Privacy Policy

Last updated: October 31, 2026

In short: your collection, decks, games and playgroup stay on your device and in your own iCloud. We can't see them and we don't sell them. When you use an AI feature, only what's needed for the answer is sent to our server and to our AI provider, and only after you've agreed in the app. Usage statistics are optional and off by default: if you turn them on, Google Analytics for Firebase tells us how the app is used, never what you write. Purchases are handled by Apple.

Who we are

ManaPal is developed by AlbosApps, which is responsible for the processing described here. For any privacy question or request, write to albosapps@gmail.com.

Data that stays on your device and in your iCloud

Your collection, binders, wishlist, decks, games, game history and the names of the friends you add to your playgroup are stored on your device and synced through your private iCloud account (Apple CloudKit). This data is not sent to our server and we can't access it. Apple's privacy policy applies to iCloud.

Camera

ManaPal uses the camera only when you scan cards, to recognize them. Card photos leave your device only when you use an AI feature that needs them (for example AI card recognition or the card condition estimate), as described in the next section.

AI features (Mote)

When you ask Mote a question, request a deck analysis, ask it to build a deck, take the "Find your Commander" quiz or request a condition estimate, we send to our server and to Anthropic (Claude), our AI provider:

your request;
the cards and decks needed to answer it;
the card photos to recognize or assess, when relevant;
your Magic experience level and favorite formats, if you gave them in the onboarding survey, so Mote can adapt its answers.

This happens only after you give your consent in the app, and only to generate the answer. We never send your name or email address. Anthropic processes this data under its commercial terms and its privacy policy.

Sign in with Apple and Mana

AI features require Sign in with Apple. We use the anonymous identifier provided by Apple to manage your Mana balance, your free daily AI allowance, your ManaPal Pro status and invite codes. This information is stored on our server, hosted by Supabase. Collection, decks and games work without signing in.

For each AI action, our server also records its type, cost, the AI model used, the amount of processing it took (tokens), whether it completed or was refunded, and when it happened. This record is linked to your account's anonymous identifier. It doesn't contain your questions, your cards or your photos, and it isn't tied to the statistics switch below, because we need it to charge and refund Mana and to apply daily limits. We also look at these records to understand which AI features are used, how often they fail and what they cost.

Purchases

Mana packs and ManaPal Pro subscriptions are sold and processed by Apple through the App Store. We don't receive your payment details: we only receive the confirmation needed to credit your Mana or activate Pro.

Invite codes

If you use or share an invite code, we record the link between the two accounts' anonymous identifiers to give the Mana reward to both the person who invited and the person who joined.

Card data, images and prices

Card data and images are downloaded from Scryfall. As with any internet request, Scryfall receives the technical information needed to deliver them, such as your IP address. If you use "buy the missing cards", the app opens a third-party store, whose own privacy policy applies.

Onboarding survey

When you first open ManaPal you can answer a short optional survey: how long you've played Magic, what you play, what you want to do with the app and which app you used before. Your answers are stored on your device and used to tailor the app, for example which tab opens first and the default format for new decks. Your experience level and favorite formats are also included in your AI requests, as described above. The answers reach Google only if you turn on usage statistics.

Usage statistics (Google Analytics for Firebase)

The "Help us improve ManaPal" switch controls usage statistics. It's off by default, and while it's off ManaPal sends no statistics to Google. You'll find it on the last page of onboarding and in Settings › Privacy, and you can change your mind at any time. Every feature works the same with the switch off.

If you turn it on, ManaPal sends usage statistics to Google Analytics for Firebase, a service Google provides to us. We use them to understand which features are used, where people get stuck and whether they come back, so we can improve the app. We collect:

What you do in the app: the screens you open and actions such as onboarding steps, adding cards (how many and from where, such as scanner, search or import), scanning sessions, importing or exporting a collection, creating, sharing or playtesting decks, starting and ending games, starting an AI action, opening the Mana store or the Pro page, and tapping "buy the missing cards". These come with details such as counts, durations, game format and number of players.
General information about your use: whether you have Pro, the size of your collection and the number of your decks as ranges (for example 51–250 cards, never the exact number), your app and card languages, and your onboarding survey answers.
In-app purchases: the product, its price and currency.
Technical information collected automatically by Firebase: a random identifier for your installation of the app, app version, device model, iOS version, sessions and time spent in the app, and your approximate location (such as country or region), worked out from your IP address. Google Analytics doesn't log or store IP addresses.

We never send to Google anything you write, deck names, player names, your questions to Mote, card photos, the list of your cards, your name, your email address or your Apple account identifier.

The identifier is random and isn't linked to your name, email address or ManaPal account. Because it still distinguishes one installation from another, these statistics aren't fully anonymous, and we treat them as personal data. We use them only to measure and improve ManaPal, not for advertising: we don't use Apple's advertising identifier (IDFA), we don't track you across other companies' apps or websites, and ad personalization is turned off.

Google processes this data for us and may do so outside your country, including in the United States, with the safeguards required by law, such as the European Commission's standard contractual clauses. Learn more in Firebase's privacy information and Google's privacy policy.

Legal bases

Performance of a contract: providing the features you request, including managing your Mana, Pro status and invite codes.
Consent: sending content to our AI provider and collecting usage statistics. You can withdraw consent to usage statistics at any time with the switch in Settings › Privacy. You can withdraw consent to AI processing by no longer using the AI features and writing to us. Withdrawing doesn't affect processing that already took place.
Legitimate interest: looking at the records of AI actions on our server to keep the AI features reliable and their costs under control. You can object by writing to us.

Retention

Data on our server is kept for as long as your account exists. You can delete your account in the app, from the account menu in the Mana store, or ask us to do it: this erases your Mana balance, Pro status, invite codes and AI action records. We keep only a note that your anonymous Apple identifier has already received the welcome Mana, so that it can't be claimed twice.

Usage statistics linked to the random identifier are kept by Google for up to 14 months and then deleted. Reports that combine data from many users and contain no identifier can be kept for longer.

Your rights

Under the GDPR and similar laws you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format and withdraw your consent. To exercise these rights, write to albosapps@gmail.com. You also have the right to lodge a complaint with your data protection supervisory authority.

You can delete the data stored in your iCloud yourself: on iPhone or iPad go to Settings › [your name] › iCloud › Manage Storage, choose ManaPal and delete its data. Deleting the app removes the data stored on that device.

Turning off the "Help us improve ManaPal" switch stops usage statistics straight away. Statistics already collected stay until the retention period above ends. Because they aren't linked to your name, email address or account, we usually can't find the ones that belong to you.

Changes to this policy

If we change this policy, we will update the date at the top of this page. Significant changes will also be announced in the app.

Contact

AlbosApps · albosapps@gmail.com