Trovery privacy policy
Publisher: Pylonic Studios LLC, operating as Pylonic Studios. Contact: support@pylonicstudios.com Effective date: October 25, 2026
Your collection
Trovery stores your collection, locations, decks, preferences and collection history on your device. No Trovery account is required.
You choose whether to export a backup through Android's folder picker. The destination provider may store it in its own cloud service under its own terms. Exports contain collection information, including location and deck names you enter. Settings, downloaded card images and camera captures are not included.
You can also opt in to automatic backups to a folder you select. Trovery schedules backups daily and after larger scan sessions, skips unchanged automatic snapshots, and removes older app-recorded archives in that folder according to your selected retention count (10 by default; options are 5, 10, 20 or 30). Android controls when scheduled work runs. Disabling automatic backups stops future scheduling; it does not delete existing files. A cloud-backed folder provider may upload these backups under its own terms.
Local recovery snapshots remain inside the app. They are removed when app data is cleared or the app is uninstalled. Android automatic cloud backup and device transfer are excluded in this release. Keep an exported backup outside the app if you want to recover after losing a device.
Camera and scanning
Camera permission enables scanning. Camera analysis and card matching run on the device. Scan captures are not uploaded or included in collection backups. Release builds disable developer scan-capture diagnostics.
Trovery uses Google's bundled ML Kit text recognition SDK. The SDK can send installation identifiers and device, app, configuration, performance and error information to Google for diagnostics and usage analytics. Recognition inputs and results are processed on-device rather than sent to Google for recognition. Google's handling of SDK information is described in its ML Kit disclosure and privacy policy.
Optional usage analytics
Trovery uses Google Analytics for Firebase to understand onboarding, feature and screen use, scan-session outcomes, and return usage so we can improve the app.
The Share usage data setting is on by default, but collection starts only after you acknowledge the usage-data disclosure with sharing enabled. You can turn it off before continuing or later in Trovery Settings. Dismissing the disclosure without acknowledging it does not start collection. Scanning and collection management remain available when sharing is off and when you are offline.
When enabled, Firebase sends Google an app-installation identifier, app and device information (such as app version, device model and operating system), session and engagement information, and approximate location derived from your network address. Trovery also sends predefined event categories and ranges for scan counts, durations, timeouts, recovery attempts, repeated detections and outcomes. These analytics events do not include card or collection identifiers, collection contents, OCR text, camera images, location or deck names, or other text you enter. Trovery does not set an account-based Analytics user ID. Advertising ID collection and advertising personalization are disabled.
We configure detailed event and user data retention to two months, with retention reset on new user activity turned off. Standard aggregated reports can remain longer. Google's retention processing is described in its Analytics retention documentation.
Turning sharing off stops further Firebase Analytics collection and resets local Analytics data and its installation identifier. It does not request deletion of data already received by Google or remove existing reports. Enabling sharing again can create a new Analytics identifier. This setting does not control the separate ML Kit diagnostics, network services or support correspondence described elsewhere in this policy.
For more about Google's processing, see its Firebase Analytics data disclosure and privacy policy. Contact support@pylonicstudios.com with questions or requests about Trovery analytics. Trovery has no user accounts, and we may not be able to associate an email address with an Analytics installation identifier.
Images and data services
New card images are requested directly from Scryfall. The service receives connection and request information, such as the IP address and requested image. Your image-download settings control when downloads are allowed. Downloaded images are saved in the app’s storage on your device and can be viewed offline while they remain stored there. Removing downloaded images does not delete your collection records.
Trovery requests catalogue and price updates over HTTPS from publisher services hosted on Cloudflare. Cloudflare receives connection and request information, including your IP address and the requested resource. These requests authorize access and download shared data snapshots; they do not contain your collection records or camera inputs.
These services use Google's Play Integrity API to help verify the app, its Google Play installation and the device environment and to prevent unauthorized use. The app obtains an integrity token from Google and sends it with a service challenge to the publisher's Cloudflare service for verification. Google handles integrity information under its privacy policy; see the Play Integrity overview.
The Cloudflare service records invocation logs and service diagnostic messages to operate the service and investigate failures or abuse. Workers dashboard logs are enabled. Cloudflare documents three-day retention for Workers Logs on the service's current Free plan. This period applies to that log product, not all provider-held records. Other Cloudflare processing follows its privacy policy. See Workers Logs retention.
Google Play distributes and updates the app under Google's terms and privacy policy.
Website and support
This website is hosted on GitHub Pages. Visiting it sends connection and request information to GitHub, whose handling of personal information is described in the GitHub Privacy Statement. This site's implementation does not add analytics, advertising, signup forms or embedded third-party media.
If you email support, the publisher and its email provider receive your email address, message and any attachments you choose to send. We use this information to respond to your request and investigate the issue.
Support email is hosted by Google. We retain support correspondence, including attachments, for 90 days after receipt, then delete it.
Your choices
You can deny or revoke camera permission in Android settings. Manage Share usage data, image downloads, saved images, backup reminders, automatic folder backups and their retention count in Trovery Settings.
Clearing app data or uninstalling removes the local collection, downloaded images, preferences and recovery snapshots. Exported backups remain in their selected destination and must be deleted there. Removing local data does not remove logs or diagnostic information held by service providers.
Contact the publisher with privacy questions or requests concerning Trovery analytics or support correspondence. Provider-held information follows the respective provider's policies.
Changes
We will update this page when the app or website's data practices change and revise the effective date.