Privacy policy.

Last updated: 22 October 2026

This policy explains what personal data Scadex collects, why it is collected, how it is used and what rights you have over it. It applies to the Scadex mobile app and to this website.

Who is responsible for your data

The data controller for the purposes of the General Data Protection Regulation (GDPR) is Scadex (Netherlands Chamber of Commerce 42065103), Stalpaert van der Wielestraat 12, 5344 VR Oss, Netherlands. You can reach us about anything in this policy at privacy@scadex.app.

What we collect

Account information

If you create an account, we store the email address and any display name you provide, along with authentication details needed to sign you in.

Collection data

The cards, sealed products and quantities you add, together with the dates you added them and any notes or condition details you record. This is the core of the service and stays associated with your account so your collection is available across sessions and devices.

Card scans

Images captured by the scanner are processed to identify the card. Camera access is used only while you are actively scanning.

Usage and device information

Technical information such as device type, operating system version, app version, crash reports and basic interaction events. This is used to diagnose faults and understand which features are actually used.

Website visitors

Standard server logs, including IP address, browser type and pages requested.

Why we use it, and on what legal basis

• To provide the service — storing your collection, identifying scanned cards and showing prices. Legal basis: performance of a contract.
• To keep the service working — diagnosing crashes, preventing abuse and maintaining security. Legal basis: legitimate interests.
• To improve the app — understanding which features are used and where people get stuck. Legal basis: legitimate interests, or consent where required for analytics.
• To communicate with you — service messages such as security notices or significant changes. Legal basis: performance of a contract or legitimate interests. Marketing messages are sent only with your consent, and you can withdraw it at any time.

Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf and under contract, in categories such as:

• Cloud hosting and database providers
• Card identification and image processing services
• Market pricing data providers
• Crash reporting and analytics providers
• Email delivery providers

We may also disclose data where we are legally required to do so, or to establish or defend legal claims.

International transfers

Some providers may process data outside the European Economic Area. Where that happens, transfers are protected by an adequacy decision or by Standard Contractual Clauses approved by the European Commission.

How long we keep it

Account and collection data is kept for as long as your account is active. If you delete your account, this data is deleted or anonymised within 90 days, other than records we are required to retain for legal or accounting purposes. Scan images are retained only as long as needed to complete identification and improve recognition accuracy. Technical logs are typically kept for up to 12 months.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these, email privacy@scadex.app. You also have the right to lodge a complaint with your national data protection authority if you believe your data has been handled improperly.

Deletion has a page of its own: how to delete your account covers the steps in the app, the email route if you can no longer sign in, what is erased and what has to be kept.

Children

Scadex is not directed at children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Cookies and similar technologies

This website uses local storage to remember your chosen colour theme. That value stays on your device and is not used to identify you. Any additional analytics or advertising technologies will be described here and, where required, will ask for your consent first.

Security

We use technical and organisational measures appropriate to the risk, including encryption in transit and access controls on production systems. No system is perfectly secure, but your collection data is treated as sensitive because it is a record of things of value that you own.

Changes to this policy

If this policy changes materially, we will update the date at the top and, where the change is significant, notify you in the app or by email.

Contact

Questions about this policy can be sent to privacy@scadex.app, or see our terms of use.