Beyond Scan Privacy Policy

Effective 1 October 2026

Beyond Scan is an iPhone app made by Beyond Industries LTD. This policy explains what the app collects, why, where it goes, and how to delete it.

The short version

An account is optional. If you sign in with Apple, we keep the account ID Apple gives us, and the name and email address Apple shares with us.
If you sign in, your collection is saved to your account, so it can be restored on a new iPhone and kept the same across your devices.
Camera images are processed on your iPhone. They are never uploaded.
We don't use analytics, advertising or tracking tools, and we don't sell your data.
You can delete your account, and everything in it, from Settings.

Who we are

Beyond Industries LTD is a company registered in England and Wales, company number 12818702. Our registered office is 22 Plymouth Road, Birmingham, B30 2PD. We trade as Beyond TCG, and we are the controller of the personal data described here.

For any privacy question or request, email support@beyondtcg.co.uk.

Your account

You can use Beyond Scan without an account. Without one, everything stays on your iPhone and nothing below is sent to us. An account keeps your collection safe and in step across your devices; you create it with Sign in with Apple, during setup or later in Settings. When you do, we receive and keep:

An account ID from Apple, which is unique to Beyond Scan.
Your email address, if Apple shares it. If you choose Hide My Email, we receive a private relay address from Apple instead of your real one.
Your name, if you choose to share it.
A token from Apple that we keep only so we can ask Apple to remove the link between your Apple ID and Beyond Scan when you delete your account.

We also record when your account was created, when the app last checked in, and which version of the app you use. If your email address is on the Beyond TCG website waitlist, we note that on your account.

During setup, and later in Settings, you can tell us a few things about yourself. We store these with your account:

The name you'd like the app to call you.
The games you collect and how you collect them.
Whether you'd like marketing emails.

We use these to understand what our users collect, so we can decide what to support next. We use them for marketing only if you've agreed to marketing emails.

Your collection

If you have an account, your collection is saved to it. This is what lets it come back on a new iPhone and stay the same on every device you sign in on. It includes:

Your collections and their names.
The cards you own: the exact card and print, when you added it, its condition, and labels such as "for trade". For graded cards, the grader, grade, certificate number and the card details on the slab.
What you paid: cost, currency, date, where you got it, quantity, condition, any note you add, and the last market value the app recorded.
Your wishlist, including any notes.
Scan corrections. When you choose a different card from the one the scanner suggested, we store what it suggested, what you chose, and the card number and set code it read.

Scanning and the camera

Beyond Scan uses the camera to identify cards. Images are processed on your iPhone and are not uploaded. To compare what it sees, the app downloads reference images of cards. It never sends your photos anywhere.

Scan corrections from all users are counted together, without names or accounts attached, to help the scanner tell near-identical prints apart. When the scanner is unsure, it can ask our server which print people most often chose for the card it read. That request contains only the card number and set code.

What stays on your iPhone

These are stored only on your iPhone. They don't reach our servers unless you share them yourself:

Trade records, sales and other cards you've let go.
Custom sets.
Shows you've set up, unless you publish a show page.
Your shop details: name, logo, email address, website and buy rates. Your shop name appears on a show page or trade result only when you use those features.
Selling prices you set on stock. These appear on a show page only if you choose to show prices.
The app's saved prices and price history.
A trade in progress.

Your iPhone's own backups may include this data. Those backups are managed by Apple through your iCloud settings.

Prices and card details

To show prices and card details, the app looks cards up with the services below. A lookup describes the card, such as its name, set, number, print and, for a graded card, its grade. It never includes your name, email address or account.

eBay, for current listings in the UK, US and Japan. The app gets its eBay access from our server, and lookups go to eBay either directly or through our server.
pokemontcg.io, for Pokémon market prices.
TCGCSV, a public copy of TCGplayer prices.
Frankfurter, for exchange rates. No card details are sent.
ACE Grading. When you add an ACE-graded card, the app sends its certificate number to ACE to look the slab up. PSA certificates open on PSA's website when you tap them.
Card images, which load from card databases and card publishers. Images from the publishers' and graders' own servers load through our image server.

Like any web request, these services can see your iPhone's IP address. Their own privacy policies apply.

Links to eBay carry our eBay Partner Network tags, so eBay can pay us a commission if you buy something. The tags identify us, not you. Once you're on eBay, eBay's privacy notice applies.

Vendor Mode

Show pages

If you publish a show page, anyone with its link or QR code can see it. It shows:

Your shop name.
The show's name, dates, venue and table number.
The cards on your table: name, set, number, print and image, and for graded cards the grader, grade and certificate number.
Your prices, if you choose to show them.

