Privacy Policy

Effective date: March 1, 2026

Overview

Mugi ("we", "our", "us") is a mobile application for tracking One Piece Trading Card Game collections, building decks, trading with friends, and engaging with the community. We are committed to protecting your privacy and being transparent about how we handle your data.

Information We Collect

When you create an account, we collect:

• Email address (for authentication)
• Username (chosen by you, displayed publicly)
• Profile avatar color (chosen by you)

When you use the app, we store:

• Your card collection, binders, and deck lists
• Trade proposals and wanted card listings
• Tournament records and match history
• Posts, comments, and stories you create
• Friend connections
• Push notification token (if you enable notifications)

How We Use Your Information

We use your information solely to provide the Mugi app experience:

• Authenticate your account and maintain your session
• Store and display your card collection and decks
• Enable trading and social features with other users
• Send push notifications for friend requests, trades, and comments (if enabled)
• Display market prices for cards in your collection

Data Storage

Your data is stored securely using Supabase, a cloud database platform with PostgreSQL. All data is protected by row-level security policies ensuring users can only access their own data and data shared with them (e.g., friends' collections, public posts).

Third-Party Services

Mugi uses the following third-party services:

• Supabase — Authentication, database, and file storage
• Expo — Push notification delivery
• Limitless TCG — Card image hosting (CDN)

We do not sell, share, or transfer your personal data to any third parties for advertising or marketing purposes.

Data Sharing

Your username, posts, stories, and wanted card listings are visible to other authenticated users. Your card collection and binder contents are visible to your friends. Your email address is never displayed to other users.

Data Retention

Your data is retained as long as your account is active. You may delete your account at any time through the Settings menu in the app. Upon account deletion, your profile, collection data, posts, and all associated data will be permanently removed.

Children's Privacy

Mugi is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Your Rights

You have the right to:

• Access your personal data through the app
• Update your profile information at any time
• Delete your account and all associated data
• Block other users from interacting with you
• Report inappropriate content or behavior

Security

We implement industry-standard security measures including encrypted authentication, row-level security on all database tables, input sanitization, and secure environment variable management. No sensitive data (such as passwords or API keys) is stored in plaintext within the application.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the effective date at the top. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact