Privacy policy

Last updated: 29 September 2026

This policy describes what the ToyTrace mobile app actually does with your data. We have tried to write it as a plain description, not as a list of everything we might possibly do.

1. Who we are

ToyTrace is operated by OMMETRICS BİLGİ TEKNOLOJİLERİ PAZARLAMA ANONİM ŞİRKETİ (“Ommetrics”), which is the data controller for the data described here (the “data controller” under the EU GDPR, and the veri sorumlusu under Turkey's Law No. 6698 on the Protection of Personal Data, “KVKK”).

Registered address: Küçükbakkalköy Mah. Ali Ay Sok. No:19/3, Ataşehir, İstanbul, Türkiye
Contact for anything in this policy: support@toytrace.com

2. The short version

• You do not need to sign up. The app creates an anonymous account the first time you open it.
• Your photos are used to recognise the toy and are kept in your own account. They are never made public without a moderation review.
• On iOS, the app asks before using the advertising identifier to measure which ad brought you here. If you say no, it is not collected. We do not access your location, and we do not read your contacts or other apps.
• Payments are handled entirely by Apple or Google. Your card details never reach us.
• There is not yet a delete button in the app. To have your data deleted, write to us and we will do it.

3. What we collect

Anonymous account

The first time you open the app, it creates an anonymous account (Firebase Anonymous Authentication). That gives you a random account ID. It does not include your name, email address or phone number. You never have to sign in to use ToyTrace. If the app ever offers to link your account to a sign-in, for example so you can back up or restore your collection, that will be optional and offered only at that moment, never as a condition of using the app.

Photos you take or choose

When you scan a toy, the photo is shrunk on your phone, uploaded to our servers so the toy can be recognised, and stored in your own account's storage area. See Your photos.

Scan results and your collection

For each scan we store the result: what the AI model read from the photo (brand, line, name, year, variant markings, packaging, visible condition), which catalog product it was matched to, and the price evidence shown to you. When you add a toy to your collection, we store that entry along with anything you enter yourself (condition, notes, extra photos). All of this sits under your anonymous account.

Onboarding answers and settings

If you answer the optional questions when you first open the app (for example, which toy categories interest you), we store those answers and your language setting in your account profile.

Support messages

When you send a message through the in-app support form, we store:

• the topic you chose and your message;
• your email address, only if you type one in (so we can reply);
• the app version, platform (iOS or Android), device model as a marketing name (for example “Pixel 8”; on iPhone this is currently not sent), and the app language;
• a reference to your most recent scan, so we can look at the result you are writing about.

If you email us directly instead, we receive whatever your email contains, including your email address.

Correction reports

When you report that a result is wrong, we store the reason you chose, your note if you wrote one, the product's canonical key (our internal identifier for the product), and references to the scan and its photo so a person can review the report.

Usage analytics

The app uses Firebase Analytics to record usage events, such as a scan starting, succeeding or failing, a screen of the introduction being viewed, the subscription screen being opened, or a correction being sent. Events carry little context (for example the toy category) and are linked to your anonymous account ID. Firebase Analytics also automatically records standard technical details: an app-instance identifier, device model, operating system version, app version, and an approximate country or region derived from your IP address. Analytics data is exported to Google BigQuery, where we analyse it.

The same usage events are also sent to Mixpanel, a product analytics service we use to understand how people move through the app (for example, where they stop during the introduction). Mixpanel receives each event with its small amount of context, your anonymous account ID, the platform (iOS or Android) and app version, and whether you are on the free or paid plan. Mixpanel's software also records technical details such as device model and operating system version, and derives an approximate location (country or city) from your IP address. If you subscribe, Adapty sends Mixpanel your subscription events with payment amounts, linked to the same anonymous account ID. The app does not send Mixpanel your name, email address, photos or collection, and Mixpanel is not used for advertising. Mixpanel stores this data in the United States.

Subscription status

If you subscribe, Adapty tells us whether your subscription is active, so the app can apply the right plan. See Services that process data for us.

4. What we do not collect

We are stating this explicitly because many apps do collect these:

• No ads in the app. The app does not show ads. It does measure which ad brought you to it, which on iOS only uses the advertising identifier if you allow it — see Advertising measurement.
• No location. The app does not ask for or access your device's location. (The approximate country or region described under Usage analytics is derived from your IP address, not from your device's location.)
• No device name, serial number or operating-system build identifier. Many people put their own name in their device's name, so we deliberately leave it out.
• No contacts, address book or information about other apps on your device.
• No payment card details. Apple or Google handle payment. We never see your card.

5. Your photos

• Your photo is used to recognise the toy. It is sent to an AI model (see Google Gemini API) that describes what is visible.
• It is stored in your own account's storage area. Other users cannot see it.
• We keep a shared product catalog so that the same toy gets the same answer for everyone. Your photo is never used as a public catalog reference image automatically. That could only happen after a person has reviewed it and marked it as moderated.
• If you send a correction report, the person reviewing it can see the photo from that scan.

