Privacy Policy
UFApp - Hero Rush ("the app", available at https://herorushapp.ufapp.io) is a trading-card collection tracker. This policy describes what data the app handles and how. The short version: we store your email and your card collection so the app can work, and nothing else. No ads, no analytics trackers, no selling of data.
What we collect
- Account email — used to create and identify your account and to send account-related email (sign-up confirmation, password reset). If you sign in with Google, we receive your email address and basic profile (name) from Google; we do not access anything else in your Google account.
- Collection data — which cards you mark as owned, wishlisted, favourited, or available for trade, with quantities and timestamps.
- App preferences — such as your language choice and day-streak dates.
We do not collect payment details, contacts, location, or advertising identifiers. The app contains no third-party analytics or advertising code.
Where it is stored
Data is stored in two places:
- On your device — the app keeps a local copy of your collection in your browser's storage so it works offline.
- Supabase — when you sign in, your collection syncs to a database hosted by Supabase (servers in Singapore). Access is protected by row-level security: your data is readable and writable only by your own authenticated account.
We send transactional email only (account confirmation, password reset), from no-reply@ufapp.io. There is no marketing mailing list.
Sharing
We do not sell, rent, or share your personal data with third parties. The only processors involved are our infrastructure providers: Supabase (database and authentication), Hostinger (web hosting and email delivery), and Google (only if you choose Google sign-in).
Data retention and deletion
Your data is kept while your account exists. To delete your account and all associated data, email contact@ufapp.io from your account email address and we will remove it. Clearing your browser storage removes the local copy at any time.
Children
The app is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes, the effective date above will be updated. Material changes will be noted in the app's News section.