Privacy Policy

Effective date: August 18, 2026

Welcome to RealityCards, a mobile application provided by Stellaland LLC ("Company", "we", "our", or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the RealityCards mobile application.

1. Information We Collect

We collect information about you in three primary ways: information you provide to us, information collected automatically, and information from third-party sources.

A. Information You Provide to Us

• Account Data: Information provided by Apple or Google when you sign in, which may include your email address and display name, plus the username and avatar used in RealityCards.
• Collection and Trading Data: Card counts, missing and duplicate cards, trade requests, trade status, and reviews needed to provide the collection and trading features.
• User-Generated Content: Messages, profile information, and images you choose to upload for avatars, chat, feedback, or reports.
• Communication Data: Information you provide when you contact our support team at [email protected].

B. Information Collected Automatically

• Device Information: Device model, operating system version, browser type, unique device identifiers, and mobile network information.
• Service Data: App version, notification token, language, and basic request information needed to operate, secure, and troubleshoot the service.
• Log Data & Diagnostics: Crash logs, performance diagnostics, and IP addresses. We do not collect precise or real-time GPS location.

C. Information from Third Parties

If you choose to log in using third-party services (Apple or Google), we receive profile information (such as your name and email address) permitted by your settings on those platforms.

2. SDKs and Tracking

The current release does not display advertising, request App Tracking Transparency permission, or enable Firebase Analytics. It uses limited service SDKs needed to operate the App:

• Firebase Crashlytics: To receive crash reports and diagnose reliability problems.
• Firebase Cloud Messaging: To deliver notifications you allow, such as trade or message updates.

3. How We Use Your Information

We use the collected information for various purposes, including to:

• Create, manage, and authenticate your account.
• Provide enabled app functionality, including card uploading, matching, trading, and, where separately available, reward-link access.
• Recognize card album screenshots on your device. Screenshots selected for ordinary card recognition are processed locally and are not uploaded for cloud AI recognition.
• Send push notifications (via Firebase Cloud Messaging) regarding trades, messages, and updates, provided you have opted in. You can opt out of push notifications at any time through your device settings or in-app notification preferences.
• Diagnose crashes, prevent abuse, secure accounts, and improve service reliability.

4. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data based on the following legal grounds:

5. How We Share Your Information

We do not sell your personal data. We may share your information only in the following scenarios:

• Service Providers: We share data with third-party vendors who process data on our behalf, including:
  • Supabase and its cloud infrastructure providers — backend hosting, authentication, storage, and database services
  • Google Firebase — crash diagnostics and push notifications
  • Apple and Google — sign-in services and app distribution
  All service providers are bound by data processing agreements and may only use your data to perform services for us.
• Other Users: Your username, avatar, trade requests, and chat messages are visible to other users you interact with.
• Legal Obligations: We may disclose data if required by law, subpoena, or to protect the rights, property, and safety of Stellaland LLC, our users, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as a business asset. We will notify you via in-app notification or email before your data is transferred and becomes subject to a different privacy policy.

6. International Data Transfers

Your data is stored and processed by Supabase and other cloud infrastructure providers, primarily in the United States. If you are located outside the United States (including the EEA, UK, or other jurisdictions), your personal data may be transferred to and processed in the United States.

For transfers of personal data from the EEA/UK to the United States, we rely on:

• The EU-U.S. Data Privacy Framework (where applicable), and/or
• Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention and Deletion

We retain your personal information based on the following schedule:

• Account Data: Retained while your account is active. When you delete your account, access is disabled and the authentication account is removed.
• Collection, Trade, and Message Records: Retained as needed to preserve transaction integrity, protect other users, prevent abuse, resolve disputes, or comply with law. Where practical, retained records are deleted or de-identified when no longer needed.
• Log Data & Crash Reports: Retained for up to 12 months for debugging and performance improvement.

You may request the deletion of your account and personal data at any time:

• In-App: Navigate to Settings > Account Management > Delete Account.
• Email: Contact [email protected] to request deletion or ask about retained data.

8. Children's Privacy (COPPA Compliance)

RealityCards is not directed at children. You must be at least 13 years old (or 16 years old if you reside in the European Union/EEA) to use the App. We do not knowingly collect personal data from children under these ages. If we learn we have collected data from an underage child, we will delete it promptly. Parents may contact us at [email protected] to request deletion.

9. Your Privacy Rights

A. California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, California residents have the following rights:

• Right to Know: Request information about what personal data we collect, use, and share.
• Right to Delete: Request deletion of your personal data.
• Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information. We do not sell your personal data.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your CCPA rights, contact us at [email protected]. We will respond to verifiable requests within 45 days.

B. European Economic Area (EEA) and UK Residents (GDPR)

If you are in the EEA or UK, you have the following rights under the General Data Protection Regulation:

• Right of Access: Obtain a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise your GDPR rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

C. Tracking Choices

The current release does not use cross-app tracking or personalized advertising. You can manage notification permission through your device settings.

10. Data Security

We implement industry-standard security measures to protect your personal data, including encryption in transit (TLS/SSL) and at rest, access controls, and regular security assessments. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. For material changes, we will notify you by:

• Updating the "Effective Date" at the top of this document;
• Sending an in-app notification; and/or
• Sending an email to your registered email address for significant changes.

Your continued use of the App after the updated Privacy Policy becomes effective constitutes your acceptance of the changes.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Stellaland LLC
Sheridan, WY, USA
Email: [email protected]

For EEA/UK data protection inquiries, you may also contact us at the email above with the subject line "GDPR Request." If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local supervisory authority.