Draft pending legal review. This page describes how FourVault behaves today. It has not yet been reviewed by counsel and is not a final legal representation.
FourVault Privacy Policy
Read this first, if you are a parent
FourVault is built for children. A parent owns the account. Children do not have their own logins, cannot sign up, and cannot invite anyone. We collect as little about a child as the app can function with, and we do not run advertising or third-party analytics on any screen a child sees.
How consent works
A parent creates the account and creates each child profile, up to four per family. Before we collect personal information from a child, we obtain verifiable parental consent, and the account records when that consent was verified. A parent can withdraw consent at any time by deleting the child's profile or the whole account, described below.
What we collect about a child
Deliberately little. For each child profile:
- A first name and a chosen mascot. That is how a child is addressed in the app.
- An age range (under 10, 10 to 12, or teen), not a birth date.
- Photos of trading cards the child adds to a vault, and the card details we recognise from them.
- Short text the child types, such as a card nickname or a vault name. Every one of these passes through content moderation before it is saved.
What we never collect from a child
- No email address, no phone number, no last name.
- No location.
- No advertising identifiers, and no behavioural profile.
- No third-party analytics or advertising on any child-facing screen. None.
What we collect from the parent
The account email and sign-in credentials, the consent record, and subscription status if you purchase anything. Payments are handled by the app store, not by us; we never see your card.
Error reporting
We use crash and error reporting to find defects. It is configured to strip personal information before anything is sent, and text a child typed is excluded from it entirely. Card photos are never sent to it.
Artificial intelligence features
FourVault can recognise a card from a photo and can give an educational verdict on whether a proposed trade looks fair. To do that, the card image or the card details are sent to our processing providers. These are used to answer that one request. A child's name, profile or typed text is not sent with it, and the providers are not permitted to use it to build a profile of your child.
Trade verdicts are educational opinions about trading cards. They are not financial advice, and card values shown on the free tier are labelled as estimates that are not market verified.
Purchases
Any purchase happens behind a parental gate that a child cannot pass on their own. There are no loot boxes and no randomised paid mechanics in FourVault, and there never will be. Cosmetic items are bought one at a time, deliberately, by a parent.
Who we share with
We do not sell your data or your child's data. We never share it for advertising. We share it only with the service providers that operate the app for us, and only to run it: hosting and the database, image storage and delivery, card recognition and the AI verdict, error reporting, and subscription status. We also disclose information where the law requires it.
Deleting your data
A parent can delete a single child profile or the entire account. Deleting a child removes that child's profile, vaults, cards, valuations, trades and friend links. Deleting the account removes the family and everything under it by the same chain. Deletion is permanent and cannot be undone.
Deleting your FourVault account does not cancel an app store subscription. Manage that in your app store subscription settings.
Your rights as a parent
You may review the personal information we hold about your child, ask us to delete it, and refuse to permit further collection. Email us and we will act on it. We will not condition a child's participation on disclosing more information than is reasonably necessary.