This policy explains what personal data the Collectery mobile app (the "App") collects, why, and your rights over it. It is written to meet the EU General Data Protection Regulation (GDPR).
Henri Irmscher - Appentwicklung
Seckbacher Landstr. 66
60389 Frankfurt am Main, Germany
Email: privacy@collectery.de
Data protection contact: Henri Irmscher, privacy@collectery.de.
When you choose to cut out an object or generate an AI card or 3D model, the relevant photo is processed by our own AI models. These models run in an isolated GPU environment that we rent from Runpod, Inc. and pin to data centers in the EU/EEA. Processing is transient: images are transferred through short-lived signed links, are not kept by the infrastructure provider beyond the processing itself, and are never used to train AI models. Free "local" looks are composed entirely on your device and are not sent anywhere. Only the images you actively submit for AI processing leave your device for that purpose.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Create your account and provide the App's core features | Performance of a contract (Art. 6(1)(b)) |
| Process AI cutouts, cards, and 3D models you request | Performance of a contract (Art. 6(1)(b)) |
| Notify you when a 3D model you requested is ready or has failed | Performance of a contract (Art. 6(1)(b)) |
| Notify you about social activity, such as new followers and follow requests, if you enable these notifications | Legitimate interests (Art. 6(1)(f)) - you can turn them off at any time |
| Process subscriptions and credit purchases and unlock paid features | Performance of a contract (Art. 6(1)(b)) |
| Show and reward advertising; use advertising identifiers | Consent (Art. 6(1)(a)) |
| Crash and error diagnostics | Consent (Art. 6(1)(a)) |
| Optional product usage analytics (feature and funnel events) | Consent (Art. 6(1)(a)) |
| Security, abuse, and fraud prevention (including rewarded-ad verification) | Legitimate interests (Art. 6(1)(f)) |
We share data only with providers that process it on our behalf:
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database, and file storage (your account, cards, and images) |
| Brevo | Delivery of sign-in and account emails (EU hosting) |
| Runpod, Inc. | GPU infrastructure (EU/EEA data centers) on which we run our own AI models for cutouts, stylized cards, and 3D models |
| Google AdMob (Google Ireland Ltd.) | Rewarded advertising and ad consent management |
| Google Firebase Cloud Messaging (Google Ireland Ltd. / Google LLC) | Delivery of push notifications you enable. On iOS, delivery is completed by the Apple Push Notification service (Apple) |
| RevenueCat | Subscription and in-app purchase management |
| Apple / Google | Sign-in, app distribution, and in-app purchases |
| Sentry | Crash and error reporting (EU region; only with your consent) |
| PostHog | Optional product usage analytics (EU hosting; only with your consent) |
The App shows rewarded video ads through Google AdMob. Before serving ads in the EU/UK we ask for your consent through Google's consent message, and on iOS we ask for App Tracking Transparency permission. You can review or withdraw your ad consent at any time in the App under Account -> Manage ad consent. If you subscribe to Pro, the App is ad-free. More on how Google uses data: policies.google.com/technologies/partner-sites.
Some providers (for example Google) may process data on servers outside the EU/EEA, including the United States. Where that happens, the transfer is safeguarded by an EU adequacy decision where the provider is certified under the EU-US Data Privacy Framework and, where needed, by the European Commission's Standard Contractual Clauses together with additional safeguards where appropriate.
Our AI processing runs on infrastructure rented from Runpod, Inc., a US company. We pin this processing to data centers in the EU/EEA, transfer content only through short-lived signed links, and do not have it retained after processing. For any residual access from outside the EU/EEA, Runpod's Data Processing Agreement with the European Commission's Standard Contractual Clauses applies.
We keep personal data only as long as necessary for the purposes above:
Under the GDPR you have the right to:
To exercise these rights, contact privacy@collectery.de.
You can turn push notifications on or off per category at any time in the App under Settings -> Notifications, or disable them entirely in your device's system settings. Disabling notifications does not limit any other App feature.
You can turn optional usage analytics on or off at any time under Settings -> Share usage analytics. Crash reporting can be toggled separately under Settings -> Send crash reports.
The App is not directed to children under 16. We do not knowingly collect personal data from children under 16; if you believe a child has provided us data, contact us and we will delete it.
We may update this policy as the App evolves. Material changes will be reflected by the "Last updated" date above and, where appropriate, announced in the App.
Questions about this policy or your data: privacy@collectery.de.