Den Den Lens Privacy Policy

1. Who we are and what this covers

Den Den Lens is provided by Fubukisoft (“Fubukisoft,” “we,” “us,” or “our”), a brand operated by PT. FUBUKI SOFT INDONESIA, which is the data controller for the personal information described here. This Privacy Policy applies to the Den Den Lens mobile application for iOS and Android and to the support and account services that link to this policy.

Den Den Lens can be used without an account. The app starts in guest mode, and the main journeys do not require you to sign in. Signing in is optional and exists so your collection can persist and sync.

2. Information we collect

Information you provide

• Account information, if you choose to create an account: your email address or sign-in provider identifier, and basic profile details. Den Den Lens supports Sign in with Apple.
• Collection content, such as the cards in your portfolio and watchlist, quantities, conditions, targets, notes, and preferences.
• Assistant messages, being the questions you ask the in-app assistant and the context of the screen you asked from.
• Condition photographs, only if you choose to attach a card photo when asking the in-app assistant to assess its condition.
• Support communications, including your email address and the content of messages you send us.

Information collected when you use the app

• Device and app information, such as operating system, app version, language, and device type, used to operate and secure the service.
• Advertising information, in the free version only. Google’s advertising service collects device and advertising identifiers and ad-interaction information directly through the Google Mobile Ads SDK. See Advertising below.
• Limited technical information generated while the app runs, such as error and performance information, used to keep the app working correctly. Den Den Lens does not include a third-party analytics SDK or a third-party crash-reporting SDK.
• Security information, such as sign-in events and records used to prevent abuse.

If you use Den Den Lens in guest mode, collection content stays on your device and is not associated with an account held by us.

3. Camera, photos, and on-device card recognition

Den Den Lens asks for two optional device permissions:

• Camera, so you can scan a trading card to identify it.
• Photo library, so you can import a card photo or a listing screenshot instead of scanning.

Both are requested only when you use the feature, and you can decline either and continue using the rest of the app.

We do not use the camera in the background, and we do not scan or index your photo library — only the images you select or capture are used. Den Den Lens does not request microphone access and does not record audio.

The separate, optional Goro condition-photo workflow does send the photo you choose off your device for assistant analysis, as described in section 5. Advertising in the free version is described in section 7.

4. How we use information

We use personal information to:

• identify cards you scan and match them to catalog entries, which happens on your device;
• store and synchronise your portfolio, watchlist, and settings if you have an account;
• produce the price, portfolio-value, and market information the app shows;
• answer questions you put to the in-app assistant;
• respond to support, privacy, and account requests;
• monitor reliability, investigate errors, and improve the app;
• detect abuse, protect users, and enforce our Terms; and
• comply with law and protect legal rights.

Where applicable law requires a legal basis, we process information to perform our contract with you, with your consent, to comply with legal obligations, and for legitimate interests such as security and service improvement, balanced against your rights.

5. The in-app assistant

Goro is the in-app assistant. When you ask Goro a question, your question and the relevant app context are sent over an encrypted connection to a Fubukisoft server function hosted by our cloud service provider. The function passes the request to a third-party language-model provider to generate a reply. The provider credentials are held only on our server; the app never holds them.

If you voluntarily attach a card condition photograph, the app resizes and compresses the selected image and sends it through the same server function to the language-model provider so Goro can validate and analyse the card’s visible condition. This is separate from ordinary Lens card recognition, which remains on your device. Attaching a condition photograph is optional, and the rest of Den Den Lens remains available if you do not use this workflow.

Fubukisoft does not upload Goro condition photographs to cloud storage, write them to its database, or include them in its application telemetry or logs. The language-model provider processes request content as our service provider and may retain it temporarily for security or abuse-prevention purposes under its terms and the configuration of our provider account. Because that upstream retention can apply, we do not describe this processing as immediately deleted or ephemeral.

Do not put information into Goro, including in a condition photograph, that you would not want processed by that provider. If you do not use Goro, this path is never used.

The market figures the assistant may state are produced by the app’s own deterministic engine, not by the model, and generated answers are checked against that engine before they are shown to you.

6. How we share information

We do not sell your personal information for money.

The free version of Den Den Lens shows advertising supplied by Google. Depending on your region and your consent choices, that can involve device and advertising identifiers being used for personalised advertising. Some privacy laws describe that as “sharing” or “selling” for cross-context behavioural advertising. Section 7 explains what happens and how to change it, and Members do not receive advertising at all.

