← Back to JB Apps
Collector icon

Privacy Policy

Collector: Figure Tracker

Last Updated: November 12, 2026

Jose Antonio Blaya Garcia (“we”, “us”, or “our”) built Collector: Figure Tracker (“Collector”) as a commercial application. This page explains what information the app handles, where it goes, and how you stay in control of it. It applies to Collector on iPhone, iPad and Android. The short version: your collection lives on your device. If you turn sync on, it also lives in your own iCloud or in Collector Sync, where it is encrypted on your device so that nobody but you can read it, us included. Nothing about what you paid or what your pieces are worth ever leaves your phone in a form we can read.

No Accounts, Nothing Linked to You

Collector has no user accounts. You never sign up, sign in, or give us your name, email address or phone number. We do not have a record of who you are. Everything described on this page is therefore not linked to you: the app has no identifier that connects a market lookup, a shared room, an analytics event or a purchase to a person. Your collection is tied only to your device and, if you use sync, to your own Apple ID through iCloud (which we cannot access) or to a random collection key that only you hold. Premium is validated through an anonymous app user ID, not through any account with us. RevenueCat generates that ID for the installation; when you use Collector Sync it is derived from your collection key instead, so that Premium follows the key to your other devices. In both cases it is not connected to a name or an email address.

Information We Collect

Data You Provide

  • Your collection — Items, photos, display units, series, check-ins, budget and notes are stored locally on your device. If you enable iCloud sync (iPhone and iPad), they are also stored in your private iCloud database, which only your Apple ID can read. We have no access to it. If you enable Collector Sync, an encrypted copy is stored on our server; see the dedicated section below.
  • Photos — Pictures you take or import are stored on your device and, with sync on, in your private iCloud or, encrypted, in Collector Sync. Background removal for the display room runs entirely on your device, on iPhone and on Android.
  • Preferences — Currency, accent colour, privacy mode, reminders and similar settings are stored locally and, with sync on, travel with your collection.

Data Sent to Our Servers

A few features need a server. In every case the request carries only what the feature needs and never your name, email, Apple ID, Google account or any advertising identifier.

  • Market value and barcode lookups — When you ask for a market estimate or scan a barcode, the item's name, brand, barcode, model number, category and your display currency are sent to our server (Cloudflare Workers), which queries the eBay Browse API and returns a ballpark. Results are cached for a short time by query, not by user. Optionally the price you paid is included so obviously mismatched listings can be discarded; it is not stored.
  • Visit my room (shared rooms) — When you choose “Visit my room”, Collector uploads a copy of the displays you selected so that people with the link can view them. This copy contains the layout and dimensions of your display furniture; the name, brand, series, category, size and barcode of the pieces on it; the room name you typed; and one image per piece (the photo or cutout shown on your wall, reduced in size). It never contains prices, purchase amounts, market values, notes or any other financial information. See the dedicated section below.
  • Collector Sync — When you turn on Collector Sync, your collection and its photos are encrypted on your device and the encrypted copy is uploaded to our server, so that your other devices can download it. We cannot read it. See the dedicated section below.

Data Collected Automatically

  • Anonymous usage analytics — We use TelemetryDeck to understand which features are used (for example “room viewed” or “item added”). TelemetryDeck receives a salted, one-way hash of your device identifier and no personal data; it cannot identify you and does not track you across apps. See TelemetryDeck's privacy policy.
  • Subscription status — Premium is handled by Apple or Google Play, and by RevenueCat. RevenueCat receives an anonymous app user ID and your App Store receipt or Google Play purchase token to validate the purchase. We never see your payment details. See RevenueCat's privacy policy.
  • Crash and diagnostic data — Only what Apple provides through App Store Connect or Google provides through Google Play, if you have opted in with them.

