Work-in-progress draft — not yet effective. The Cardless Catalog is still in development. This draft records the current intended data practices and must be reviewed and updated before release.
Introduction
This draft Privacy Policy explains how Pixel Pug Labs LLC ("Pixel Pug Labs," "we," "us," or "our") plans to collect, use, disclose, retain, and protect information when you use The Cardless Catalog mobile application and related services (the "App").
Information We Plan to Collect
1. Account and Authentication Information
The App is planned to use account-based access to protect and synchronize private catalogs. Depending on the final sign-in options, we may process:
- Your email address.
- A unique account identifier.
- Authentication and session information managed by our authentication provider.
We do not plan to receive or store your plaintext password.
2. Catalog Content
Information you add to the App may include:
- Book titles, authors, genres, descriptions, ISBNs, and cover references.
- Reading status, dates, recommendations, notes, and condition information.
- Room, bookcase, and shelf locations.
- Series, edition, duplicate-copy, and collection-organization information.
- Rare-book notes, condition assessments, estimated values, and appraisal results.
3. Photos and Image Content
If you choose camera or photo-library features, the App may process images you capture or select, including shelf scans, book covers, and condition or appraisal evidence. The App is planned to request access only when you use an image feature.
- Shelf scans and appraisal evidence are intended to be stored as private account-protected files.
- Book-cover images obtained from public bibliographic sources may be stored or displayed through publicly retrievable cover storage.
- Selected images may be sent to an AI provider when you request book identification or appraisal.
4. AI Requests and Results
When you request an AI-assisted feature, we may process the selected image, relevant catalog fields, instructions needed to perform the request, and the resulting generated content. Planned uses include book identification, metadata enrichment, condition summaries, and informational appraisal estimates.
5. Operational and Support Information
Our service providers may process limited technical information needed to authenticate requests, prevent abuse, enforce usage limits, diagnose errors, and keep the service reliable. If you contact support, we receive the information you choose to include in your message.
How We Plan to Use Information
- Provide, synchronize, and secure your private catalog.
- Store and display selected images and catalog records.
- Perform the scanning, metadata, and appraisal features you request.
- Identify duplicate records and support catalog cleanup.
- Authenticate users, enforce access controls, and prevent abuse.
- Diagnose reliability problems and respond to support requests.
- Comply with legal obligations and protect our rights and users.
Third-Party Services
Supabase
The current service architecture uses Supabase for authentication, database storage, file storage, realtime synchronization, and backend functions. Supabase privacy information is available at supabase.com/privacy.
Google Gemini
The current architecture uses Google Gemini through a protected backend for selected AI-assisted identification and appraisal requests. Google privacy information is available at policies.google.com/privacy.
Google Books
The App may use Google Books to retrieve public bibliographic metadata and cover references. Google privacy information is available at policies.google.com/privacy, and Google Books API terms are available at developers.google.com/books/terms.
Apple
The App will use Apple platform services for distribution and may use system camera, photo-selection, authentication, diagnostics, and device-storage features. Apple's privacy information is available at apple.com/legal/privacy.
What We Do Not Plan to Do
- We do not plan to sell personal information or catalog content.
- We do not plan to use catalog data or selected images for targeted advertising.
- We do not plan to track activity across other companies' apps or websites.
- We do not plan to access photos you did not capture or select for an App feature.
Data Sharing
We plan to disclose information only to service providers that help operate the App, when you direct us to share or export information, when required by law, or when necessary to protect users, the service, or our legal rights. Providers are expected to process information under contractual and legal obligations appropriate to their role.
Data Retention and Deletion
Catalog records and stored images are expected to remain available while your account is active or until you delete them. Some limited information may remain temporarily in backups, security records, or operational logs, or as required by law.
Before public release, the App's final account model and deletion flow must be completed. If the App supports account creation, it will provide a way to initiate account deletion. During development, requests concerning account-backed data may be sent to pixelpuglabs@gmail.com.
Security
We use reasonable administrative, technical, and organizational safeguards, including authenticated access, database access controls, private storage for sensitive images, encrypted network connections, and server-side handling of provider credentials. No security measure can guarantee absolute protection.
Your Choices and Rights
Subject to applicable law and the final released features, you may be able to access, correct, export, or delete catalog information within the App. You may decline camera or photo access and use available manual-entry alternatives. You may contact us to ask about access, correction, portability, deletion, or other privacy rights.
Children's Privacy
The App is not intended for children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.
International Use
Information may be processed in the United States and other locations where Pixel Pug Labs or its service providers operate. The final policy will be updated before release to describe any additional safeguards required for the App's launch regions.
Changes to This Draft
We expect this draft to change as the App's architecture, providers, and release scope are finalized. The effective policy will display its effective date and will replace this work-in-progress draft.
Contact Us
Privacy Questions
Contact Pixel Pug Labs LLC at pixelpuglabs@gmail.com.
Draft created: August 25, 2026 · Effective date: Not yet effective