Privacy Policy

When you use Aireco, we collect:

• Email address (for account creation and notifications)
• Username and optional profile information (display name, bio, avatar)
• Card collection and binder data you create
• Usage analytics (page views, interactions) via Vercel Analytics

We use your information to:

• Provide and improve the Aireco service
• Send account notifications (e.g. magic link login emails)
• Process orders for physical binders via Shopify
• Analyse usage patterns to improve the app

Your data is stored securely on Supabase (PostgreSQL). We use Row-Level Security to ensure you can only access your own private data. Data is hosted on AWS infrastructure in the Sydney region where possible.

We use the following third-party services, each with their own privacy policies:

• Supabase — database and authentication
• Vercel — hosting and analytics
• Shopify — e-commerce and payments
• Klaviyo — email marketing (waitlist only)
• pokemontcg.io — card data and images

We use cookies solely for authentication (Supabase session tokens). We do not use third-party advertising cookies. Analytics are privacy-friendly and do not track individuals across sites.

You have the right to:

• Access all data we hold about you
• Request deletion of your account and data
• Export your collection and binder data
• Opt out of marketing emails at any time via the unsubscribe link

To exercise these rights, email us at privacy@aireco.app.

Aireco is not directed at children under 13. We do not knowingly collect personal information from children under 13.

We may update this policy from time to time. Continued use of Aireco after changes constitutes acceptance of the updated policy. We will update the "Last updated" date above.

For privacy questions or data requests, email privacy@aireco.app.