Privacy Policy

Looking for account deletion? Delete your account and data.

1. Who We Are

This Privacy Policy explains what CoinScan, provided by Vaibhav SG ("we", "us"), collects when you use the CoinScan app, why, and the choices you have. CoinScan does not show ads, does not track you across other companies' apps or websites, and does not sell your data.

2. Account Information

If you create an account we collect your email address, the display name you choose (or the name Apple shares the first time you use Sign in with Apple) and your password, which is stored only as a secure hash by our authentication provider, Supabase. With Sign in with Apple we also receive an Apple user identifier; if you choose "Hide My Email", we receive an Apple relay address instead of your email. We use this to run your account.

3. Coin Photos

When you scan, the photos you take or choose are sent over an encrypted connection (HTTPS) to our server and from there to Google's Gemini API, which analyses them. Our server processes photos in memory and does not store them. Google may retain submitted content for a limited time to detect abuse and, depending on the service tier, may use it to improve its services, as described in the Gemini API Additional Terms of Service. Photos you save to your vault stay on your device; your account stores only a reference to them. CoinScan accesses your camera and photo library only when you choose to scan or pick a photo.

4. Collection Vault & Scan History

When you are signed in, the coins you save (what was read from your photo, such as country, year, face value and mint mark, the Numista catalogue number, your notes, purchase price, purchase date and storage location) and the results of your scans (the same photo readings, catalogue number and confidence) are stored with your account so they are available on your devices. Without an account, they are stored only on your device. Catalogue details such as a coin type's title, metal and weight are not stored: when you view a saved coin, the app asks Numista for them again through our server, sending only the catalogue number. Catalogue searches send Numista only what was read from the coin, such as its country, year and face value, never your photos or personal information.

5. Purchases

Subscriptions are paid through Apple; we never receive your payment details. RevenueCat manages subscriptions for us: it receives your purchase history and your CoinScan account identifier from the store and the app, and tells our server which plan is active.

6. Technical & Usage Data

Our server uses your IP address while handling a request, to prevent abuse and apply rate limits; it is not stored with your account or your feedback. Without an account, the app creates a random installation identifier to apply the daily guest limit; our server stores only a keyed hash of it and of your network address, with a daily scan count, and deletes these counts after two days. Our hosting provider's request logs may contain IP addresses for a short period for security and troubleshooting. We count scans per account to apply daily limits. CoinScan contains no advertising or analytics SDKs.

7. Feedback & Support

If you send feedback in the app we store your message, its category, the app version and platform, and your account identifier if you are signed in. If you email us, we use your email address and message to reply.

8. Legal Consent Records

We record which version of the Terms and this Privacy Policy you accepted, and when, with your account.

9. Service Providers

We share data only with providers that run CoinScan for us: Supabase (accounts and database), Railway (hosting our server), Google (Gemini API photo analysis), Numista (catalogue lookups), RevenueCat (subscriptions) and Apple (Sign in with Apple and payments). They may process data in countries other than yours: our server and database are in Singapore, Numista is in France, and Google, RevenueCat and Apple may process data in the United States and elsewhere.

10. Retention & Deletion

We keep your account data until you delete your account. You can delete individual scans or clear your scan history at any time, and delete your account in Profile › Settings & Account › Delete Account. Deleting your account immediately and permanently deletes your login, profile, vault records, scan history, scan counts and consent records from our servers and this device, and revokes Sign in with Apple. Feedback you sent is kept without any link to you. Purchase records held by Apple and RevenueCat are governed by their own policies, and deleting your account does not cancel a subscription.

11. Your Rights

Depending on where you live, you may have the right to access, correct, export or delete your data and to object to some processing. You can export your data in Profile › Settings & Account › Data Management & Privacy › Export My Data, delete it as described above, or contact us.

12. Children

CoinScan is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

13. Security

Data is encrypted in transit. Sign-in tokens are kept in the iOS Keychain. No system is perfectly secure, but we limit access to your data to what is needed to run the Service.

14. Changes & Contact

If we change this policy materially we will ask you to review it in the app. For privacy questions or requests, contact us at: Email: coinscan.support@gmail.com Entity: Vaibhav SG Address: Bantwal, Benjanapadavu, Mangalore, Karnataka 574219