Foilbook Privacy Policy

Moon Radio Candy LLC · Effective October 9, 2026

Foilbook helps you scan, identify and track your trading cards. It is made by Moon Radio Candy LLC ("we"). We built it to keep your information on your iPhone. There are no ads and no tracking, and we never sell your information.

Who we are

Moon Radio Candy LLC
PO Box 2189
Lakeland, FL 33806
info@moonradiocandy.com

The short version

• Your cards, photos and notes stay on your iPhone unless you sign in or turn on "Help improve scanning."
• Even with no account, Foilbook sends our server a small free-card counter: Apple's record of your Foilbook download, and how many cards each saved scan used. It never holds photos, names or which cards you have.
• If you sign in, we keep your email, a user ID and backups of your collection.
• If you say yes to "Help improve scanning," we get scan reports and photos of scans that went wrong. They carry a random ID for this install of Foilbook, not your name or email.
• Foilbook Plus is sold through Apple. We never see your payment details.
• You can delete what our server holds from Foilbook's Settings, or by emailing us.

What stays on your iPhone

• Your collection: the cards you save, binder and box names, collectors, conditions, notes, your Want list and price history.
• Your photos. Cards are read on your iPhone. Photos are not sent anywhere unless "Help improve scanning" is on.
• Price alerts. They come from your iPhone, not from us. The home screen widget reads only your iPhone.
• What Apple tells Foilbook about your Foilbook Plus plan, and your age range where the law asks for it.
• Files you export. Where they go is up to you.

With no account: the free-card counter

Foilbook gives you 200 free cards. To count them, so that deleting and reinstalling the app does not start the count over, Foilbook talks to our server even if you never sign in. It does this when you first open the Scan tab after the app starts, and each time you save or undo a scan.

What Foilbook sends:

• Apple's signed record of your Foilbook download (Apple calls it the app transaction). It includes Apple's ID for that download, called the appTransactionId, the app version, the date Foilbook was first downloaded, and whether it is a test version.
• Apple's device verification ID for this install. Our server uses it only to check that the record belongs to this iPhone. It does not keep it.
• For each scan you save: a random key for that scan, how many cards it used (0 to 9), and when you scanned it.

What we keep: the appTransactionId as the key, how many free cards are used, when the record was made and last used, and one row per saved scan with its card count and time. The appTransactionId stays the same for your Apple Account, on a new iPhone or after a reinstall. It is not linked to a Foilbook account.

The counter never includes photos, names, email addresses or which cards you have. We use it only to count free cards. We do not use it for ads, to build a profile, or to contact anyone.

How long we keep it: each scan's row is deleted after 90 days, and only the total is kept. The whole record is deleted after 2 years without use. You can delete it sooner in Foilbook: Settings › Your data › Delete Foilbook's data about this iPhone. That removes the history of every scan. Your used free-card total stays as a single number, so deleting does not give back free cards.

Foilbook Plus and purchases

Foilbook Plus is sold by Apple through the App Store, as a monthly or yearly plan or a one-time Lifetime purchase. Apple takes the payment. We never see your card number, billing address or Apple Account details.

When you buy or restore, Apple tells Foilbook on your iPhone which plan you have, whether it is on, when it renews or ends, whether it is a free trial, whether it came from Family Sharing, whether a payment did not go through, and whether a purchase is waiting for a parent's OK (Ask to Buy). Foilbook uses this only to turn Plus on or off. It stays on your iPhone. We do not send it to our server.

• Family Sharing: every plan covers up to 6 people in your Apple family group.
• Cancel a plan: on your iPhone, open Settings, tap your name, then Subscriptions, then Foilbook. You can also go to Settings › Foilbook Plus in Foilbook and tap "Change or cancel your plan." Cancel at least 24 hours before the renewal date. Plus stays on until the end of the time you paid for.
• Deleting the app or your Foilbook account does not cancel a plan. Billing continues through Apple until you cancel.
• Refunds: Apple handles every refund. Ask Apple at reportaproblem.apple.com. We cannot refund App Store purchases ourselves.
• Restore: on the Foilbook Plus page, tap Restore Purchases while you are signed in to the same Apple Account.