6. Advertising measurement (Adjust)

We advertise the app, and we want to know which ad actually brought someone to it, so we can stop paying for the ones that don't. The app uses Adjust GmbH for this measurement.

• On iOS, you are asked first. The app shows Apple's App Tracking Transparency prompt. If you allow it, the Apple advertising identifier (IDFA) is collected and passed to Adjust so your install can be matched to the ad you tapped. If you don't allow it, the IDFA is not collected, and measurement happens through Apple's SKAdNetwork mechanism instead, which reports campaign results to us without any identifier for you.
• On Android, the Google Advertising ID is used for the same purpose. You can reset or delete it in your device's settings.
• What else Adjust receives: device information (such as model and operating system version), app open and session events, and subscription events with payment amounts, which reach Adjust through Adapty.

This is used only to measure our own advertising. We never sell your data.

7. Crash reporting (Firebase Crashlytics)

When the app crashes, technical details about the crash — the device model, operating system version, app version and a stack trace showing where in the code it happened — are sent to Firebase Crashlytics so we can find and fix the bug. Crash reports are about the state of the app, not about you: they do not include your photos or your collection.

8. Services that process data for us

About the listings

We do not store eBay listings. Our servers fetch listings, calculate the price statistics (such as the typical range and the number of listings), and then discard the listings. We keep only the calculated statistics, for at most 24 hours before they are recalculated. The listings you see in the app are fetched live from eBay each time you open them, and are not saved.

If you tap a listing, it opens on eBay's website or app, and eBay's own privacy policy applies from that point.

9. Where the data is stored

Our database, file storage and server functions run in Google Cloud's us-central1 region in the United States. Our other service providers may also process data outside your country. If you are in the European Economic Area, the United Kingdom or Turkey, this is an international transfer of personal data. We rely on the safeguards our providers offer for such transfers (such as the European Commission's Standard Contractual Clauses) and, for Turkey, on the mechanisms KVKK Article 9 provides.

10. Why we are allowed to process it

• To provide the app you asked for (performance of a contract, GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)): your anonymous account, uploading and recognising photos, scan results, your collection, subscription status.
• Your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)): collecting the advertising identifier on iOS. You give or refuse it in the App Tracking Transparency prompt, and you can withdraw it at any time in your device's settings.
• Our legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)): answering support messages, reviewing correction reports to improve the catalog, keeping the service secure, understanding how the app is used through analytics, measuring our own advertising, and fixing crashes.
• Legal obligations (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)): where the law requires us to keep or disclose records.

11. How long we keep it

• Your account, photos, scans, collection and settings: for as long as your account exists, or until you ask us to delete them.
• Price statistics: at most 24 hours before they are recalculated. These are about products, not about you.
• Support messages and correction reports: for as long as we need them to handle the request and improve the catalog, or until you ask us to delete them.
• Analytics: under the retention settings of Firebase Analytics, of our BigQuery export, and of Mixpanel.

Deleting an entry from your collection in the app removes that entry. It does not delete the underlying scan record or its photo. To remove everything, ask us (see below).

Uninstalling the app does not delete your data from our servers. Because the account is anonymous, you also cannot sign back in to it after uninstalling unless you linked it to a sign-in first.

12. Your rights and deleting your data

Depending on where you live, including under the GDPR and under KVKK Article 11, you have the right to find out whether we process your data, to get a copy of it, to have it corrected or deleted, to object to or restrict certain processing, to receive your data in a portable format, and to find out who it has been shared with.

How to have your data deleted

There is currently no automatic delete option in the app. To have your data deleted, contact us and we will do it:

• Easiest: in the app, open Settings → Contact support, choose “Account and data” and ask for deletion. A message sent from the app tells us which anonymous account is yours.
• By email: support@toytrace.com. Because accounts are anonymous, an email alone does not tell us which account is yours. We will reply and ask you to send a short message from the in-app form so we can find it.

We respond to requests within 30 days. Deleting your data does not cancel a subscription: that is handled by Apple or Google. See Cancelling.

Complaints

If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to your local data protection authority. In Turkey, that is the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu). In the EU, it is the supervisory authority in your country.

13. This website

toytrace.com is a static website. It sets no cookies, runs no analytics or tracking scripts, and has no forms. Our hosting provider processes standard technical request data (such as IP addresses) to serve and protect the site.

14. Changes to this policy

If the app starts doing something new with your data, we will update this page before that change reaches the app and change the date at the top. Significant changes will also be pointed out in the app.

15. Contact

OMMETRICS BİLGİ TEKNOLOJİLERİ PAZARLAMA ANONİM ŞİRKETİ · Küçükbakkalköy Mah. Ali Ay Sok. No:19/3, Ataşehir, İstanbul, Türkiye · support@toytrace.com · or Settings → Contact support in the app.

This policy describes how the app currently works. It is pending review by a lawyer, and the text may be adjusted as a result of that review. It is not legal advice.