Grail Privacy Policy
Effective date: July 7, 2026
Grail (“Grail,” “we,” “us,” or “our”) provides a mobile app that helps people find and catalog trading cards at in-person card shows. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
If you have questions, contact us at [email protected].
1. Information We Collect
Account information. If you sign in to Grail (using Sign in with Apple or Google Sign-In), we receive basic profile information from that provider, such as your name, email address, and a unique identifier for your account.
Photos and card information. If you contribute card listings, you may photograph cards or select photos from your device's camera roll. We use these photos to identify card details (such as player name, year, set, and grading information) using AI-based image analysis. You can also add or edit card details manually.
Content you create. This includes card listings, table or location information you associate with a contribution, cards you save as favorites, and feedback you submit through the app, which is stored along with your account email so we can review it and follow up if needed.
Usage information. We may collect basic technical information, such as device type and app version, to help us maintain and improve the app.
We do not require an account to search for cards. An account is required to contribute card listings or save favorites. If the app is at capacity, an invite code may be required to continue — this does not require an account, and Grail does not collect any personal information as part of that check.
2. How We Use Information
We use the information described above to:
- Operate the core features of Grail, including card capture, search, and favorites
- Identify and extract card details from photos using AI-based image analysis
- Maintain your account and the contributions associated with it
- Communicate with you about your account, if needed
- Maintain the security and integrity of the app
3. Third-Party Sharing
AI processing. Photos you submit for card identification are sent to Anthropic, our AI service provider, to analyze the image and extract card details. Anthropic processes this data on our behalf to provide this functionality.
Infrastructure providers. We use Google Firebase for authentication, data storage, and app infrastructure. Firebase may process data as part of providing these services.
Sign-in providers. If you sign in with Apple or Google, those companies process your sign-in according to their own privacy policies.
We do not sell your personal information, and we do not use your photos or card data for advertising.
4. Data Retention
We retain your account information and content for as long as your account is active, or as needed to operate the app. If you delete your account, we delete or de-identify your account information as described in Section 6 below. We are continuing to review our data retention practices, including how long photos are retained after a card is processed, and we will update this policy as those practices are finalized.
5. Your Choices
- Search without an account. You can search for cards without signing in.
- Account deletion. You can delete your account at any time from within the app's settings. Deleting your account removes your personal account information. Card listings you contributed to a shared show may remain visible to other users so the show's inventory stays accurate for other contributors and searchers, but they will no longer be associated with your identity. Your private saved data (such as favorites) is deleted.
6. Children's Privacy
Grail is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
7. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above.
8. Contact Us
If you have questions about this Privacy Policy, contact us at [email protected].