Privacy Policy

When you scan a coin or banknote, the photo you take or pick is used to identify the type and variety. When online recognition is enabled, that photo is sent securely to our recognition service to look it up. It is not retained after processing, is not shared, and is never used for advertising or tracking.

Your collection and scan history are primarily stored on your device. If you use optional Sign in with Apple or server-backed family features, we process the anonymous Apple user identifier, membership state, and the minimum service data needed to provide those features.

We use PostHog for a limited product funnel and AppsFlyer for install/deep-link attribution. They receive a random app UUID, app/product version, campaign identifiers, and events such as first open, onboarding completion, first scan, paywall view, and purchase status. Photos, recognition results, free-form input, email, name, and payment-card data are not sent for analytics or attribution. IDFA is disabled, we do not show an ATT prompt, we do not sell data, and we do not use this data for third-party advertising or tracking across other companies' apps or websites.

Apple processes billing. Our server verifies signed StoreKit transaction data to grant access and prevent duplicate revenue records. After verification, limited transaction and campaign identifiers may be sent server-to-server to AppsFlyer for aggregate campaign measurement; the app does not send purchase amounts to AppsFlyer from the device.

Deleting the app removes local app data. If you signed in, use Settings → Delete Account to request deletion of the account and associated server-side service data. You may also contact Support for privacy requests.

If this policy changes, we will update it here with a new date. Questions? Email us — see the Support page.