Privacy Policy

1. Scope

This policy explains how Anime Figure Tracker (“AFT,” “we,” “us”) handles information in the AFT apps, animefiguretracker.com, catalog services, optional public galleries, and support.

Optional app usage counts

The separate Share anonymous app usage counts setting is optional and off by default. If you enable it, AFT records aggregate counts of successful adds, scan outcomes, Pro offer views, plan selections, purchase and restore outcomes, later returns after a first add, and use of measured Pro features. Counts are grouped by day, platform, app version and build, feature trigger, plan, outcome, app-locale region, and installation week where known. Locale region is not detected location. These reports do not contain an installation identifier, account identifier, advertising identifier, purchase token, figure name, photo, search term, note, or individual event history. Development builds do not send these counts, and verified test purchases are excluded from successful-purchase counts. You can turn the setting off in Privacy to stop future reports. Already aggregated counts cannot be linked back to an individual installation for deletion. Store billing records and subscription verification remain separate from this optional measurement.

2. Information you provide

You may provide collection records, figure metadata, prices, notes, photos, scans, gallery settings, featured-figure ranks, figure tags such as Waifu, Husbando, or Grail, an optional permanent username, changeable display name, biography, avatar, profile background, favorite and ranked anime or characters, favorite anime quote, favorite or least-favorite anime, favorite villain, favorite or sentimental figure, favorite manufacturer, current grail, collection focus, boxed or ownership preferences, display preference, collection goal, or links to your YouTube, X, Instagram, or TikTok profile; ratings; optional Figure Feed posts, captions, hashtags, and comments; figure and post likes; saved posts and recommendation bookmarks; reports; support messages; and account choices. To request Store Workspace access, you may provide a store name and request information used by an AFT administrator to review the request. Approved Store Workspace users may also provide retailer branding; optional business or receipt contact details such as a name, email address, phone number, or physical address; locations and staff roles; supplier and purchase-order records; inventory history; costs, asking prices, sales, revenue, and gross-profit information; preorder terms; and customer reservation references, optional display names, deposits, or balances. Retailers are responsible for entering only the customer information they need and for handling it lawfully.

3. Information collected automatically

AFT offers optional, first-party diagnostics so we can see whether supported app versions start successfully. Diagnostics remain off unless you affirmatively enable them. When enabled, reports contain only platform, app version, build number, event type, and an aggregate count. They do not contain an installation or advertising identifier, account details, collection records, photos, searches, notes, prices, barcodes, precise location, or contact information. The database retains daily totals rather than individual diagnostic events. Network infrastructure may still process an IP address and request time to deliver and secure the request. You can change Share Anonymous Diagnostics anytime in AFT Settings.

Separate collection analytics is optional and remains off unless you affirmatively choose to share it. When enabled, AFT sends privacy-minimized figure-category metadata such as catalog identifier, character, series, manufacturer, line, ownership status, and collection date. A random per-install identifier and per-copy identifier are hashed by AFT’s server before storage so we can update or remove that device’s snapshot and reduce duplicate counts. We do not include names, emails, addresses, private notes, shelf names, prices paid, tracking numbers, photo URLs, Google or Apple account information, or advertising identifiers in collection analytics. Turning the setting off sends an empty snapshot that removes that installation’s stored collection rows.

The production Android app also uses Google Analytics for Firebase. When the app starts, the SDK automatically records app installation and lifecycle events, including first opens, sessions, and screen views. It assigns an app-instance identifier and may collect the Android advertising ID when available, approximate location derived from a masked IP address, and in-app purchase or subscription events with product and price details. We use these reports to measure installs, app use, and marketing performance. This collection is separate from the optional diagnostics and collection analytics settings above; turning those settings off does not disable Firebase Analytics. Google processes this information under its own privacy and retention practices.

4. Content processing and moderation

When you request photo identification, upload a public profile picture or profile background, publish one or more Figure Feed photos, or submit content for public-photo review, images may be processed by contracted infrastructure or machine-learning providers solely to provide, secure, or moderate that feature. New profile pictures are re-encoded and held outside public view while automated safety checks run; uncertain results may be reviewed by an authorized moderator. Public gallery and Figure Feed photos are uploaded only through an intentional publishing flow. We re-encode public derivatives and seek to remove embedded metadata, but you must remove visible private information before submission.