• Service providers. We use providers for cloud hosting and database services, authentication, application operation, and communications. They may process information only to provide services to us, under appropriate restrictions.
• Language-model provider. As described above, for the Goro assistant.
• Google, for advertising in the free version. Google receives advertising and device information directly through the Google Mobile Ads SDK and acts as an independent controller of it. See Advertising.
• App stores and sign-in providers. Apple and Google process authentication, purchases, and related platform activity under their own privacy terms.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, respond to lawful requests, prevent harm or fraud, or protect rights and safety.
• Business changes. Information may be transferred as part of a merger, financing, acquisition, reorganisation, or sale of assets, subject to appropriate protections.

7. Advertising

The free version of Den Den Lens shows advertising. Members do not see advertising.

Who serves the advertising

Advertising is supplied by Google AdMob through the Google Mobile Ads SDK, which is included in the app. In the free version there are banner placements on several screens. When an ad is requested, the Google Mobile Ads SDK communicates with Google directly from your device.

What information Google receives

Google receives this information directly through its SDK, not by way of our servers. It can include:

• your device’s advertising identifier — the Advertising ID on Android, or the Identifier for Advertisers on iOS where the operating system permits its use;
• device and app information such as device model, operating-system version, language, and the app requesting the ad;
• your IP address, from which approximate location can be inferred; and
• information about the ads shown to you and how you interacted with them.

Google acts as an independent controller of that information and uses it under its own terms. See How Google uses information from sites or apps that use our services and the Google Privacy Policy.

Consent and your choices

Where consent is required for advertising — including in the European Economic Area and the United Kingdom — Den Den Lens presents a consent request using Google’s User Messaging Platform before personalised advertising is used. Your choice is recorded and applied to later ad requests, and you can change it again later from the app’s privacy or settings options where that control is offered.

You can also control advertising at the device level, independently of the app:

• Android: Settings → Google → Ads, where you can opt out of ads personalisation or delete your advertising ID.
• iOS: Settings → Privacy & Security → Tracking, which governs whether apps may request access to the advertising identifier.

Where personalised advertising is declined or unavailable, ads may still be shown, but they are non-personalised. Non-personalised ads still involve a request to Google containing limited information such as your IP address and coarse device details, for ad delivery, frequency capping, and fraud prevention.

We do not use advertising to target you based on the content of your card collection, and we do not send your portfolio, watchlist, or Goro conversations to any advertising network.

If we change advertising networks or how advertising works in the app, we will update this policy before that version is released.

8. Retention

We keep personal information only for as long as needed to provide Den Den Lens, meet the purposes in this policy, resolve disputes, maintain security, and comply with legal obligations. Retention depends on the type of information and why we hold it.

Images used for ordinary Lens recognition are processed on your device and are not uploaded to us. Goro condition photographs are transmitted only when you choose to attach one, as described in section 5. Fubukisoft does not persist those photographs in cloud storage, its database, telemetry, or logs, but the language-model provider may retain request content temporarily under its terms and our provider-account configuration. Images on your device remain under your control, subject to your device and operating-system settings.

9. Account deletion

You can delete your Den Den Lens account and the data attached to it using the deletion option in the app, or through our public account-deletion page.

When you delete your account, we delete or de-identify the account and its associated content from active systems, except for limited information we must retain for legal, accounting, fraud-prevention, dispute-resolution, or security purposes. Residual copies may remain in encrypted backups until overwritten through our regular backup cycle. Information de-identified so that it can no longer reasonably identify you may be retained.

10. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, withdraw consent, or object to certain processing. You may also have the right to appeal a decision or complain to your local data-protection authority.

You can use Den Den Lens without an account, decline camera and photo permissions, and revoke either permission at any time in your device settings. You can change your advertising choices as described in section 7, or remove advertising entirely with a membership. To make a privacy request, email contact@fubukisoft.com. We may need to verify your identity before completing a request.

11. Children

Den Den Lens is not directed to children under 13, or under the higher minimum age required in their country to consent to the processing of personal information. We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information to Den Den Lens without appropriate permission, contact us so we can review and delete it.

12. Security and international transfers

We use reasonable administrative, technical, and organisational safeguards intended to protect personal information, including row-level access controls on our database and server-side handling of credentials that a client application should never hold. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Fubukisoft and its service providers may process information in countries other than where you live. Where required, we use recognised legal mechanisms and safeguards for international transfers.

13. Changes to this policy

We may update this Privacy Policy as Den Den Lens develops or legal requirements change. We will post the revised policy here, update the date above, and provide additional notice when required by law. If we change how advertising works in the app, or add an advertising network, we will update this policy before that version is released.