Privacy Policy

Last updated: September 26, 2026

Data collected

Your collections, items, photos, and custom fields are stored on your device and, if sync is on, in your private iCloud. We have no access to them. Without the Archie assistant, this data never leaves your device or your private iCloud. Only the text or barcode of a catalog search goes to the service concerned (see “Catalog search”). Archie is the only feature that sends your collection data off your device. The “Archie assistant” sections below say which data, to whom, why, and how long it is kept.

iCloud

If you enable iCloud sync (enabled by default), your data is synced via iCloud, a service managed by Apple. We have no access to your iCloud account or synced data. See Apple’s privacy policy for more information.

Catalog search

When you search for an item by name or barcode, your search goes directly from your device to the catalog service of the collection (for example Discogs, Scryfall, or Open Library). We do not receive these searches. Each service applies its own privacy policy.

Archie assistant: when data is sent

Archie is optional. Nothing is sent before you agree. On first use, a screen tells you what is sent, what is never sent, and what is kept. If you tap “Not now”, nothing is sent. After you agree, data is sent only when you ask a question or tap an action.

Archie assistant: data sent

Archie receives your question and the previous messages of the conversation. To answer, it reads the data it needs. Depending on the mode you choose, it reads one item, one collection or, in “Whole library” mode, the list of all your collections and the items it searches in them. The data read can be: names of collections and items, template, year, brand, condition, “wishlist” or “for sale” status, purchase price, purchase date, sale price (“Sold for”), estimated value, quantity, date added, personal rating, tags, short custom fields, and random technical identifiers of the items. The app also sends the language, currency, and time zone of the device, the app version, and an identifier (see “Archie assistant: identifier and quota”). Never sent: your photos, your notes and long texts, links, serial number, barcode, “Loaned to”, “Purchased from”, storage location, address and location, your name, your email address, your Apple ID, and your iCloud account.

Archie assistant: recipients and purpose

This data goes to our server, hosted by Cloudflare. Our server forwards it to OpenAI, the AI service that produces the answer. Our server sends OpenAI no identifier about you. If Archie searches the catalog for an item, the search goes from your device to the catalog service, like a search you make yourself. This data is used only to answer your questions. We do not use it for advertising and we do not sell it. Cloudflare and OpenAI may process this data outside the European Union, including in the United States.

Archie assistant: retention

Our server asks OpenAI not to store the exchanges. It does not write your questions or the answers in its logs. It keeps the latest answer for at most 5 minutes, to send it again if the network drops, then deletes it. The technical logs of our server, at Cloudflare, are kept for at most 7 days. They can contain the IP address and the identifier described below, never the content of questions or answers. Under OpenAI’s terms for its API, OpenAI does not use this data to train its models. OpenAI keeps abuse monitoring logs, which can contain the requests and the answers, for up to 30 days, unless the law or the protection of its services requires a longer period. Conversations stay on your device and in its backup (for example the iCloud backup of the device, if it is on), never on our servers. They are not synced between your devices.

Archie assistant: identifier and quota

To count your questions (five per month without Premium + Assistant, 200 per month with it), the app creates an anonymous identifier on first use. It is a random number. It is kept in the device keychain and is not synced. It is not linked to your name, your email address, or your Apple ID. If you have a subscription, the app also sends the proof of purchase signed by Apple, which contains the purchase identifier given by Apple. Our server uses it to check that the subscription is active, and does not keep it. With Premium + Assistant, this purchase identifier replaces the anonymous identifier. For each identifier, our server keeps a count of questions, without their content. The count of a past period is deleted at your next question. None of these identifiers is sent to OpenAI.

Archie assistant: your consent

When you accept the information screen, our server records your identifier, the version of the accepted text, the date, the language, and the app version. This record proves your consent. We keep it with no time limit, unless you ask us to delete it. If the text changes, the app asks for your consent again. You can read the accepted text again in Settings.

Archie assistant: your choices and rights

All other features of Collection work without Archie. To stop sending data, stop using Archie. To delete a conversation, tap “…” next to it in the conversation list. To delete all conversations from the device, go to Settings, “Archie, the Curator” section, then “Clear all history”. To get or delete the data our server keeps (consent record and question count), write to [email protected], or from Settings by contacting support: the report automatically includes your anonymous Archie identifier.

Analytics and advertising

Collection does not include any analytics, tracking, or advertising tools. We do not sell your data. The only third parties that receive data are the ones described on this page: Apple for iCloud and subscriptions, catalog services for your searches, Cloudflare and OpenAI for Archie.

Subscriptions

Subscriptions are managed exclusively by the Apple App Store. We do not store any payment information.

Contact

For any question about this policy or your data: [email protected].