Figure Feed comments are screened using automated rules and a contracted machine-learning provider for spam, harassment, threats, hate, sexual content, privacy abuse, and related safety risks. Low-risk comments may publish automatically, high-risk comments may be rejected, and uncertain comments may be held for authorized human review. Automated moderation does not make account-ban decisions by itself.

The photo editor's AI background-cleanup filter runs on your device. AFT does not upload a photo merely because you apply that filter. The edited result leaves the device only if you later choose a separate online feature that uploads it, such as identification, profile or gallery publishing, Figure Feed posting, community review, or cloud backup.

5. Accounts

Apple or Google may provide AFT a provider-specific identifier and authentication information. We do not merge accounts based only on email. Public gallery names are separate from provider identity. Sessions are hashed or otherwise protected and expire according to product and security requirements.

6. Google Drive backup and Google user data

Google Drive backup is optional and begins only when you choose a backup, verification, or restoration action in the Android app. AFT requests the narrow https://www.googleapis.com/auth/drive.appdata permission to create, find, update, and read an AFT backup archive in Google Drive’s hidden application-data folder. The archive can contain your collection records and the figure photos included by the backup process. This permission does not allow AFT to view or modify your normal Google Drive files.

The Android app transfers the backup archive directly between your device and Google Drive over an encrypted HTTPS connection. AFT’s backend does not receive or store the archive or your Google Drive access token. We use Google user data obtained through this permission only to provide the backup, verification, and restoration features you request; we do not use it for advertising, analytics, personalization, or sale, and we do not transfer it to third parties except as necessary for security, legal compliance, or with your affirmative consent. AFT’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can revoke AFT’s Google access at any time from your Google Account’s third-party connections settings.

7. Mobile advertising and consent

The free tier may show interstitial advertisements supplied through Google Mobile Ads (AdMob). After any consent flow required for your region, Google and participating advertising providers may process an IP address and IP-derived general location; device, app, or advertising identifiers when available; advertisements viewed; app and ad interactions; and diagnostic or performance information. These providers may use that information for ad delivery, personalization where permitted and consented, frequency capping, measurement, analytics, fraud prevention, and security. AFT does not intentionally send your name, email address, collection records, private notes, or figure photos to AdMob for advertising.

AFT uses Google’s User Messaging Platform for applicable regional privacy choices. On iPhone and iPad, AFT also asks for Apple App Tracking Transparency permission before tracking that requires permission. Refusing tracking or personalized-ad consent does not remove all ads; contextual, non-personalized, limited, or technical ad delivery may still occur. Where available, you can reopen Ad privacy choices in AFT Settings and can also manage advertising or tracking permissions in your device settings. Learn more about how Google uses information from apps that use its services.

8. Optional push notifications

If you enable notifications, AFT stores a device push token, platform, locale, alert preferences, selected character or series interests, followed-collector alert levels, and delivery status. We use these only for the categories you enable, such as recommendations, matching preorders, price changes, community-photo review results, followed-collector activity or summaries, and Store Mode low-stock notices. Apple Push Notification service or Firebase Cloud Messaging processes the token and delivery metadata to deliver the alert. AFT does not need or collect your phone number for these notifications.

You can disable individual categories in AFT or disable banners, sounds, or all AFT notifications in your device settings. We do not sell notification tokens or preferences or use them for third-party marketing.

9. How we use information

We use information to provide catalog, collection, Store Mode, and optional push-notification features; operate retailer inventory, purchasing, receiving, preorder, reservation, and staff workflows; authenticate accounts; process chosen scans, backups, and galleries; personalize settings; maintain app reliability using aggregate diagnostics; measure Android installs and app use with Google Analytics for Firebase; improve catalog coverage and collection features using collection analytics only when enabled; deliver and measure advertising as described above; secure and troubleshoot services; prevent fraud and abuse; moderate public content; respond to support; and comply with law.

10. Disclosure, sale, and sharing

We disclose necessary information to hosting, database, storage, analytics, authentication, push-delivery, image-processing, advertising, and support providers acting for or integrated with the service; to authorities or rights holders when legally required; and in a merger, financing, or transfer subject to appropriate safeguards. AFT obtains marketplace and market-price information from sources including Rakuten Web Services and eBay's authorized APIs. Those server-side catalog and price lookups are not tied to a collector profile. When an approved community catalog photo is unavailable, AFT may display a live Rakuten marketplace thumbnail rather than copying it into AFT storage. Rakuten and its delivery providers may then receive ordinary network information such as IP address, device request headers, and request time under their own policies. Marketplace links may contain attribution or affiliate parameters. If you open a Rakuten, eBay, or other retailer link, that provider and its delivery partners receive the ordinary request and may process it under their own terms and privacy policies.