What Plus and Lifetime mean is on our Terms of Use page.

If you sign in (optional)

You can use all of Foilbook without an account. Signing in lets you back up your collection to our server and restore it on another iPhone. We use what we keep only to sign you in and to back up and restore your cards.

• With Apple, we keep your email address (or Apple's private relay address) and your Apple user ID. Your name stays on your iPhone.
• With Google, we keep your email address, your name, your profile picture link and your Google user ID.
• For each sign-in session, our server records your internet (IP) address and device type, to keep your account secure.
• A backup holds your cards (each with its card ID, set, number, finish, condition, price, date added and your notes), binder and box names, collector names, your Want list, your settings and a short random tag for this iPhone. Collector names are the names you give each person's collection, so they may be children's names.
• Foilbook backs up about 30 seconds after each change while you are signed in. We keep your 10 newest backups, plus your largest one if it is older.

We keep your account and backups until you delete your account.

iCloud Drive backups

Foilbook also saves a backup file each day to your own iCloud Drive, in Foilbook › Deckbook Backups, and keeps the last 14 days. They are in your iCloud account, and we cannot see them. If iCloud Drive is off, the backups stay on your iPhone.

Help improve scanning

This setting helps us make the scanner better. It is off until you say yes. Foilbook asks you a clear question before any report is sent. Test versions of Foilbook (TestFlight) ask once, before your first scan. The App Store version asks only someone who is signed in, and only someone signed in can turn it on. You can change your answer in Settings › Scanning at any time.

When it is on, Foilbook sends:

• A report after each scan: the kind of scan, which cards were found, what you changed, how long it took, how the phone was tilted and how much glare there was.
• With every report: a random ID for this install of Foilbook, your iPhone model (never its name), your iOS and app versions, and the times.
• A daily count of the features you used, and any errors.
• Photos of scans that went wrong: when you answered a Check, fixed or removed a card, or a card had no match, and any scan you choose with "Send this scan." Photos go only over Wi-Fi, 20 scans a day at most. A photo can show more than cards, such as hands, a room or handwriting. Photos carry no location.
• If you tap "Send this scan," the note you type, if you type one.

These reports are not anonymous. They carry no name, email or account, but the random ID links the reports from one install, and a photo can show something about you or your home.

People at Moon Radio Candy review the reports and photos, with the help of Anthropic's Claude AI, to find and fix scanning mistakes. We have turned off the Claude setting that would let Anthropic use this material to train its AI models.

How long we keep them: photos are deleted after 60 days, and reports, feature counts and errors after 180 days. Turning the setting off stops the reports, deletes anything still waiting on your iPhone, and gives this install a new random ID. The delete in Foilbook's Settings also removes the reports and photos this install has sent.

Card data, prices and links

To identify cards and show prices and pictures, Foilbook asks about the card or set, never about you:

• Our server (run by Supabase), for card lists and US dollar prices. Both come from JustTCG, a price service we pay. Our server asks JustTCG only about cards and sets, never about you, so JustTCG gets nothing about you, not even your internet address.
• TCGdex, for card details, pictures and Cardmarket prices.

Like any website, they see your internet (IP) address. They also get the app's name and version, with our contact email (not yours), and which card or set is asked for. They never get your name, account or photos.

"Find it on eBay," "See sold on eBay" and "Buy missing cards" open eBay or TCGplayer only when you tap them, with the cards in the link and no tracking or affiliate codes. Those sites' own privacy policies cover what you do there.

Our server and its logs

Our server is run by Supabase in the United States. Each time Foilbook talks to it (the free-card counter, card lists and prices, scan reports, sign-in and backups), Supabase logs the request: your internet (IP) address, the app's name and version, what was asked for, and the time. Supabase keeps these logs for 7 days on our plan, then deletes them. We use them only to keep Foilbook running and secure.

To make sure prices, card lists and scan reports go only to the real Foilbook app, Foilbook uses Apple's App Attest: Apple confirms to our server that a request comes from Foilbook on a genuine Apple device. Our server keeps the key ID Apple makes for this install of Foilbook, and a daily count of how much each install and each internet address asks for, to stop misuse. The counts store a scrambled form of the address, never the address itself. None of this carries your name, email or account.