Visit My Room (Shared Rooms)

  • What is shared — Exactly the data listed above: furniture layout, piece identity and size, room name, one reduced image per piece. No prices, no values, no notes, no account details. The copy is frozen at the moment you share; rearranging your room later does not change it.
  • Where it is stored — On Cloudflare (D1 database and R2 object storage) until you delete it. There is no automatic expiry.
  • Deleting a shared room — Open the room under “Rooms you've shared” in the app and tap Delete. The copy, its images and every reaction are removed from our servers immediately. The list of rooms you shared is kept in your private iCloud so you can still delete them after reinstalling or changing phones.
  • Links are unlisted, not private — Anyone who has the link can open the room in the app or in a web browser. Share it only with people you trust.
  • Visitors — Visitors need no account. To count visits and to limit abuse, our server keeps a one-way hash of the visitor's IP address, browser and the current day. The hash cannot be turned back into an IP address and changes every day. Visitors can react with one of six emoji; reactions are stored with that hash only. Visitors can also report a room; reports are reviewed by us and may lead to the room being removed.

Collector Sync

Collector Sync is optional and part of Premium. It keeps the same collection on your iPhone, iPad and Android devices without an account: the app creates a random collection key, and any device that has the key can join.

  • End-to-end encrypted — Your collection and every photo are encrypted on your device with a key derived from your collection key before they are uploaded. The collection key and the encryption key never leave your devices. Our server stores only the encrypted result and cannot read item names, photos, prices, values or notes. Neither can we.
  • What the server can see — What it needs to run the service: a random identifier derived from your key (the same anonymous ID used to validate Premium), a one-way hash of an access token, the size of the encrypted data and the encrypted photo files, the times of the last changes, whether the identifier has Premium, and the list of linked devices. For each device this is a random number the app created when it was installed, the device model or name (for example “Google Pixel 8” or “iPhone”), whether it is iOS or Android, and when it last synced. You see the same list in the app and can remove devices from it.
  • Where it is stored — On Cloudflare (D1 database and R2 object storage).
  • Your collection key — The key is kept on your device. So that a new phone gets it back, it is also saved in your iCloud Keychain (Apple) or in Google's Block Store backup (Android), both of which belong to your own Apple or Google account and are not accessible to us. If you lose the key and every linked device, the cloud copy cannot be recovered by anyone, because we cannot decrypt it.
  • Deleting it — “Delete cloud data” in Collector Sync removes the encrypted collection, the photos and the device list from our servers immediately; the collection on your device stays. Encrypted copies that no device has opened for 18 months are removed automatically.
  • Abuse protection — To stop someone from guessing keys, the server counts failed attempts against a one-way hash of the IP address for the current day. The hash cannot be turned back into an IP address.

How We Use Information

  • To provide the features you use: sync, market estimates, barcode lookup, shared rooms.
  • To understand which features matter and fix what breaks, using anonymous analytics.
  • To validate Premium purchases.
  • To keep shared rooms free of abuse.

We do not sell data, we do not show ads, and we do not use any data for advertising or tracking across apps and websites.

Third-Party Services

  • Apple — iCloud (CloudKit) sync, iCloud Keychain, App Store purchases, notifications.
  • Google — On Android: Google Play purchases, Google Play services (background removal and AI insights, both on the device) and Block Store, which backs up your collection key with your Google account.
  • Cloudflare — Hosts our servers for market lookups, shared rooms and Collector Sync.
  • eBay — Source of market listings for estimates. Your request reaches eBay from our server, not from your device.
  • TelemetryDeck — Anonymous usage analytics.
  • RevenueCat — Subscription validation.

Data Retention and Deletion

  • Your collection stays on your device and, with sync on, in your iCloud or in Collector Sync until you delete it or remove the app. Deleting an item in the app also deletes its photos and check-ins, locally and in the cloud.
  • The encrypted Collector Sync copy stays until you delete it from the app, or until no device has opened it for 18 months.
  • Shared rooms stay until you delete them from the app.
  • Market lookup caches expire automatically and are keyed by item, not by person.
  • Analytics events are anonymous and are retained by TelemetryDeck under its own policy.

Children

Collector is not directed at children under 13 and we do not knowingly collect personal information from them.

Your Rights

Because we hold no account and no personal identifiers, most of your rights are exercised directly in the app: delete items, turn off sync, delete your Collector Sync cloud data, delete shared rooms. If you believe we hold something about you, or you want a shared room removed that you can no longer access, contact us and we will help.

Changes to This Policy

We may update this page as the app evolves. Material changes will be noted in the app's release notes.

Contact Us

Questions about this policy or a shared room? Please contact us by email.