Privacy Policy
Comps · Last updated: October 15, 2026
Comps is operated by Khoi Le, a sole proprietor based in California, United States ("Comps", "we", "us"). Comps tells you what an item is and what it's worth from a photo you take. This policy explains what happens to that photo and to the other information the app uses.
Questions: [email protected].
The short version
- Your photo goes through our server to OpenAI and eBay, and nowhere else. eBay finds listings that look like your item; OpenAI reads the item and names it. Our server keeps no copy of your photo, only a one-way code made from it, for 30 days (section 1).
- You're asked first. Nothing is uploaded until you tap Allow on the "AI-Powered Scanning" message, and you can turn it off any time in Settings.
- Location and other hidden details are removed from the photo on your phone before it's sent.
- We never use your photo to train AI.
- Your scan history and saved scans stay on your phone, unless you sign in: then they're also kept in your account (never your photo), so they come back on a new phone.
- We keep little: a random ID for your installation, a record of each scan (what we identified and the prices we showed, never the photo), how many scans you made each day, and what you tapped on results. We don't sell your information and we don't show ads.
- An account is optional. If you make one, we keep your email address, and your name and profile picture if you sign in with Google.
- Apple takes payment. We never see your card.
1. Your photo
When you scan an item:
- eBay, an online marketplace, receives your photo on every scan. Its image search compares your photo with listing photos and sends back listings that look like your item. The photo may be searched up to three times in one scan (all listings, used listings and new listings). The marketplace handles what it receives under its own terms and privacy notice. Its developer terms treat information sent to it as non-confidential, and we have no agreement with it that limits how long it keeps your photo or what it uses it for.
- OpenAI, an AI service provider, receives your photo on every scan. Its models read the text and details on the item to name it (on a trading card, the card's face or a grading label), and compare your photo with product pictures to choose a clean picture of the item to show you. Under its terms for business customers, data sent through its API is not used to train its models unless the customer opts in, and we have not opted in. It keeps API data in abuse-monitoring logs for up to 30 days, unless longer retention is required by law or is reasonably necessary to protect its services or others from harm. It scans images for child sexual abuse material and may keep a flagged image for review.
- No other service receives your photo.
- A photo of a tag or label. If you add a second photo of the item's tag or label, it goes to OpenAI only, to read the brand, model, size or code printed on it, and is handled like your item photo.
- On a trading card, your phone reads the card's printed text first. The app uses Apple's on-device text recognition to read the card's name and number, and sends that text with the photo to our server, which uses it to find the card in our own catalogue. The text isn't kept.
- We never use your photo to train AI. Comps doesn't train any AI model on your photo or on anything made from it.
- Our server passes your photo to those two services and keeps no copy. It isn't saved in our database or file storage.
- We keep a one-way code of your photo for 30 days, so the same photo gets the same answer. The code is a short string of letters and numbers worked out from the photo; the photo can't be rebuilt from it. We keep it with what the AI service said about the photo (the item's name, any text printed on the item, and which product pictures match it), so if the same photo is scanned again it gets the same answer instead of a slightly different one. The code isn't linked to you, your account or your installation, and it's deleted after 30 days.
- Before your photo leaves your phone, the app shrinks it and removes its location (GPS), date, camera details and every other hidden detail the file carries. Comps never asks for access to your location.
- Before any photo is sent, the app asks. An "AI-Powered Scanning" message says: "Comps sends your photo to OpenAI to identify your item and to eBay to find matching listings. Nothing else is sent, and our servers never keep your photos." It has a link to this policy and two buttons, Not Now and Allow. It appears the first time you tap Scan (during setup, after iPhone asks for the camera and your photos), or on the Scan tab if you haven't answered yet. Nothing is uploaded until you tap Allow. If you tap Not Now, no photo is sent and scanning stays off until you turn it on. You can change your answer any time: Profile → the "•••" button → AI-Powered Scanning. Your answer is stored on your phone with its date. If we change which services receive your photo, we'll ask again.
- Some pictures are made on your phone. When no product picture can be found, the app may cut your item out of your photo onto a white background to show on the result. That picture is made on your phone and never sent anywhere.
- Your photos stay on your phone. Each scan appears in the app's History on your phone, with a copy of the photo, for 7 days; a scan you save stays until you delete it. The photo copies are never uploaded. Signed out, delete a scan or delete the app and it's gone. Signed in, History and Saved are also kept in your account, without the photos (section 3): delete a scan and it's deleted there too; delete the app and they come back when you sign in again.
