Privacy Policy
Pullwise is made by NasrTech. This policy explains, in plain words, what the app keeps on your phone, what it sends, to whom, and how to turn it off.
What we collect
Pullwise has no accounts and never asks for your name, email or contacts. Besides the ads described below, this is what the app sends:
- Invite records, only when an invite link is used. Each copy of the app makes a random 8-character invite code, which is part of the invite link you can share. On its first start the app asks Google Play, on the phone, which link the install came from. If it was a friend's invite link, the app writes one record to Google Cloud Firestore under that friend's code: a one-way SHA-256 hash of the Android ID the phone gives Pullwise, and the time. The hash only makes each phone count once and cannot be turned back into the ID. The inviter's app reads how many records its code has, to add bonus scans. No names, contacts or other details are stored. Like any server, Firestore receives the phone's IP address with the request.
Google services built in:
- Firebase Analytics records app events — for example that the main action finished, that the price screen was opened or that a purchase was made — as short codes and counts, with your device model, Android version, language and country and an app-instance identifier Firebase creates for this installation. When a purchase fails, the event also carries the Google Play Store version, which app installed this one and whether it runs in a second profile or a cloner app, so payment problems can be told apart from app bugs. Events never include what you type or your files.
- Firebase Crashlytics records crash reports (device model, Android version, an installation identifier and a technical stack trace) so faults can be fixed.
Both are optional: switch off Settings › Share anonymous usage data and the app sends no usage events and no crash reports from then on. See Firebase privacy.
Ads
Free use shows ads from Google AdMob. Where the law requires it (EEA, UK, Switzerland) the app asks for your consent with Google's consent form before any ad is requested, and Settings › Ad privacy options lets you change your choice. AdMob may use the advertising ID, IP address and device information to show and measure ads; see how Google uses data in ads. Buying Pro removes ads.
Purchases
Pro is sold through Google Play Billing as a monthly or yearly subscription or a one-time unlock, and it removes every ad. We never receive or store your payment details. The app keeps only, on your device, whether Pro is active. Manage or cancel a subscription in the Google Play Store.
Permissions
- Network state: to tell whether the phone is online before prices, ads or usage data are fetched or sent.
- Camera: to photograph the card you want to identify. The photo is read on your phone by Google ML Kit text recognition, which works offline, and the photo file is deleted right after. Photos are never uploaded.
- Internet: to download the daily card prices (one file per card game you use), card pictures and the More apps list, to load ads for free users, to record and count invite joins, and for usage statistics, crash reports and Google Play purchases.
- Notifications: for the reminders Pullwise schedules on your phone (your free scans are back; a short nudge after a few days away). The app asks only when you turn reminders on, which it offers after your first card is added, and Settings › Reminders turns them off.
- Run at start-up: only to set your reminders again after the phone restarts or the app is updated.
- Google Play Billing: to sell Pullwise Pro.
- Advertising ID: read by Google AdMob to show and measure ads to free users. Firebase Analytics is set not to collect it. You can reset or delete it in Android's settings.
Your collection
The cards you add and their quantities are stored only on your phone. Pullwise has no accounts and no server copy of your collection. Uninstalling the app deletes it; CSV export (Pro) lets you keep a copy.
Prices, card pictures and the More apps list
Prices come from files NasrTech publishes on Google Cloud Storage, downloaded at most once a day and only for the card games you use. Card pictures load from public card databases (TCGdex for Pokémon, YGOPRODeck for Yu-Gi-Oh!, OPTCG API for One Piece), and the list of our other apps loads from nasrtech.dev. Like any website, these servers receive your device's IP address when the app downloads from them. Nothing about you or your collection is sent with these requests.
Reminders
Reminders are local notifications the app schedules on your phone: one the morning after your free scans run out, and a short nudge after 3 and after 7 days away (every visit moves those further out). No server sends them and no push token is created. They stay off until you turn them on, and Settings › Reminders or Android's notification settings turn them off. If usage statistics are on, opening a reminder is counted as an app event.
Sharing a pull or your invite link
Share builds the picture of your card on your phone and hands it, with your invite link, to the app you choose in Android's share sheet. Pullwise itself uploads nothing.
Rating prompt
Now and then, after you add cards or buy Pro, Pullwise asks Google Play to show its own rating card. Google handles your rating; the app never learns whether or how you rated.
Permissions added by Google's libraries
The installed app also lists permissions that come with the libraries it uses. Keep awake (WAKE_LOCK): Firebase and AdMob finish sending data in the background. Vibration (VIBRATE): a reminder may vibrate if your notification settings allow it. Foreground service (FOREGROUND_SERVICE): declared by Android's WorkManager library, which Google's SDKs use for small background tasks; Pullwise starts none of its own. Android ad services (ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS): Google's ads and analytics SDKs use Android's privacy-preserving ad features where the phone has them; you control them in Android's privacy settings. Install referrer (BIND_GET_INSTALL_REFERRER_SERVICE): asks Google Play which link brought the install. Storage on Android 9 and older (WRITE_EXTERNAL_STORAGE): declared by the camera library; Pullwise never asks for it and saves nothing to your photos or files. DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION: an internal permission that lets only Pullwise message its own components; it gives no access to anything.
Trademarks
Pullwise is an independent, unofficial app, not affiliated with, endorsed or sponsored by Nintendo, The Pokémon Company, Creatures Inc., GAME FREAK inc., Konami or Bandai. Pokémon, Yu-Gi-Oh! and One Piece names are trademarks of their owners.
Children
The app is not directed at children under 13 and we do not knowingly collect information from them.
Your choices
- Change your ad consent: Settings › Ad privacy options.
- Stop usage data and crash reports at any time: Settings › Share anonymous usage data.
- Uninstalling the app removes everything it kept on your device.
- Turn reminders off: Settings › Reminders, or Android's notification settings.
- Reset or delete your advertising ID in Android's settings.
- Nothing we hold is linked to your name or email. To ask for deletion, email support@nasrtech.dev: we delete the usage data we can match to your request and, if you send us an invite link, every join record stored under its code.
Contact
support@nasrtech.dev · NasrTech, Cairo, Egypt. When this policy changes, the date below changes with it.