Privacy policy

The data controller is H&A Trading & Collectibles, a micro-entreprise (sole proprietorship), France. Owner: TODO: legal name of the business owner. Address: TODO: registered business address. SIRET: TODO: SIRET (pending registration).

For any privacy question or request, write to support@kastr.app.

• There are no ads in Kastr, no ad tracking, and we do not sell your data.
• Your garage (cars, wishlist, prices paid, notes, photos) is stored on your iPhone. You do not need an account to use it.
• An account is optional. It is only needed for community features, feedback and contributions, and you can delete it from the app.
• Usage analytics are anonymous.
• Payments go through Apple. We never see your card details.

Your garage and wishlist, the price you paid, where and when you found a car, its condition, your notes, the photos you add, your hunt journal and your app settings are stored locally on your device. We do not receive them unless you create an account and sync your collection.

This data is included in your device backups according to your own iCloud or computer backup settings. Deleting the app deletes it from the device. You can export your garage to CSV at any time.

The catalog itself (car names, years, series, toy numbers) is shipped inside the app and contains no personal data.

If you create an account, you sign in with Sign in with Apple. We receive a stable Apple user identifier and, if you choose to share it, your email address (which may be an Apple private relay address). You may also choose a username and a profile picture, which are public in community features.

When syncing is available, your garage is copied to our servers so you can get it back on a new iPhone. It stays private to you.

Accounts are managed with Supabase (authentication, database, file storage and server functions). Our Supabase project is hosted in the European Union (Paris, France).

If you post in the community, we store what you publish (text, photos, cars you attach from your garage) with your username. Posts are public to other Kastr users.

If you submit a car missing from the catalog, a correction or a price, we store it with your account. Submitted cars stay private to you until they are reviewed; once approved, the car data becomes part of the public catalog without your name attached to it, and prices are only shown in aggregate.

To keep the community safe, posts may be checked by automated filters before they appear. When you report content or block a user, we record the report or the block. Moderators review reports and may remove content or suspend accounts that break the Terms of use.

Feedback you send from the app is stored with your account, your app version, your iOS version and your device model, so we can answer and fix the problem.

Scanning reads the barcode and the text on the card on your iPhone, with Apple's on-device frameworks (VisionKit). The camera image is processed on your device and is not sent to us or to anyone else.

Coming soon: when on-device reading cannot identify the car, or when you photograph a loose car, the photo will be sent over an encrypted connection to our server in the European Union, which will forward it to a third-party AI provider for the sole purpose of identifying the car. This fallback is not active yet. We will name this provider here before the feature is released. We will only work with a provider whose terms allow us to stop it from using your photos to train its own models.

We do not keep scan photos after returning the result, unless you agree to share a confirmed identification (the photo and the car you confirmed) to help us improve recognition. That choice is off by default and you can withdraw it at any time.

To count scan credits, we keep a scan counter linked to your account, or stored on your device if you do not have one.

Kastr Pro is sold through the App Store. Apple handles payment, and we never receive your card number or billing address.

We use RevenueCat to know whether you have an active subscription and to let you restore it. RevenueCat receives an anonymous app user identifier (linked to your account if you have one), your purchase and subscription history in Kastr, transaction identifiers, your store country and currency, your device type and your app version.

We use TelemetryDeck to understand which features are used and to find bugs. It receives anonymous usage signals (for example, that a search was made or a screen was opened), your app version, iOS version, device model and language. The user identifier is hashed on your device before it is sent, so it cannot be traced back to you.

We do not use the advertising identifier (IDFA), we do not track you across other companies' apps or websites, and the app does not ask for tracking permission because it does not track.

Car photos in the catalog are downloaded from image servers when you view them. Today, some are served by Fandom, Inc., which hosts the wikis our catalog comes from. Like any web request, downloading a photo reveals your IP address to the server that sends it. No account data is shared with it.

kastr.app is hosted by Cloudflare. Like any web host, Cloudflare processes your IP address and basic request data in server logs to deliver pages and protect the site. The website sets no cookies and runs no analytics or advertising scripts.

If you email us, we use your message and email address only to answer you.

Kastr asks for camera access only when you scan or take a photo of a car, and for photo library access only when you add a picture from it. You can change these permissions at any time in the iPhone Settings app. Kastr works without them.

• To provide the service you ask for (account, sync, scanning, community, Kastr Pro): performance of our contract with you.
• To keep Kastr secure, moderate content, prevent abuse of free credits and improve the app with anonymous analytics: our legitimate interests, balanced against your rights.
• To keep scan photos for improving recognition: your consent, which you can withdraw at any time.
• To keep records we are required to keep, or to answer lawful requests: legal obligation.

We share data only with the service providers below, who process it on our behalf and under contract, and never for their own advertising.

• Apple Inc. (USA): Sign in with Apple and App Store payments.
• Supabase, Inc. (USA), with data hosted in the European Union (Paris, France): account, database, file storage and server functions.
• RevenueCat, Inc. (USA): subscription status.
• TelemetryDeck GmbH (Germany): anonymous analytics.
• A third-party AI provider, via our server, to identify scanned cars (coming soon, named here before release).
• Cloudflare, Inc. (USA): website hosting and domain.
• Fandom, Inc. (USA): delivery of some catalog photos.

We may also disclose data if the law requires it, or to protect the safety of users.

Some of these providers are based in the United States. When personal data leaves the European Economic Area, it is protected by the European Commission's Standard Contractual Clauses or by the provider's certification under the EU-U.S. Data Privacy Framework.

• Data on your iPhone: until you delete it or delete the app.
• Account data, synced garage, posts and contributions: until you delete your account. It is then removed from our active systems within 30 days, and from backups when they rotate.
• Approved catalog data you contributed stays in the catalog without your name.
• Reports and moderation records: up to 12 months, longer only if needed for a legal claim.
• Support emails: up to 3 years after our last exchange.
• Subscription records at RevenueCat and Apple: as long as they need them to manage purchases and meet their legal obligations.

You can delete your account from the account settings in the app. This deletes your profile, your synced garage, your posts, comments and photos, and your private submissions; it revokes the Sign in with Apple link and deletes your customer record at RevenueCat.

Deleting your account does not cancel an App Store subscription. Cancel it in the Settings app (your name, then Subscriptions) to avoid being charged again.

You can also ask us to delete your account by writing to support@kastr.app from the email address linked to it.

You can ask to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw your consent at any time. Under French law, you can also give instructions about what happens to your data after your death.

Write to support@kastr.app. We answer within one month. If you think we have not handled your request properly, you can complain to the CNIL (cnil.fr) or to the data protection authority where you live.

Kastr can be used by collectors of any age, but creating an account and using community features requires being at least 13, or the minimum age set by the law of your country. If you believe a child has created an account without the consent required in their country, contact us and we will delete it.

Data travels over encrypted connections. Account data is protected by access rules so each user can only read their own private data, and secret keys stay on our servers, never in the app.

When this policy changes, we update the date at the top. If a change matters, for example a new provider or a new kind of data, we will also tell you in the app before it applies.