- Scans finish even if you leave the app. Our server keeps each scan's result (the item's name, prices and links, never your photo) with your installation's random ID for 24 hours, so the app can still show it if you leave mid-scan. Then it's deleted, or sooner if you delete your account. If you leave the app for more than about 30 seconds during a scan, the app also sends our server your phone's notification token, so we can tell you "Your scan is ready"; the token is deleted after 24 hours.
Please don't photograph people or other people's private information. Comps is for items.
2. Searches we make for you (text only, never your photo)
To name and price an item, our server sends text searches built from the item's name to the services below: the marketplace, search and product-data providers, and the AI service. None of them includes your photo, and none of them identifies you: these services see our server, not your phone.
| Kind of service | What it receives | Why |
|---|---|---|
| eBay (an online marketplace) | Searches built from the item's name, the name of a version you pick from the list, and the words you type in "Not right? Type it" | Find listings for the item |
| A shopping-search provider (store and image results) | The item's name, e.g. "Carhartt Detroit Jacket Brown" | Store prices and product pictures |
| A resale-market data provider | A shoe's or streetwear item's name or style code | Resale prices |
| A price-guide provider | A card's, video game's, LEGO set's or collectible's name or catalogue number | Sold prices from its price guide |
| A barcode lookup provider | A product barcode number, only if your camera saw one | Name a product from its barcode |
| OpenAI (the AI service provider) | Listing titles, shop names, and product pictures from catalogues, stores and marketplace listings | Name the item, sort real stores from resellers, and choose a clean product picture |
We also keep our own copy of a card price guide on our server, so many card prices are looked up without sending the price-guide provider anything.
3. What we keep on our servers
| What | Why | How long |
|---|---|---|
| An installation ID: a random code the app creates the first time it runs. It isn't taken from your phone's hardware, your Apple ID or any advertising ID. | To tie the records below together, and to find them when you ask us to delete them. | As long as those records. |
| How many scans your installation made each day, whether they were trading cards, and how many eBay searches they used. | Daily limits, and to stop abuse. | 90 days. |
| How many scans you made each day during the free trial, under your subscription's random app user ID (or your installation ID), with the installation that made them. | The trial's limit of 10 scans a day. | 90 days. |
| What you do on a result: which version you picked from a list (and which versions were offered), which listing or store you opened (its position and price), whether you marked the answer right or wrong, whether a typed search found anything (never the words you typed), and whether you saved the scan; and reports of problems on your phone (which screen, and what failed, such as a picture that didn't load). | To learn which answers are wrong and fix them. | 12 months. |
| A record of each scan: the kind of item, the name and brand we identified, the search we ran, the prices we showed and how sure we were, how long each step took, how the photo was taken (the camera's lens, zoom, focus and exposure settings and the photo's size), the app's version, and whether it ran on a simulator. Never the photo, or where or when it was taken. | To learn which answers are wrong, fix them, and keep scans fast. | 12 months. |
| A security key for your installation (Apple's App Attest): the public half of a key your iPhone makes for Comps, Apple's confirmation that it belongs to the real Comps app, and a counter. | To check that requests come from the real Comps app on a real iPhone, which keeps out scripts that would use up the service. | Until you delete your account. |
| Your phone's notification token, if you leave the app mid-scan (section 1). | To tell you "Your scan is ready". | 24 hours. |
| Emails you send us, at [email protected] or with Send feedback (which adds the app's version and your installation ID). | To answer you. | 12 months. |
| Your account, if you make one (section 5). | Sign-in. | Until you delete it. |
| Server logs: our hosting provider records requests to our server, including your IP address. | To keep the service running and secure. | A limited period set by our hosting provider. |
| A one-way code of each photo, with what the AI service said about it (section 1). Not linked to you or your installation. | So the same photo gets the same answer. | 30 days. |
| A scan's result (the item's name, prices and links; never the photo), with the installation's random ID. | So a scan finishes even if you leave the app. | 24 hours. |
| Your History and Saved items, if you're signed in: for each scan, the item's name, its prices and where each came from, the web address of the product picture we showed, the condition and quantity you chose, and when you scanned and saved it. Never your photo. | So History and Saved come back when you reinstall Comps or sign in on a new phone. | Saved items: until you remove them or delete your account. Other History items: 7 days after the scan, as on your phone. |
| Your place on the waitlist, if you join it: your installation's place in line, its invite code and the code of whoever invited it. If notifications are allowed on your phone (for example after you turn on "Get a notification when you're in"), also your phone's push token; the app also reports whether notifications are allowed each time the waitlist screen opens. All keyed on your installation's random ID. | To let people in in order, credit invites, and tell you when you're in. | Until you delete your account. |
We also keep reference data that isn't about you: a list of shops and what kind of shop each is; store prices and product pictures found for a product name, remembered for 7 days; and resale-market prices, remembered for 24 hours, so the same product shows the same prices.
