Datum — Privacy Policy
Effective date: 19 June 2026 Operator ("we", "us"): Datum, Indonesia. Contact / Data Protection: privacy@datumcards.com
Datum is a trading-card collection app: scan or add your cards, get identity and an estimated market value, and organise your collection. This policy explains what personal data we process and your rights over it.
1. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email, profile photo, a stable account id | Your Google or Apple sign-in (we receive these from them) |
| Collection | Cards you add (set, number, grade, certificate no., quantity, your notes, acquisition price/date), favourites | You |
| Images | Photos you take or upload of your cards | You |
| Usage & device | App interactions, language, device/OS type, app version, IP address, crash/diagnostic logs | Automatically |
We do not collect government IDs, payment-card numbers, or precise location. (Payments/auctions are not part of this version; if added, this policy is updated first.)
2. How we use it (and the legal basis under UU PDP)
- Provide the service — authenticate you, store and display your collection, identify cards, compute estimated values. Basis: performance of our agreement with you.
- Card identification — your uploaded photo is processed (on our servers) to read the card's set/number and match it to our catalog. Basis: agreement / your consent.
- Improve & secure — diagnostics, abuse/fraud prevention, debugging. Basis: legitimate interest.
- Support & communication — respond to your requests, important service notices. Basis: agreement / legitimate interest.
We do not sell your personal data, and we do not use it for third-party advertising.
3. Your card photos
Photos you upload are stored to show your collection and to identify cards. They are treated as a non-authoritative stream and are not used to train our card-grading models. We will not repurpose your photos beyond running the app without asking you first.
4. Who we share it with
- Sign-in providers (Google, Apple) — to verify your identity when you log in.
- Infrastructure processors acting on our behalf — cloud hosting and object storage (DigitalOcean, Singapore region). Bound to process data only for us.
- Card-data providers (e.g. Pokémon TCG API, Scryfall) — we query them for catalog and price data; we do not send them your personal data.
- Grading partner (Kios Kultura) — only if you choose to submit a card for grading (an external service with its own terms). Not active in this version.
- Legal — if required by law or to protect rights and safety.
5. Where data is stored & cross-border transfer
Data is stored on servers in Singapore. Where data leaves Indonesia, we ensure a level of protection consistent with UU PDP (through provider commitments and contractual safeguards).
6. Retention
We keep your data while your account is active. If you delete your account, we delete or anonymise your personal data within 90 days, except where we must keep records to meet a legal obligation or resolve disputes.
7. Your rights (UU PDP)
You may access, correct, update, delete, or export your data, withdraw consent, object to or restrict certain processing, and lodge a complaint. To exercise any right, contact privacy@datumcards.com; we respond within 30 days. You can also delete most data in-app (remove items, delete your account).
8. Security
We protect data with encryption in transit (HTTPS/TLS), access controls, and isolation of each user's collection. No system is perfectly secure; we work to limit and respond to incidents and will notify you and the authorities of a breach as required by law.
9. Children
Datum is not directed to children under 17 (or the age requiring parental consent under Indonesian law). We do not knowingly collect their data; contact us if you believe a child has provided personal data and we will delete it.
10. Changes
We may update this policy; the "Effective date" changes and, for material changes, we notify you in-app or by email before they take effect.
11. Contact
Datum — privacy@datumcards.com.