Corners ("Corners," "we," "us") is an app for sports-card collectors to photograph their cards, organize them into collections, and contribute card images to a shared catalog. This policy explains what we collect, why, how it's stored, and the choices you have. Corners is operated by Olanava LLC. Questions: privacy@olanava.com.
1. Information we collect
We only collect what the app needs to work:
- Account information (via Google Sign-In): your email address, display name, and Google profile photo URL. You can set a custom display name and profile photo in the app.
- Content you create: card photos and images (front and back); collections you create (names, the cards in them, and their order); catalog contributions (images you link to a shared catalog card, shown with attribution to your display name); and the players and teams you choose to follow.
- Automatically generated identifiers: a Firebase user ID and internal record IDs tying your content to your account.
- Subscription status (if you subscribe): whether you have an active paid subscription and which tier, so we can unlock the right features. Apple processes the payment through its In-App Purchase system — we never receive or store your card number or payment details. Subscriptions auto-renew unless cancelled; you manage or cancel them in your Apple ID settings.
- Crash and diagnostic data: when the app crashes or hits an error, we collect diagnostic information (via Google Firebase Crashlytics) — including device, OS, and app-version details and a log of recent in-app events — associated with your Firebase user ID, so we can find and fix bugs.
What we do not collect: we do not use third-party advertising or behavioral-analytics SDKs, we do not track you across other apps or websites, and we do not collect your contacts, location, or device sensors beyond the camera/photo access you explicitly grant to add cards.
2. How we use your information
- To provide core features: authentication, storing and displaying your collections and images, and syncing them across your devices.
- To power the shared catalog — images you choose to contribute are shown to other users alongside the catalog card, attributed to your display name.
- To generate player avatar images for the catalog from contributed card images.
- For basic operational logging to keep the app working. We do not build advertising or behavioral profiles.
We do not sell your personal information, and we do not share it for advertising.
3. How your data is stored and who can access it
Your data is stored on Google Firebase (Firestore database, Cloud Storage for images, Firebase Authentication) and processed by Google Cloud Functions and Google Cloud Run, within the United States. Google acts as our data processor; see Firebase's privacy practices.
- Private by default. Your collections and images are private to your account unless you explicitly contribute an image to the shared catalog.
- Shared catalog content is visible to other signed-in users. Once you link an image to a catalog card, that image and your display-name attribution are visible to other users browsing that card.
- Access is gated by Firebase Authentication and server-side security rules; only you can read or write your private collections.
Sub-processors: Google Firebase / Google Cloud (hosting, database, storage, auth, compute); Backblaze B2 (encrypted off-site backups — your data is encrypted before it leaves our systems, so the backup provider cannot read it).
4. Data retention
We keep your data while your account is active. When you delete your account (see §5), your personal data is removed promptly; backups age out on a rolling schedule.
Catalog contributions: images you contributed to the shared catalog may be retained in anonymized form after you delete your account — the image stays as part of the shared catalog, but it is stripped of any link to your identity (your name, account ID, and the connection to your collection are removed). This keeps the shared catalog intact without retaining personal data about you. If you would prefer your contributed images be deleted rather than anonymized, contact us.
5. Your rights and choices
The app gives you direct control over your data, in-app, without contacting us:
- Delete your account — Settings → Delete Account. This permanently removes your account, collections, and images (contributed catalog images are anonymized per §4) and deletes your sign-in record. This cannot be undone.
- Export your data — Settings → Export My Data. This produces a complete, portable copy of your data that you can save or move elsewhere.
Depending on where you live, you may also have rights under the GDPR (EU/UK) or CCPA/CPRA (California) — including the right to access, correct, delete, or port your data, and to object to certain processing. The in-app Delete and Export features satisfy the core of these rights; for anything else, contact privacy@olanava.com.
You can also revoke camera and photo-library permissions at any time in your device settings.
6. Children's privacy
Corners is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
7. Security
We use industry-standard measures including encrypted transport (HTTPS/TLS), server-side access-control rules, authenticated-only access, and encrypted off-site backups. No system is perfectly secure, but we work to protect your data and limit access to it.
8. International users
Your data is stored and processed in the United States. If you access Corners from outside the U.S., you consent to the transfer and processing of your data in the U.S.
9. Changes to this policy
We may update this policy as the app evolves. We'll revise the "Last updated" date above and, for material changes, provide notice in the app.
10. Contact
Questions or requests about your privacy: privacy@olanava.com.