Privacy

Short version

Comic Scry processes the comic-cover photos you capture in order to identify the book. Photos are never saved to your camera roll and are never persisted on Comic Scry's servers. Your collection (what books you scanned, when, what prices the app showed) stays on your device. We do not sell, share, or advertise against your data, ever.

What we collect

• Cover photos at scan time. When you tap to capture, the full-resolution image is held in memory, sent to Comic Scry's identification service if the on-device tiers can't recognize it, and discarded as soon as the response comes back. The full image is never saved to your camera roll and never stored on our servers. If you choose to save the result to your collection, a smaller compressed thumbnail of the capture is stored locally on your device (so the saved item shows the cover you scanned). That thumbnail never leaves your phone.
• A per-install device identifier. Two pieces, tied together: an Apple App Attest key (Apple's anti-fraud attestation, generated on-device, never shared) plus a random UUID we generate on first launch and store in the iOS Keychain. Together they let our server confirm a scan request is from a real, unmodified Comic Scry install and count it against your allotment. The UUID is not linked to your Apple ID, your name, or anything else identifying.
• Scan counts. We track the number of scans you've used so we know whether you've still got free trial or Comic Scry Pro scans left. We do not track which comics you scan on our servers unless you turn on anonymous scan stats (below).
• App Store purchase receipts. When you purchase Comic Scry Pro, Apple sends us a cryptographically signed receipt. We verify it server-side to unlock Pro on your device.
• Newsletter email address (only if you sign up). The signup form on the homepage POSTs your address to a small Cloudflare Worker endpoint that forwards it to Beehiiv (our newsletter host). We don't persist the address on our side. Unsubscribe in any email or by emailing hi@comicscry.com.

What we do not collect

• Your name, email address, account, or any other personal identifier (unless you choose to email support).
• Your collection. The books you save are stored locally in SwiftData on your device; Comic Scry's servers never see them.
• Your location, contacts, photos other than the cover capture, or any third-party analytics SDK. No Mixpanel, Amplitude, Segment, or similar.

Third-party services

Comic Scry uses these services to identify and price comics, host the app's backend, and host this website. Each is invoked anonymously — none of them receive any identifier tied to you.

• Azure OpenAI (Microsoft) — for the AI cover-identification fallback. We send the cover image. Microsoft's Azure OpenAI data, privacy, and security policies apply: no training on input, 30-day at-rest abuse-monitoring window, then deletion.
• PriceCharting — for raw (ungraded) market price ranges on identified comics. We send a series + issue + year query. PriceCharting aggregates recent sold-listing data internally; the API returns a low–high USD range, not per-listing details.
• Grand Comics Database (comics.org) — a 501(c)(3) nonprofit, volunteer-curated since 1994. Used by Comic Scry's server (not your device) for cover artwork in the on-device bundle. We don't send your device identifier to GCD. We donate to support their work.
• Cloudflare — hosts the Comic Scry identification Worker (the backend API), the request-counting KV store, and this website. Standard IP-level request logs are retained briefly for abuse detection per Cloudflare's policies — see Cloudflare's privacy policy.
• Beehiiv — hosts our newsletter. Only invoked if you submit the email signup form on the homepage. See Beehiiv's privacy policy.
• Apple App Store — for purchase processing. We never see your payment details.

Children

Comic Scry is rated 4+ and contains no objectionable material, but it is not directed at children under 13. We do not knowingly collect data from anyone under 13.

Data deletion

Uninstalling the app removes all local data — your collection, the device identifier in Keychain, and the learned-cover cache. There's nothing on our end you need to do to wipe what's on your phone.

The server-side scan count tied to your device's App Attest identity is automatically deleted after 365 days of inactivity.

To request earlier deletion of the server-side scan-count record: open Comic Scry → Settings → Data ID and copy the value shown there. Email hi@comicscry.com with that ID and we'll delete the row within 30 days, subject to abuse-prevention review. We need the ID because no email address or other identifier is ever linked to your scan count — if you can't give us the ID we have no way to find your row.

If you've already uninstalled the app and can't retrieve the ID, your account auto-purges within 365 days of your last scan. There's nothing we can do to delete it sooner than that — there's no reverse path from an email address to the App Attest identity.

Contact

Questions about this policy? Email hi@comicscry.com.