Skip to main content

Privacy Policy

This privacy policy applies to the Kuji app (hereby referred to as "Application") for mobile devices that was created by Vidus6 (hereby referred to as "Service Provider") as a Freemium service. This service is intended for use "AS IS".

No Account Required

The Application has no sign-up, login, email address or password. You are not asked to create a profile, and the Service Provider does not hold a user account for you. Instead, the app registers an anonymous device token on first launch, and the Service Provider stores only a cryptographic hash of that token so that it can apply free-tier scan limits and rate limits.

Information Collection and Use

The Application collects information when you download and use it. This information may include information such as

  • Your device's Internet Protocol address (e.g. IP address), used for security, abuse prevention and rate limiting
  • The operating system, operating system version and device model of your mobile device
  • The version of the Application you are running
  • Screens of the Application that you visit, the time and date of your visit, and the time spent on those screens
  • An anonymous device identifier, stored by the Service Provider only as a hash

The Application does not gather precise information about the location of your mobile device.

Card Photos and Scanning

Scanning is the core function of the Application, and it is the one place where content leaves your device. When you scan a card:

  • The Application accesses your camera, or the photo you pick from your gallery, only at the moment you take or choose an image. Nothing is uploaded until you capture or select a photo.
  • The image is cropped on your device to the card area, and text visible on the card (such as the card name and collector number) is read on your device using Google ML Kit Text Recognition. That text recognition runs entirely offline and the image is not sent to Google for it.
  • The cropped card image is then uploaded to the Service Provider's own recognition service, hosted on servers operated by the Service Provider, where it is matched against the card catalog.
  • The Service Provider retains a record of each scan — the cropped card image, the text lines read from it, the match confidence, the candidate cards considered, the hashed device identifier and the timestamp — in order to operate the free-tier limit, diagnose failed scans and improve recognition accuracy. If you correct a wrong match by picking the right card, that correction is stored with the scan record.
  • Card photos are not published, are not attached to your name or any account, and are not sold or licensed to third parties.

Please do not photograph anything other than trading cards with the scanner. Any personal content that appears in the frame — a document, a face, a screen — would be uploaded and retained with the scan record exactly like a card image.

<!-- AI:START -->

Use of Artificial Intelligence

The Application uses Artificial Intelligence (AI) to identify cards. Two kinds of AI processing are involved:

  • Image matching. The Service Provider's servers convert your cropped card image into a numeric representation (an embedding) and compare it against embeddings of known card printings. This runs on the Service Provider's own infrastructure.
  • Vision-language fallback. When image matching and on-device text reading cannot agree on a card, the cropped image may additionally be sent to the Google Gemini API so that a vision-language model can read the card and propose an identification. Only the cropped card image and the recognition prompt are sent; no device identifier, IP-linked profile or collection data accompanies it. Google's handling of that data is governed by the Gemini API terms and Google's privacy policy.

AI identification is probabilistic and can be wrong, particularly for reprints, alternate art, damaged cards and cards photographed in poor light. The Application shows a match confidence and offers alternative candidates for this reason. Card identifications and the prices attached to them are informational only and should be verified before you buy, sell or trade.

The Service Provider does not use your card photos to train its own general-purpose AI models beyond improving card recognition for this Application.

<!-- AI:END -->

Data Stored Only on Your Device

Your collection, your wishlist, your scan history as shown in the app, your language and appearance preferences, and (if you enable it) copies of scanned photos saved to your gallery are stored locally on your device. The Service Provider does not receive, back up or synchronize them. They are removed when you uninstall the Application, and you can erase them at any time from Profile → Clear local data.

Information You Provide Directly

The Application and this website do not require you to provide personal information to function. You provide information only when you choose to:

  • Contact support by email or through the contact form — in which case the Service Provider receives your email address and whatever you write in your message, and uses it solely to answer you.
  • Purchase a Kuji Pro subscription — see "Purchases" below.

The Service Provider may use the information you provided to contact you from time to time to provide you with important information and required notices.

Purchases

Kuji Pro subscriptions are sold through the Apple App Store and Google Play and are managed with RevenueCat. Your payment details are handled by Apple or Google and are never seen by the Service Provider. RevenueCat receives a pseudonymous app user identifier and your purchase and subscription status so that Pro can be unlocked and restored on your devices.

Third Party Access

Only the data described above is transmitted to external services, and only for the purposes described. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

Product analytics for the Application are collected with Arislytic, an analytics service operated by the Service Provider itself on its own infrastructure. That data is not shared with an external analytics vendor.

The Service Provider may disclose User Provided and Automatically Collected Information:

  • as required by law, such as to comply with a subpoena, or similar legal process;
  • when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
  • with their trusted services providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

Opt-Out Rights

You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network. You can also revoke camera and photo access at any time in your device settings; the rest of the Application, including catalog browsing and your existing collection, continues to work without it.

Data Retention Policy

  • Data stored on your device is retained until you delete it in the app or uninstall the Application.
  • Scan records, including the cropped card image, are retained for as long as they are useful for operating scan limits and improving recognition accuracy, and are deleted or anonymized when that is no longer the case.
  • Hashed device tokens are retained while the device continues to use the Application.
  • Support emails are retained for as long as needed to resolve your request and to keep a record of the correspondence.

If you would like the Service Provider to delete data associated with your device, contact them at contact@vidus6.com from the address you wish to be contacted on, including the support identifier shown in the app's contact form, and they will respond in a reasonable time.

Your Rights (GDPR, UK GDPR, KVKK and CCPA/CPRA)

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. Residents of California may additionally request disclosure of the categories of personal information collected and may opt out of any "sale" or "sharing" of personal information — the Service Provider does not sell or share personal information as those terms are defined by the CCPA/CPRA. Residents of Türkiye have equivalent rights under KVKK (Law No. 6698).

Because the Application has no account, the Service Provider often cannot connect stored data to you as an individual without additional information from you; where identification is not possible, the Service Provider may be unable to act on a request. To exercise any of these rights, write to contact@vidus6.com. The data controller is Vidus6, contactable at that address. You also have the right to lodge a complaint with your local data protection authority.

International Transfers

The Service Provider operates its servers outside the European Economic Area and the United Kingdom, and uses service providers located in other countries, including the United States. Where personal data is transferred internationally, the Service Provider relies on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discover that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider (contact@vidus6.com) so that they will be able to take the necessary actions.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains. Device tokens are stored only as SHA-256 hashes, and traffic between the Application and the Service Provider's servers is encrypted in transit.

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 6 August 2026

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at contact@vidus6.com.