We do not sell personal information for money. Some privacy laws may define disclosures involving personalized or cross-context behavioral advertising as a “sale” or “sharing.” Where those definitions apply, AFT provides the consent, opt-out, and privacy-choice controls described above. Google Drive user data is never used for advertising, analytics, personalization, or sale. Push tokens and alert preferences are never used for advertising or shared for another party’s marketing.

11. Public information

Published galleries and approved community images can be viewed by anyone with access to the feature or link. Publishing a gallery also makes the associated collector profile discoverable to other signed-in collectors; a published profile cannot be hidden separately. Other collectors may see your permanent username, changeable display name, biography, avatar, eligible profile background, optional Interests answers, social links, public gallery title and theme, public figure count, follower and following counts, received-like totals and per-figure like counts, collector-card achievements, public collection activity, public featured-figure ranks and figure tags, and, when enabled, a limited recent-figure preview. Figure Feed posts, captions, and published comments you intentionally submit, their like or comment counts, and the profile attached to them are public to signed-in collectors. Comments held for review are visible only to their author and authorized moderators until approved. Your lists of liked figures, saved feed posts, and saved recommendations are shown only to you. A figure detail may identify collectors whose published galleries contain that figure. Social links are public and may let third-party platforms recognize your visit when opened. Approved community photos connected to your account may display your current public @username as contributor attribution. A username may form part of a public profile link and cannot be changed after it is claimed.

Unpublishing your gallery removes your collector profile and posts from discovery after applicable caches expire. You can delete your comments; a post owner may also delete comments on that post. Unpublishing does not withdraw or delete an approved community photo; the photo remains available without username attribution. Approved photos not connected to a collector account are also shown without username attribution. Following or liking never reveals private prices, notes, shelf locations, barcodes, or unpublished photos. You can edit your display name and optional profile fields, remove social links, delete your Figure Feed posts, remove likes, saved posts, or saved recommendations, disable the recent-figure preview where offered, unfollow, remove followers, block another collector, or unpublish your gallery.

AFT may add visible service branding to approved community-photo copies. Other users may not scrape, download, repost, sell, or otherwise reuse a contributor’s photo outside AFT's ordinary sharing features unless the copyright owner permits it. Controls that hide collection value or photos apply only as described in the interface. Do not publish information you want kept private.

12. Retention

We keep information only as long as needed for the purposes above. Optional app diagnostics are stored as daily aggregate totals, not individual event histories. Optional collection snapshots remain while analytics is enabled and are deleted for that installation when the app successfully syncs after you turn the setting off. Account, session, support, public-gallery, Store Mode, and push-notification information is removed or minimized after deletion subject to operational backups, security needs, and legal holds. Google Drive backup archives remain in the user-controlled Google account unless removed through Google’s controls or applicable product functionality. Providers retain information under their own policies and the consent or device controls that apply to you.

13. Your choices and rights

You can opt in to or out of anonymous diagnostics, separately opt in to or out of collection analytics, edit optional collector-profile fields, control optional gallery fields and individual notification categories, disable AFT notifications in your device settings, block collectors, unpublish a gallery to remove it and its profile from discovery, request removal of a community-photo submission, request account deletion, revoke Google access, revisit available ad privacy choices, and manage advertising and tracking permissions in your device settings. A published collector profile cannot be hidden while its gallery remains published. Depending on residence, you may request access, correction, deletion, portability, restriction, opt out of sale or sharing, or request information about disclosures. We verify requests and may retain exempt records. Email the privacy contact below.

14. Security and children

We use safeguards designed for the sensitivity of the data, but no service is completely secure. AFT is not directed to children under 13. Contact us if you believe a child provided personal information improperly.

15. Changes and contact

We may update this policy and will change the effective date and provide additional notice for material changes where required. Questions, rights requests, or advertising opt-out assistance: support@animefiguretracker.com. Include your account identifier if available, but never send passwords, payment credentials, or identity documents by email.