Privacy Policy
Collector: Figure Tracker
Last Updated: September 3, 2026
Jose Antonio Blaya Garcia (“we”, “us”, or “our”) built Collector: Figure Tracker (“Collector”) as a commercial application. This page explains what information the app handles, where it goes, and how you stay in control of it. The short version: your collection lives on your device and in your own iCloud. Nothing about what you paid or what your pieces are worth ever leaves your phone unless you choose to send it.
No Accounts, Nothing Linked to You
Collector has no user accounts. You never sign up, sign in, or give us your name, email address or phone number. We do not have a record of who you are. Everything described on this page is therefore not linked to you: the app has no identifier that connects a market lookup, a shared room, an analytics event or a purchase to a person. Your collection is tied only to your device and to your own Apple ID through iCloud, which we cannot access. Premium is validated through an anonymous app user ID that RevenueCat generates for the installation, not through any account with us.
Information We Collect
Data You Provide
- Your collection — Items, photos, display units, series, check-ins, budget and notes are stored locally on your device. If you enable iCloud sync, they are also stored in your private iCloud database, which only your Apple ID can read. We have no access to it.
- Photos — Pictures you take or import are stored on your device and, with sync on, in your private iCloud. Background removal for the display room runs entirely on your device.
- Preferences — Currency, accent colour, privacy mode, reminders and similar settings are stored locally and in your private iCloud.
Data Sent to Our Servers
A few features need a server. In every case the request carries only what the feature needs and never your name, email, Apple ID or any advertising identifier.
- Market value and barcode lookups — When you ask for a market estimate or scan a barcode, the item's name, brand, barcode, model number, category and your display currency are sent to our server (Cloudflare Workers), which queries the eBay Browse API and returns a ballpark. Results are cached for a short time by query, not by user. Optionally the price you paid is included so obviously mismatched listings can be discarded; it is not stored.
- Visit my room (shared rooms) — When you choose “Visit my room”, Collector uploads a copy of the displays you selected so that people with the link can view them. This copy contains the layout and dimensions of your display furniture; the name, brand, series, category, size and barcode of the pieces on it; the room name you typed; and one image per piece (the photo or cutout shown on your wall, reduced in size). It never contains prices, purchase amounts, market values, notes or any other financial information. See the dedicated section below.
Data Collected Automatically
- Anonymous usage analytics — We use TelemetryDeck to understand which features are used (for example “room viewed” or “item added”). TelemetryDeck receives a salted, one-way hash of your device identifier and no personal data; it cannot identify you and does not track you across apps. See TelemetryDeck's privacy policy.
- Subscription status — Premium is handled by Apple and RevenueCat. RevenueCat receives an anonymous app user ID and your App Store receipt to validate the purchase. We never see your payment details. See RevenueCat's privacy policy.
- Crash and diagnostic data — Only what Apple provides through App Store Connect, if you have opted in with Apple.
Visit My Room (Shared Rooms)
- What is shared — Exactly the data listed above: furniture layout, piece identity and size, room name, one reduced image per piece. No prices, no values, no notes, no account details. The copy is frozen at the moment you share; rearranging your room later does not change it.
- Where it is stored — On Cloudflare (D1 database and R2 object storage) until you delete it. There is no automatic expiry.
- Deleting a shared room — Open the room under “Rooms you've shared” in the app and tap Delete. The copy, its images and every reaction are removed from our servers immediately. The list of rooms you shared is kept in your private iCloud so you can still delete them after reinstalling or changing phones.
- Links are unlisted, not private — Anyone who has the link can open the room in the app or in a web browser. Share it only with people you trust.
- Visitors — Visitors need no account. To count visits and to limit abuse, our server keeps a one-way hash of the visitor's IP address, browser and the current day. The hash cannot be turned back into an IP address and changes every day. Visitors can react with one of six emoji; reactions are stored with that hash only. Visitors can also report a room; reports are reviewed by us and may lead to the room being removed.
How We Use Information
- To provide the features you use: sync, market estimates, barcode lookup, shared rooms.
- To understand which features matter and fix what breaks, using anonymous analytics.
- To validate Premium purchases.
- To keep shared rooms free of abuse.
We do not sell data, we do not show ads, and we do not use any data for advertising or tracking across apps and websites.
Third-Party Services
- Apple — iCloud (CloudKit) sync, App Store purchases, notifications.
- Cloudflare — Hosts our servers for market lookups and shared rooms.
- eBay — Source of market listings for estimates. Your request reaches eBay from our server, not from your device.
- TelemetryDeck — Anonymous usage analytics.
- RevenueCat — Subscription validation.
Data Retention and Deletion
- Your collection stays on your device and in your iCloud until you delete it or remove the app. Deleting an item in the app also deletes its photos and check-ins, locally and in iCloud.
- Shared rooms stay until you delete them from the app.
- Market lookup caches expire automatically and are keyed by item, not by person.
- Analytics events are anonymous and are retained by TelemetryDeck under its own policy.
Children
Collector is not directed at children under 13 and we do not knowingly collect personal information from them.
Your Rights
Because we hold no account and no personal identifiers, most of your rights are exercised directly in the app: delete items, turn off iCloud sync, delete shared rooms. If you believe we hold something about you, or you want a shared room removed that you can no longer access, contact us and we will help.
Changes to This Policy
We may update this page as the app evolves. Material changes will be noted in the app's release notes.
Contact Us
Questions about this policy or a shared room? Please contact us by email.