office).

California

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information in that sense, and we will not discriminate against you for exercising your rights.

12. Security

All traffic between the app and our servers is encrypted. Your synced data is protected by per-account access controls, and our internal APIs require authentication. We design for least access and minimal data — but no system is perfectly secure, and we cannot guarantee absolute security. Where the law requires it, we will notify you and the relevant authority of a data breach.

13. Children

Nett is intended for a general audience and is not directed at children under 13 (or the higher minimum age in your country). We do not knowingly collect personal data from children; if you believe a child has provided us personal data, contact us and we will delete it.

14. International transfers

Our providers operate globally, and your data may be processed in countries other than your own, including the United States and the European Union, subject to appropriate safeguards such as standard contractual clauses or equivalent frameworks.

15. Changes

We may update this policy as the Service evolves. Material changes will be reflected by the date above and, where appropriate, notified in the app. Continued use after changes take effect constitutes acceptance.

16. Contact

hello@nett.finance, or through the app.