Your shop logo, email address and website are not published. The page is stored on our server with your account ID, which is never shown. It is deleted automatically on the date you choose, which can be no more than 90 days after publishing. You can unpublish it at any time, and it's also taken down when you use Delete all data or Delete account.

Every show page has a "Report this page" link that emails support@beyondtcg.co.uk.

Trades by QR code

A customer's QR code goes straight from their iPhone to the vendor's. It doesn't pass through our server. When the vendor finishes the trade, the result is held on our server for 24 hours so the customer's iPhone can show it, then deleted automatically. The result contains whether the offer was accepted, the offer, the shop name, and the cards and amounts.

Marketing emails

Marketing emails are off unless you tick "Receive news and updates from Beyond TCG" during setup. If you do, we may send occasional emails about Beyond Scan and other apps we make, to the email address on your account. If that's a Hide My Email address, Apple forwards our emails to you.

To stop them, use the unsubscribe link in any email, or email support@beyondtcg.co.uk.

Purchases

Subscriptions and purchases are handled by Apple. We never see your payment details. The app checks what you've bought with Apple on your iPhone, and we don't receive or store your subscription status. If you redeem a Founder code, we record that the code has been used and which account used it.

Permissions

The app asks for these only when a feature needs them:

Camera, to identify cards. Images are processed on your iPhone.
Photos, to save a show page's QR code. The app can add to your library but can't read it.
Bluetooth, to send price labels to a label printer.

What we don't do

We don't use analytics, advertising, attribution or crash-reporting tools.
We don't track you across other companies' apps or websites.
We don't sell or rent your data.
We don't ask for your location or contacts.

Who processes your data

We use these companies to run Beyond Scan. They handle your data on our instructions:

Cloudflare runs our servers, including account sign-in, sync, show pages, eBay access and card images, and stores show pages and trade results.
Neon hosts our database, which holds your account and your saved collection.
Apple provides Sign in with Apple, App Store purchases and the Hide My Email relay.
Google hosts the inbox that receives email sent to support@beyondtcg.co.uk.

We don't share your personal data with anyone else unless the law requires it.

Where your data is stored

Our database is hosted by Neon in the United States (AWS US East, Ohio). Cloudflare runs on a global network, so requests and show pages may be handled in data centres outside the UK. When your data is transferred outside the UK, we rely on the safeguards our providers offer, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

Your account and saved collection: until you delete your account.
Items you delete: kept on our server, marked as deleted, so your other devices remove them too. They are removed for good when you delete your account.
Show pages: until the date you choose, up to 90 days, or until you unpublish.
Trade results: 24 hours.
Support emails: only as long as we need them to help you.

After you delete your account, deleted data may remain for a short time in our database provider's recovery backups until they are replaced.

Deleting your data

Delete account (Settings › Delete account) takes down any show pages you've published, then deletes your account and everything stored with it on our server: your profile, collection, costs, wishlist, scan corrections and Founder code record. It asks Apple to remove the link between your Apple ID and Beyond Scan, then clears your collection, trades, shows and shop details from your iPhone. If our server can't be reached, nothing is deleted and the app tells you.

Delete all data (Settings › Delete all data) removes your collections, wishlist, custom sets, sales and trade history, shows and shop details from your iPhone, and marks your saved items as deleted on our server. Your account stays.

Sign out removes your saved collection from your iPhone. It comes back when you sign in again with the same Apple ID. Data that's stored only on your iPhone stays there.

Your rights

Under UK data protection law, you can ask us to:

Give you a copy of your personal data.
Correct anything that's wrong.
Delete your data.
Give you your data in a format you can take elsewhere.
Stop or limit using your data, including where we rely on legitimate interests.
Stop marketing emails. You can withdraw consent at any time.

You can delete everything yourself with Delete account. Pro subscribers can also export any collection as a CSV file from that collection's menu. For anything else, email support@beyondtcg.co.uk. We'll reply within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.

Why we're allowed to use your data

To provide the app you've asked for (contract): your account, saved collection, show pages and trade results.
With your consent: marketing emails.
For our legitimate interests: counting scan corrections to improve identification for everyone, and understanding which games and ways of collecting our users are interested in. You can object to either.

Children

Beyond Scan isn't directed at children under 13, and we don't knowingly collect their personal data. If you think a child has given us personal data, email support@beyondtcg.co.uk and we'll delete it.