Privacy Policy

1. Introduction

This Privacy Policy explains how Mugi TCG ("the App", "we", "us", or "our") collects, uses, and protects your personal information when you use our iOS application. By using the App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account using Apple Sign-In or Google Sign-In, we collect:

• Your email address (as provided by Apple or Google)
• A unique user identifier for authentication purposes

We do not collect your name, phone number, or any other personal details beyond what is provided by the sign-in service.

2.2 Collection Data

When you use the App, we store the following data associated with your account:

• Cards you add to your collection and their quantities
• Custom collections you create (name, icon, color, and cards included)
• Your preferred currency setting

2.3 Camera Access

The App uses your device's camera solely for the card scanning feature. Camera images are processed locally on your device for card identification purposes. We do not store, transmit, or collect any camera images or photos.

2.4 Purchase Information

Subscription purchases are processed entirely by Apple through the App Store and by RevenueCat as our payment partner. We do not collect or store any payment information such as credit card numbers or billing addresses.

3. How We Use Your Information

We use your information exclusively to:

• Provide and maintain the App's core functionality
• Sync your collection data across devices via your authenticated account
• Process and manage your subscription status
• Improve the App's performance and user experience

We do not sell your data or use it to show you ads inside the App. If you give us permission (see Section 12), we also use limited data to measure the performance of our own advertising campaigns.

4. Data Storage and Security

Your data is stored securely using Firebase (Google Cloud Platform) with the following protections:

• All data in transit is encrypted using TLS/SSL
• Firebase Security Rules ensure that each user can only access their own data
• Firebase App Check verifies that requests originate from our legitimate App
• Authentication is handled by Firebase Auth with industry-standard security practices

Collection data is associated with your authenticated user account and is not accessible to other users or third parties.

5. Third-Party Services

The App uses the following third-party services:

• Firebase (Google): Authentication, cloud data storage (Firestore), file storage (Cloud Storage), and App Check security
• Firebase Analytics & Mixpanel: Product analytics that help us understand how the App is used so we can improve it (screens visited, features used, associated with your user identifier)
• RevenueCat: Subscription and purchase management
• Meta Platforms: Measurement of our own advertising campaigns, as described in Section 12
• TCGPlayer / Cardmarket: Card pricing data and marketplace links (no personal data is shared with these services)

Each third-party service operates under its own privacy policy. We encourage you to review them:

• Firebase Privacy Policy
• Mixpanel Privacy Policy
• RevenueCat Privacy Policy
• Meta Privacy Policy

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We do not share your data with any third parties except as described in Section 5 (third-party services necessary for the App to function) and Section 12 (advertising measurement, only with your consent).

7. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, all associated data will be permanently removed from our servers.

8. Data Deletion

You can delete your account and all associated data at any time through the App's Settings screen. Alternatively, you may request account deletion by contacting us at mugitcginfo@gmail.com.

Upon account deletion, all personal data including your collection data, custom collections, and account information will be permanently and irreversibly removed from our servers.

9. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete such information.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict the processing of your data
• Data portability

To exercise any of these rights, please contact us at mugitcginfo@gmail.com.

11. Consent to Share Consumption Data with Apple

By using Mugi TCG and making in-app purchases, you consent to our sharing of data regarding your usage and consumption of purchased content with Apple, as part of our efforts to resolve refund requests. This information may include details about how you have accessed and interacted with the purchased content. The purpose of sharing this data is to help Apple make an informed decision regarding refund requests. We ensure that such data sharing is done in compliance with Apple's policies and only as necessary to process your requests.

12. Advertising Measurement and App Tracking Transparency

Mugi TCG does not show ads inside the App. However, we run our own advertising campaigns (for example on Instagram and Facebook) to reach new collectors, and we use Meta Platforms' tools to measure whether those campaigns work.

On iOS, this kind of measurement is governed by Apple's App Tracking Transparency (ATT) framework: the App will ask for your permission before any tracking takes place. Only if you allow it, we share the following with Meta Platforms:

• Device identifiers (such as the advertising identifier, IDFA)
• App events (such as completing onboarding or your first card scan)
• Purchase events (such as starting a trial or subscribing), forwarded securely by RevenueCat

If you decline, no cross-app identifiers (such as the IDFA) are shared. Any remaining campaign measurement happens through Apple's privacy-preserving, aggregated SKAdNetwork framework and through app-scoped event reporting that cannot be used to follow you across other companies' apps or websites. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.

The legal basis for this processing is your consent. Meta Platforms Ireland Limited acts as an independent controller for this data and participates in the EU-U.S. Data Privacy Framework for international transfers.

13. Cookies and Website Analytics

The website (mugitcg.com) uses minimal analytics for performance purposes. If you consent through our cookie banner, the website also uses the Meta Pixel, an advertising cookie that helps us measure our campaigns and reach people interested in the One Piece TCG. The Pixel is not loaded unless you accept it, and you can withdraw your consent at any time through the cookie settings on this website.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any significant changes by updating the "Last updated" date at the top of this page and, where appropriate, through the App. Your continued use of the App after any changes indicates your acceptance of the updated policy.

15. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at mugitcginfo@gmail.com.