Compy Privacy Policy

Last updated September 22, 2026

Compy is a mobile app for trading card vendors and collectors: scan a card, see its identity and price, and keep track of buys and inventory. This page explains what information Compy collects, why, and how it's used.

Who this policy covers

Compy is operated by TJ Cards LLC.

An account is required

You need to create an account to use Compy. You can sign up with an email address and password, or with Google. If you use Google, we receive the email address on that Google account. We never see or store your Google password.

What we collect

• Your email address, when you create an account.
• Photos you take to scan a card. Each photo is sent to our card identification service to identify the card, and is not kept afterward. We don't store your full-resolution scan photos. Small thumbnail versions of cards you save to a buy list or your Collection are kept so you can see them later - these are the only images we retain, and they're small and low-resolution, not the original photo.
• The cards, prices and notes you save - your scan history, buy lists, folders, and your Collection - so they can be backed up to your account and used across your devices.
• Basic scan performance data - how long a scan took and whether it worked - to help us keep the app fast and accurate. This isn't tied to your identity unless you're signed in.
• Team information, if you create or join a shop/team account - who owns the team, who's a member, and the team's shared buy and inventory data.

We don't collect your location, and we don't use advertising trackers or sell your information to anyone.

Who we share information with

We use a small number of outside services to run Compy:

• Card identification services receive the photo you take of a card, in order to identify it. They don't receive your email or account information.
• Google, only if you choose to sign in with Google.
• Supabase hosts our database (your account, saved buys, and Collection) and handles sign-in.
• Vercel hosts the app itself.
• Market prices and card images come from third-party card-pricing and marketplace services. Looking up prices or auctions doesn't send any of your personal information to them.

Each of these services can see the data needed to do their job (for example, the card identification service sees a photo, and Supabase stores your account data) - none of them are permitted to use it for their own purposes.

How long we keep information

We keep your account and saved data for as long as your account exists. If you'd like your account and everything tied to it deleted, contact us (see below) and we'll delete it. Deleting your account also removes your saved buys, Collection, and team memberships from our systems.

Security

Your data is stored with encrypted connections, and access to it is restricted so that only your own account (or, for shared team data, your team) can read it. No method of storing or transmitting data is perfectly secure, but we take reasonable steps to protect your information.

Children's privacy

Compy is not directed at children under 13, and we don't knowingly collect information from children under 13.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Contact

Questions about this policy or your data: contact TJ Cards LLC.