Privacy Policy

Last updated: June 30, 2026

Pullhound (“we,” “us,” or “the app”) is operated by Oval Innovations, LLC. This policy explains what information the Pullhound mobile app and website collect, how we use it, and the choices you have. By using Pullhound you agree to this policy.

1. Who we are

Oval Innovations, LLC — the data controller for Pullhound. You can reach us about privacy at alerts@ovalinnovationsllc.com.

2. Information we collect

Pullhound is designed to collect as little as possible. We do not require a name, password, or account sign-up. Specifically:

Data	Why	When
Anonymous account ID	Securely store your watchlist, collection, and feed and keep them on your device	Created automatically on first launch (Firebase Anonymous Authentication — no email or password)
Watchlist (player names you choose)	To search marketplaces for new card listings of those players	When you add a player
Collection & want list (cards you own or want, with details such as set, year, serial, grade, purchase/sale prices, storage location, tags, and grading-submission status)	To catalog your collection, value it from the market, and track your portfolio	When you add or edit cards in your collection or want list
Card photos you save	To show a picture of each card in your collection	Only when you add a photo to a collection card (stored privately under your anonymous account in Firebase Storage)
Card images you scan	To identify a card, estimate a grade, or look up its value using AI	Only when you tap Scan; the image is sent to our AI provider to read the card and is not stored by us afterward
Push token	To send you new-listing alerts on your device	Only if you enable Push in Settings
Email address	To send you new-listing alert emails	Only if you enable Email alerts and enter an address (in the app), or join the website waitlist
Usage & diagnostics	To understand which features are used and keep the app reliable	While using the app (Firebase Analytics; aggregated/de-identified app events and basic device info such as app version and OS)
Device integrity signal	To prevent abuse of our servers	When the app calls our service (Firebase App Check — Apple App Attest / Google Play Integrity)

We do not collect your contacts, precise location, or payment/financial information, and we do not access your photo library beyond the photos and scans you choose to add. Pullhound contains no third-party advertising and we do not use tracking for ads.

3. How we use your information

• Operate the core service: monitor marketplaces for the players on your watchlist and build your feed.
• Catalog and value your collection, estimate grades, and answer questions about your cards (including via AI).
• Send the alerts you’ve turned on (in-app, push, and/or email).
• Keep the service secure, prevent abuse, and fix problems.
• Understand aggregate usage to improve the app.

We process this data to provide the service you request and for our legitimate interest in operating and improving Pullhound. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Service providers and third parties

We rely on a small number of trusted providers to run Pullhound:

• Google Firebase (Authentication, Firestore database, Cloud Functions, Cloud Messaging, Analytics, App Check, Hosting) — stores your data and powers alerts. See Google’s Privacy Policy.
• eBay — we query the public eBay Browse API to find listings and link you to eBay item pages. We send eBay your search terms (the player names on your watchlist); we do not send eBay your identity. eBay is a trademark of eBay Inc.; Pullhound is independent and not affiliated with or endorsed by eBay. Your activity on eBay is governed by eBay’s own privacy policy.
• Anthropic — when you scan a card or use an AI feature (card identification, grade estimate, checklist, or the collection assistant), we send the card image and/or related text to Anthropic’s Claude API to generate the result. This data is sent without your identity, is not used to train their models, and is not retained by us after the result is returned. See Anthropic’s Privacy Policy.
• Email delivery — if you enable email alerts, we send mail through our email provider (Titan Email) to deliver messages to the address you provide.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the public.

5. Data retention

We keep your watchlist, collection (including any card photos), want list, feed, settings, and tokens for as long as you use Pullhound. A short “seen” record of listings is kept so we don’t alert you about the same item twice. Card images you scan for AI identification or grading are processed to return a result and are not retained afterward. If you delete the app, request deletion, or stop using the service, we will delete or de-identify your data within a reasonable period.

6. Your choices and rights

• Notifications: turn push or email alerts on or off any time in the app’s Settings, or revoke notification permission in your device settings.
• Watchlist: remove any player at any time, which stops monitoring for it.
• Access & deletion: you can request a copy of your data or ask us to delete it by emailing alerts@ovalinnovationsllc.com. Because accounts are anonymous, please contact us from, or reference, the email address or device involved so we can locate your data.
• Waitlist: reply to any waitlist email or contact us to be removed.

Depending on where you live (for example, the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights to access, correct, delete, or restrict processing of your personal information, and to lodge a complaint with a supervisory authority. We honor these requests as required by law and do not discriminate against you for exercising them.

7. Security

Data is encrypted in transit (HTTPS/TLS) and stored on Google Firebase infrastructure. Access to your data is restricted by security rules so that only your anonymous account can read or write it, and our backend uses privileged access solely to run the monitoring service. No system is perfectly secure, but we work to protect your information.

8. Children’s privacy

Pullhound is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

9. International users

Pullhound is operated from the United States and our providers may process data in the United States and other countries. By using the app you understand your information may be transferred to and processed in countries with different data-protection laws than your own.

10. Changes to this policy

We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above, and significant changes may be highlighted in the app or on this page. Continued use of Pullhound after an update means you accept the revised policy.