Privacy Policy

Effective October 7, 2026

The short version. Your trading book (inventory, deals, expenses and history) is stored on your device, not on our servers. When you use AI features, the content you send is processed to answer you and isn't kept as a record of your business. We don't sell your data or use it for advertising.

This policy explains how Nugget Trading Co. ("Nugget", "we", "us") handles information when you use the Nugget iPhone app and the nugget.cards website (together, the "Service").

1. Your trading book stays on your device

The records you keep in Nugget, including cards, deals, prices, expenses, notes and portfolio history, are stored in a database on your iPhone. We do not operate a cloud copy or backup of your book. Signing in doesn't upload it, and deleting the app deletes it unless you've exported it. Your device's own backups (for example iCloud device backup) are controlled by you and Apple.

2. What we collect

Information	Why
Account details. When you sign in with Apple: an Apple user identifier and, if you choose to share them, your name and email (which may be an Apple private relay address).	To create and secure your account.
Sign-in credentials. Session tokens (stored hashed) and Apple sign-in credentials (stored encrypted).	To keep you signed in and honor sign-out and revocation.
Subscription details. Apple transaction identifiers, product, purchase and expiry dates, and status. We never see your payment card; Apple handles payment.	To verify your membership and prevent fraud.
Usage and cost records. Counts, timing and estimated AI cost of requests, with no message content.	To meter monthly AI allowances, set limits and keep the Service running.
Device check. An Apple DeviceCheck signal for the free onboarding scan.	To limit the free scan to one per person and device.
Feedback you send. Your message, app version and build, platform, and an account or install identifier.	To read and respond to bug reports and ideas.

3. Content you send to AI features

Some features send content from your device to our server so it can be processed by AI:

Chat: your messages, plus the parts of your book needed to answer a question.
Voice: audio from live voice sessions, streamed and processed in memory. We don't save the audio or transcripts.
Card photos: photos you take or choose so we can identify the cards.
Imports: files you choose to import, such as spreadsheets or order history.

We use this content only to give you the result you asked for. We don't keep chat or voice content after a response, and our production logs are configured not to record message content. Imports are held temporarily while processing so a long import can resume, and are deleted automatically, normally within 24 hours.

To produce results, this content is sent to our AI service providers listed below, which process it under their API terms.

4. Service providers

Google Cloud and Google Gemini API: hosting for our server and database, and AI processing for chat, voice, card identification and imports.
TypeSafe: AI processing for reading imported files.
Apple: Sign in with Apple, App Store purchases, DeviceCheck and TestFlight. If you use dictation, Apple's speech recognition may process your speech under Apple's terms.
Cloudflare: hosting for this website and email for nugget.cards.

Card images and catalog data are loaded from public card databases. Those requests don't include your account information.

5. What we don't do

We don't sell or rent your personal information.
We don't use your data for advertising, and the app contains no third-party ad or tracking SDKs.
We don't track you across other companies' apps or websites.

6. How long we keep things

Account, subscription and usage records: while your account exists.
Import working files: deleted automatically, normally within 24 hours.
Chat and voice content: not stored after the response.
Feedback: until it has been addressed, or until you ask us to delete it.

7. Deleting your account

You can delete your account in the app under Account. We confirm it's you with Apple, revoke our Apple sign-in access, and delete your account, sessions, import jobs and allowance records. The app also removes your local book from the device.

We keep a small amount of information after deletion to prevent abuse and meet obligations: Apple transaction identifiers (so a subscription can't be replayed onto another account), anonymous cost records, and a one-way hash of your Apple identifier with a count of free scans used. Deleting your account doesn't cancel an Apple subscription. Manage that in your Apple ID settings.

8. Your choices and rights

You can export your book to CSV, clear it, or delete your account at any time in the app. Depending on where you live, you may have rights to access, correct, delete or port your personal information, or to object to certain processing. Email hello@nugget.cards and we'll respond within 30 days. We won't treat you differently for exercising these rights.

9. Security

We encrypt data in transit, hash session tokens, encrypt Apple credentials at rest, and keep your book off our servers entirely. No system is perfectly secure, but we limit what we hold so there's less to protect.

10. Children

Nugget isn't directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has given us information, contact us and we'll delete it.

11. International users

We're based in the United States, and our providers may process information in the United States and other countries.

12. Changes

If we make material changes, we'll update the date above and tell you in the app or on this page before they take effect.

13. Contact

Nugget Trading Co. · hello@nugget.cards