Updated 2 October 2026

Privacy policy

CardIQ is made by Charlie Horton, an independent developer in the UK ("we", "us"). This policy explains what the app collects, why, and the choices you have. The short version: you can play without an account, there are no ads, we don't track you across other apps, and you can switch off analytics.

Playing as a guest

Without an account, your progress (XP, Market IQ, streaks and stats) is stored only on your device. We never receive it, although the app sends the usage and crash data described below unless you turn it off.

The app downloads card prices from our server. That request contains no personal information, although our hosting provider processes your IP address to deliver it, as any website does.

If you create an account

Accounts are optional and are only needed for the leaderboards, rooms with friends, achievements and syncing progress between devices. You can sign in with Apple or Google.

We store:

  • your email address
  • an account ID
  • your name, if your Google profile provides one
  • a username: one we generate, until you choose your own display name
  • your progress: XP, level, Market IQ, streaks, games played, cards priced and accuracy
  • your game history: the mode you played, the cards you priced, your guesses, your scores and when you played
  • the rooms you start or join, and your scores and answers in them, including live auction bids, readiness and pretend cash balances
  • your binder: the cards you’ve guessed within 2% of the price, with your guess, the price and when you guessed it
  • the achievements you’ve unlocked, and when
  • your Fantasy Portfolio: the cards you buy each week, what you paid and when
  • if you allow notifications, a push token for your device, so we can tell you when friends join or finish a room. It’s deleted when you sign out

Other players see your username, Daily score and accuracy on the Daily leaderboard, and your username and each week’s Fantasy Portfolio cost, value and return on its leaderboard. Once other players have finished a Daily, they see crowd figures for each card, such as the median guess. These are worked out from everyone’s guesses together and never show who guessed what. In a room, the other players in it see your username and your scores for that room, and once they’ve played it themselves, what you answered on each card. In a Live Auction, everyone in that room sees your ready status, accepted bids, remaining pretend cash and profit as the auction happens. Anyone you’ve played a room with can also see your head-to-head record against them: your scores in the rooms and Daily Challenges you’ve both played. Signed-in players can open your player page, which shows your username, when you joined, your progress (level, XP, Market IQ, streaks, games played, cards priced and accuracy), how many achievements you have, and your binder. Nothing else about you is public.

We use this information only to run your account and the game. The legal basis is providing the service you asked for.

Usage and crash data

To find bugs and see which parts of the game people enjoy, the app sends usage and crash data to PostHog, our analytics provider:

  • the screens you open and the games you finish: mode, score, number of cards, time taken, how long you took over each card, any cards you left the app during, and average accuracy
  • your level, Market IQ, XP, streaks and games played
  • sign-ins and sign-ups (which provider you used, not your email address or name) and shares of your Daily result
  • crash reports and error details
  • your device model, operating system, app version and language
  • your approximate location (country and city), worked out from your IP address. The IP address itself isn’t stored
  • a random ID for this installation of the app. If you sign in, it’s linked to your account ID
  • during some sessions, a recording of the app’s screens and taps, so we can see where people get stuck

The legal basis is our legitimate interest in keeping the app working and improving it. We don’t use this data for advertising or share it with anyone else. You can turn it off at any time in Profile → Share usage and crash data.

CardIQ Pro purchases

CardIQ Pro is a one-time in-app purchase. Apple handles the payment: we never see your card details or your Apple Account. RevenueCat, our purchases provider, checks the purchase with Apple and keeps a record of it, so Pro stays unlocked when you reinstall or use another device. The record holds what you bought, when, the price and your country, against a random ID for this installation of the app. If you sign in, it’s linked to your account ID instead. We use this only to unlock Pro. The legal basis is providing the service you asked for.

What we don’t do

We don’t show advertising, track you across other apps or websites, or sell or share your data for marketing.

Who processes your data

  • Supabase hosts our database, sign-in and file storage.
  • PostHog receives the usage and crash data above. It’s stored in the EU (Frankfurt).
  • RevenueCat checks CardIQ Pro purchases with Apple and keeps a record of them.
  • Apple and Google handle sign-in when you choose them. Apple also takes payment for CardIQ Pro.
  • Expo passes room notifications to Apple to deliver to your device. They contain usernames and scores from the room, not your email address.
  • PokePulse provides card prices. No personal information is sent to them.

Keeping and deleting data

We keep account data until you delete your account. You can delete it at any time in the app under Profile → Delete account. This permanently removes your account, your leaderboard entries, your room results, your push tokens, your binder, your achievements, your Fantasy Portfolios and your synced history.

RevenueCat keeps the record of a Pro purchase so it can be restored. Email us if you’d like it deleted.

PostHog keeps usage and crash data for a limited period. Deleting your account doesn’t delete it straight away, but it’s no longer linked to anything that identifies you. If you’d like it deleted sooner, email us.

To clear progress stored on your device, use Profile → Reset progress, or delete the app.

Your rights

Under UK data protection law, you can ask to access, correct, export or delete your data, or object to how we use it. Email charliehorton.dev@gmail.com and we’ll reply within one month. You can also complain to the Information Commissioner’s Office.

Children

CardIQ is not directed at children under 13, and we don’t knowingly collect personal information from them. If you believe a child has created an account, contact us and we’ll delete it.

Changes and contact

If this policy changes, we’ll update the date above. For significant changes, we’ll also tell you in the app. For questions, email charliehorton.dev@gmail.com.