Who we share information with

Only the services that run Foilbook for us:

• Supabase, which runs our server and stores what this policy describes.
• Apple, for Sign in with Apple, purchases, your age range where the law asks for it, iCloud Drive, and App Attest (the check that a request comes from the real app).
• Google, for sign-in, if you choose Google.
• Anthropic, whose Claude AI helps us review scan reports and photos.

They may use it only to provide those services to us. We do not sell your information or share it for advertising. We may also share information when the law requires it. If a security breach affects your information, we will tell you as the law requires.

How long we keep things

• Free-card counter: each scan's row for 90 days. The whole record until 2 years without use.
• Scan photos: 60 days. Scan reports, feature counts and errors: 180 days.
• Account, sign-in sessions and server backups: until you delete your account. Only your 10 newest backups and your largest one are kept.
• Server logs: 7 days.
• App Attest key ID: 90 days after this install last used it. Daily request counts: 2 days.
• iCloud Drive backups: 14 days, in your own iCloud.

Deleting your information

• Free-card counter and scan reports: in Foilbook, Settings › Your data › Delete Foilbook's data about this iPhone. It removes the history of every scan from the free-card counter (only your used total stays, as one number) and the scan reports and photos this install has sent.
• Account and server backups: in Foilbook's Settings, tap Delete account. This removes your account, your email, your name, your sign-in sessions and every backup on our server. The cards on your iPhone stay. With Apple, it also ends Foilbook's Sign in with Apple link. With Google, you can also remove Foilbook from your Google Account's list of connected apps.
• iCloud Drive backups: delete them in the Files app.
• Everything on your iPhone: delete the app.

You can see and change your collection in the app at any time. You can also email us to ask what we hold about you, to correct it, or to have it deleted. We reply within 30 days.

Children

Foilbook is for card collectors of all ages, and many collectors are kids. A child can use every part of Foilbook without signing in or turning on "Help improve scanning."

With no account, a child's iPhone sends us only the free-card counter and the card and price lookups described above. The counter uses Apple's ID for the download only to count free cards. We do not use it to contact anyone, build a profile or show ads. Apart from that, we do not knowingly collect personal information from a child under 13 without a parent's consent.

Where an age law requires it (Texas today), Apple tells Foilbook your age range. For children under 13, or when no age range is shared, Foilbook does not offer sign-in and keeps "Help improve scanning" off. If someone was already signed in on that iPhone, a parent can sign out or delete the account in Settings. Foilbook uses the age range only on your iPhone, and never saves it or sends it anywhere. If a child had Foilbook before Foilbook Plus was added and an age law covers them, Foilbook asks a parent through Apple before Plus and the free-card counter turn on.

Everywhere else, Foilbook does not ask anyone's age. Kids should not sign in or turn on "Help improve scanning" without a parent. Signing in is meant for a parent or guardian.

Parents can:

• Review what we hold about their child: email us. An account can be found by its email address. Scan reports and the free-card counter carry no name or email, so we cannot look them up from an email. The delete in Foilbook's Settings removes them instead.
• Have it deleted: Settings › Your data › Delete Foilbook's data about this iPhone, Delete account, or email us. We delete it within 30 days of an email.
• Stop further collection: turn off "Help improve scanning," and sign out or delete the account. The free-card counter runs whenever Foilbook is used. To stop it, delete Foilbook from the iPhone.

We keep a child's information only as long as listed in "How long we keep things" above. We do not ask a child for more information than Foilbook needs to work.

What we never do

• Show ads or use advertising IDs.
• Track you across other apps or websites, or let other companies track you through Foilbook.
• Sell your information or share it for advertising.

Because Foilbook does not track you, it works the same whether or not your browser or device sends a "Do Not Track" signal.

Changes

If we change this policy, we will post the new version on this page and update the date above. If a change affects what we collect or how we use it, we will also say so in the update notes on the App Store.

Contact

Moon Radio Candy LLC · PO Box 2189, Lakeland, FL 33806 · info@moonradiocandy.com