Effective Date: August 30, 2026
Last Updated: October 14, 2026
This Privacy Policy explains how GRD (“GRD”, “we”, “our”, “us”) collects, uses, stores, and protects personal data when you use our mobile application and related services (together, the “Services”).
GRD is operated by an individual based in Italy and is the data controller for the personal data described in this policy. For privacy questions, contact privacy@craftuplearn.com.
Depending on how you use the Services, we may collect:
We use personal data to:
We rely on legal bases including performance of our contract with you, legitimate interests such as security and service improvement, and consent where consent is required.
Card images may be processed to provide the grading and card intelligence features you request. We do not assume that card images or grading results may be used to train machine-learning models. If we want to use user-submitted content for model training, we will establish a separate documented consent or other lawful rights path before doing so.
We may use service providers including:
We design analytics and monitoring so that raw card-image bytes, private image URLs, and other unnecessary sensitive payloads are not intentionally included in analytics event properties or error context.
Camera and photo-library access are requested only when needed for card capture, import, or an explicitly requested save action. Device tracking permission, where applicable, controls access to advertising identifiers; declining it does not prevent core product analytics or normal card-grading functionality.
We use technical and organizational safeguards designed to protect personal data from unauthorized access, alteration, disclosure, or loss. Some capture data may remain temporarily on your device during processing. Server-stored data is handled through our infrastructure providers and access controls.
We retain personal data only for as long as necessary to provide the Services, maintain legitimate business and legal records, resolve disputes, prevent abuse, and enforce agreements. Account deletion removes or anonymizes GRD data where required, subject to legal, security, fraud-prevention, and transaction-record retention obligations.
We do not sell personal data. We may share data with processors and service providers that help us operate the Services, and where required by law or to protect rights and safety. When personal data is transferred internationally, we use safeguards required by applicable law.
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to processing, and receive a portable copy of personal data. You may also have the right to lodge a complaint with a supervisory authority.
To make a privacy request, contact privacy@craftuplearn.com.
GRD is a general-audience app with content suitable for all ages, not a service specifically directed at children. Its App Store age rating is a content rating and does not by itself establish eligibility to create an account, provide personal data, or make purchases. We do not currently offer dedicated child accounts or an in-app method for obtaining verifiable parental consent.
Parents and legal guardians may supervise children using GRD, subject to applicable law. Where legally required parental consent has not been obtained, a child should not independently register or provide personal data. If we become aware that we have collected a child's personal data without consent required by law, we will take appropriate action, including deleting the data or obtaining legally sufficient consent where applicable. Parents and guardians can contact privacy@craftuplearn.com to raise a concern or request deletion.
We may update this policy as the product evolves. Material changes will be reflected by updating the date above and, where required, by providing additional notice.
Privacy: privacy@craftuplearn.com
Support: support@craftuplearn.com