Honest Coin

Privacy Policy

Effective date: October 6, 2026

This policy explains what Honest Coin (operated by an independent developer) ("the app", "we", "us") collects and why. The app works without an account, and we collect as little as we can.

What we collect

  • Coin photos you choose to scan. When you tap "Identify this coin" (or "Re-check with close-up", or start a batch scan), the photos of your coin and the optional note are resized on your device and sent to our server, which forwards them to our AI provider to identify the coin. We do not store your photos on our servers after the analysis is returned.
  • Result fingerprints. So the same photos always get the same answer, we keep the result (the coin identification, with no photo and no device ID) under a one-way SHA-256 fingerprint of the photos for up to 30 days. The fingerprint cannot be turned back into the photos.
  • A random device identifier. The app creates a random ID on first launch. We use it only to count your free scans, prevent abuse (rate limiting) and link your subscription. It is not linked to your name, email or advertising ID.
  • Scan counts and timestamps for that random ID, so the free-scan limit cannot be bypassed.
  • App usage events (first-party only). A few in-app events (for example: finished the intro, opened the camera, got a result, viewed the plans, started or completed a purchase), tied to the random device ID, so we can see where the app is confusing and fix it. They contain no photos, notes, names or contact details, are never shared with third parties and are not used for advertising.
  • Your IP address, used only for rate limiting and security. Our server does not store the address itself: it keeps a salted one-way hash of it as a short-lived rate-limit counter.
  • Support messages. If you contact us through the support form at honestcoin.roledawn.com/support, we receive the email address you enter (so we can reply), your message, and the optional Support ID and app version. We use them only to answer you.
  • Purchase status. Subscriptions are processed by Apple. We use RevenueCat to check whether your subscription is active. We never see your card details.

What stays on your device

Your collection (saved results, thumbnails, favorites) is stored only on your device. Deleting the app or using "Clear collection" in Settings removes it.

Who processes data for us

  • AI provider (Anthropic, PBC) analyzes the photos you submit. Under its commercial API terms, submitted content is not used to train its models by default; it may be retained for a limited time for safety and abuse monitoring.
  • Supabase hosts our server and stores scan counts.
  • Cloudflare hosts our website and stores support messages you send through the support form.
  • RevenueCat manages subscription status.
  • If you tap "eBay sold listings", "PCGS CoinFacts", "NGC price guide" or "Numista catalogue", the app opens that public website (for PCGS and NGC, a Google search limited to that site) in your browser with a short text search (for example "1944 D Lincoln Wheat Cent"). Your photo is never sent to them. Their own privacy policies apply to that visit.
  • To show silver melt values, our server reads the current silver price from a public price feed (gold-api.com). No data about you or your coins is sent in that request.
  • If you export your collection (Pro), the app creates a CSV file on your device and hands it to the share sheet you choose; we do not receive a copy.

We do not sell your data, share it for advertising, or use third-party tracking or ad SDKs.

How long we keep data

  • Photos: not stored after analysis by us.
  • Result fingerprints and the stored results: 30 days, then recomputed or deleted.
  • Scan counts linked to the random device ID: as long as the app is in use, and deleted within 24 months of inactivity.
  • App usage events: deleted within 24 months.
  • Rate-limit records (hashed IP address or random device ID): deleted within 2 days.
  • Server logs: up to 30 days.
  • Support messages: as long as needed to resolve your request, and deleted within 24 months.

Your rights

Depending on where you live (for example under the GDPR in the EU/UK or the CCPA in California) you can ask to access, correct or delete data linked to your device ID, or object to processing. Send a request through the support form at honestcoin.roledawn.com/support and include the Support ID shown in Settings. We will respond within 30 days.

Legal basis (EU/UK): performance of the contract (providing scans and subscriptions) and legitimate interests (preventing abuse and improving the app).

Children

The app is not directed to children under 13 (or under 16 in the EU), and we do not knowingly collect their data.

International transfers

Our providers may process data in the United States. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards.

Changes

We will post updates here and change the effective date. Significant changes will be announced in the app.

Contact

Honest Coin (operated by an independent developer)
Support: honestcoin.roledawn.com/support