We don't keep your photo or the words you type. The item names and prices we keep are those in the records above: each scan's record (12 months), a scan's result (24 hours), your History and Saved while you're signed in, the versions you were offered and the price of a listing you opened.
4. Analytics and crash reports
We use an analytics provider to understand how the app is used and to find crashes. The app sends it:
- when the app opens, which onboarding screens you saw, and whether you opened or closed the subscription screen or started a trial or subscription;
- when a scan starts, when its result appears (the kind of item, whether it had a price, why not, and how long each step took) and when a scan fails (the reason, from a fixed list);
- whether a list of versions was shown, tapped or skipped (how many options, not what they were), your answer to "Was this right?", whether a typed search found anything (not the words), and whether you allowed notifications;
- crash and error reports, with prices, search words and any photo data removed first;
- recordings of how you move through the app's screens, with every text field and every image hidden, so a recording never shows your photo or anything you typed.
You can turn this off: Profile → the "•••" button → Share usage analytics. It's on until you turn it off. With it off, the app sends the analytics provider nothing: no events, no error reports and no screen recordings. Turning it on again starts from then. This switch covers the analytics provider only; our own records in section 3 are kept as described there.
These carry a random ID created on your phone (not your name or email) and ordinary device details: phone model, iOS version, app version, screen size, language and time zone. The analytics provider is set to discard your IP address and not to look up your location, so neither is stored. It never receives your photo, the names of the items you scan, or their prices.
5. Your account (optional)
You can use Comps without an account. If you make one, our hosting and database provider keeps:
- With email and password: your email address and an account ID. We never see your password.
- With Apple: your email address (or Apple's "Hide My Email" address) and an account ID. We don't store your name. We also keep a token from Apple, used only to cancel Sign in with Apple when you delete your account.
- With Google: your email address, your name and your profile picture (Google shares these when you sign in, and they are stored with your account), and an account ID.
When you sign in, we link your installation ID to your account, so that deleting the account also deletes your installation's records. While you're signed in, your History and Saved are kept in your account, so they come back when you reinstall Comps or sign in on another phone. Your photos are never uploaded for this; a restored item shows the product's picture. When you first sign in, the items already on your phone are added to your account. Signing out removes them from the phone but keeps them in your account. Deleting your account deletes them.
6. Subscriptions
Payment is handled by Apple; we never see your card or bank details. Our subscription-management provider receives your purchase and subscription status from Apple and an app user ID (a random ID, or your account ID once you sign in) so the app knows whether you're subscribed. With each scan the app sends our server your plan, that app user ID and your time zone offset, and our server asks the subscription-management provider to confirm your plan, so the trial's daily limit counts your own day. Restore purchase (in Settings, or Restore on the plans screen) asks Apple, through the same provider, which subscriptions your Apple ID holds. The trial reminder and offer reminders are notifications scheduled on your phone; nothing is sent to us for them.
Your subscription belongs to your Apple ID. Deleting the app or your Comps account does not cancel it. Cancel it in your iPhone's Settings → your name → Subscriptions.
7. Links and pictures
- Tapping a listing or a store opens it in Safari or the marketplace's own app. That site sees your device the way any website does, and its own privacy policy applies.
- Marketplace links may be affiliate links. Comps may earn a commission on purchases made through them, through the marketplace's affiliate program. The link carries our affiliate ID, not information about you; the marketplace may use cookies on its own site to record that the purchase came from Comps.
- Pictures in the app (product photos and listing photos) are loaded directly from the marketplace, resale and card catalogues and store websites they come from. Those servers see your IP address and which picture was requested.
8. Who we share information with
We don't sell your personal information, we don't share it for targeted advertising, we don't show ads, and we don't work with data brokers. We share information only with the service providers below, to run Comps; when the law requires it; or, if Comps is sold or merged, with the new owner, who must follow this policy.
| Service provider | What it receives, and why | Does it know who you are? |
|---|---|---|
| eBay (an online marketplace) | Your photo, to find listings that look like your item; text searches built from the item's name, a version you pick or words you type, to find its listings | No |
| OpenAI (an AI service provider) | Your photo (and a tag photo, if you add one), to name the item and choose a clean picture of it; listing titles, shop names and product pictures, to sort real stores from resellers | No |
| Search and product-data providers (store search, resale-market data, a card and game price guide, barcode lookup) | Text only: the item's name, a style code, a card number or a barcode number, to find prices and pictures. No personal information | No |
| Supabase (our hosting: server, database and sign-in) | Everything our server receives, including your IP address; your account; the records in section 3, to run Comps | Yes, if you have an account |
| PostHog (analytics) | The analytics, error reports and screen recordings in section 4, unless you turn it off, to see how the app is used and find crashes | A random ID only |
| RevenueCat (subscription management) | Your purchase and subscription status from Apple and an app user ID, so the app knows whether you're subscribed and Restore works | Yes, if you're signed in |
| Apple | Payment, subscriptions and Restore (under Apple's policies); Sign in with Apple, if you use it; push notifications ("Your scan is ready", "You're in"), only if you allow them; App Attest, to confirm requests come from the real Comps app | Yes |
| Sign in with Google, if you use it, under Google's policies | Yes | |
| Expo (a push notification service) | Your phone's push token and the "You're in" notification, only if notifications are allowed | No |
| Email: Cloudflare (email forwarding) and Google (Gmail) | The emails you send to [email protected], to answer you | Yes (your email address) |
We choose providers whose published terms commit them to protecting this information.
9. How long we keep it
- Your photo: not kept by us; up to 30 days at the AI service provider (section 1); at the marketplace under its own terms.
- The one-way code of your photo and the AI service's answers about it: 30 days.
- A scan's result, with your installation's random ID: 24 hours.
- A record of each scan (what we identified and the prices we showed, never the photo): 12 months.
- Daily scan counts, free-trial daily counts and daily eBay search counts: 90 days.
- What you tap on results, and problem reports from your phone: 12 months.
- Your phone's notification token for a scan you left: 24 hours.
- Your installation's security key: until you delete your account.
- Your account: until you delete it.
- Your History and Saved, if you're signed in: saved items until you remove them or delete your account; other History items 7 days after the scan.
- Your waitlist place, invite codes and push token: until you delete your account.
- Emails you send us: 12 months.
- Server logs: a limited period set by our hosting provider.
- Analytics: as long as our analytics provider keeps it under our plan, or until you delete your data.
- On your phone: History for 7 days; saved scans until you delete them or the app.
10. Your choices
- Tap Not Now, and nothing is sent. No photo is sent until you tap Allow on the "AI-Powered Scanning" message.
- Delete your data from the app: Profile → the "•••" button → Delete account. This deletes your account (if you have one) and the History and Saved kept in it; your installation's records (each scan's record and result, daily counts, free-trial counts, what you tapped and problem reports, your waitlist place and push tokens, and its security key); the link between your installation and your account; and Apple's sign-in token. It also asks our analytics provider to delete your analytics (this takes a few days), and wipes your scans and settings from the phone. It works when you're signed out too; then it deletes this installation's records. It doesn't cancel your subscription (section 6).
- Withdraw your agreement to send photos any time: Profile → the "•••" button → turn off AI-Powered Scanning. Scanning stops until you turn it on again. Photos already sent can't be recalled from the marketplace or the AI service provider.
- Remove any item from History or Saved at any time; it is removed from your account too. Deleting your account deletes all of them.
- Ask us to see, correct or delete your information at [email protected].
- Camera, photos and notifications can be turned off in your iPhone's Settings. The app can't scan without the camera or a photo you choose.
11. Children and teens
Comps isn't meant for children under 13, and we don't knowingly collect information from them. If you're 13 to 17 (or under the age of majority where you live), you need a parent's or guardian's permission to use Comps, as our Terms of Use say. If you believe a child under 13 has used Comps, write to us and we'll delete what we hold.
12. Security
Everything the app sends travels encrypted (HTTPS). Our database can be read only by our own server, and the keys to the services we use are kept on the server, not in the app. No system is perfectly secure, but we keep what we hold small, which limits what could ever be exposed.
13. Where information is processed
Comps is offered in the United States and Canada. Our database is in the United States, in our hosting provider's US East region, and our analytics provider and our AI service provider process information in the United States. Our server's code may run in our hosting provider's data centre nearest you, which for someone in Canada may be in Canada; it keeps nothing there, and what it keeps is stored in our database in the United States. If you use Comps from Canada, your information is transferred to and processed in the United States, where it may be accessible to authorities under US law.
14. Your privacy rights
California and other US states. Depending on where you live, you may have the right to know what personal information we hold, to have it deleted or corrected, and to opt out of its sale or its sharing for targeted advertising. We don't sell or share it that way. To use any of these rights, use Delete account in the app or write to [email protected]. We won't treat you differently for using them.
Canadian residents. You have the right to access the personal information we hold about you, to ask us to correct it, and to withdraw your consent (as described in section 10). Write to [email protected]. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.
15. Changes
If we change this policy we'll post the new version here with a new date. If we change which services receive your photo, the app will ask for your agreement again before your next scan.
16. Contact
Khoi Le · California, United States [email protected]