Privacy Policy

Chamuditha Prabhath Jayasena
Pallegaladeniya, Udagaladeniya
Rambukkana, Kegalle 71110
Sri Lanka

Email: info@jayasena.dev

The controller is based in Sri Lanka, outside the European Union.

The camera looks for the coin on your device. The preview frames do not leave the device. Only when you take the photo or choose one from your photo library is the image cropped to the coin, scaled down and sent to our server. From your photo library, the app reads only the photos you select yourself.

The photos are processed by AI. Our server automatically compares them with the images in our coin catalog. If the result is not clear, the photo may be sent to an external AI service that reads the country, face value and year from the coin. This service processes the photo only on our behalf and only to provide this answer.

Coin photos are deleted automatically after 30 days. For each scan we also store the result, the duration, the cost and your choice or correction, in order to check and improve identification. These records are linked to an encrypted identifier, not to your name or email address. Please photograph only the coin, not people or documents.

When you first open the app, it creates an anonymous account with Google Firebase Authentication. This gives your daily scans and your purchases a fixed reference without you having to enter anything. You can choose to link it to Apple, Google or an email address. We then receive the email address that this provider passes on.

Your collection and your scan history are stored on your device. If you are signed in, a copy of your saved coins, including your notes, is backed up to Google Cloud Firestore so that you can restore it on other devices. Only your own account can read or change this copy.

On our server we store, for your account, how many scans you have used on each day, as well as your feedback on results and values.

CoinOptic Pro is sold through the Apple App Store and managed through RevenueCat. These services process your purchase history and an identifier of your account so that your subscription can be provided and restored. Our server asks RevenueCat whether a Pro subscription is active. We do not receive your payment details.

We use PostHog on our own servers and ActivationPal to measure how the app is used: launching and opening the app, onboarding steps, scans and their result, and views and purchases on the purchase screen. Text you enter and your photos are not part of this measurement. An approximate location (country, region) may be derived from your IP address.

If you installed the app through an ad in the App Store, Apple may tell us via RevenueCat which ad the install belongs to. This information does not include an advertising ID. CoinOptic itself does not show ads.

With your permission, the app reminds you before a free trial ends. The reminder is scheduled on your device. You can turn notifications off at any time in your iPhone’s Settings.

We use service providers that process data on our behalf: Google (Firebase Authentication, Cloud Firestore), RevenueCat, ActivationPal, Apple, Cloudflare (photo storage), our hosting provider for server and database, and the external AI service used for identification.

Some of these providers, and the controller itself, are located outside the European Union, including in the USA and in Sri Lanka. For transfers there we rely on adequacy decisions of the European Commission or on standard contractual clauses. We do not sell your data and do not share it for advertising purposes.

• Identifying coins, account, collection and purchases: performance of the contract for using the app (Art. 6(1)(b) GDPR).
• Checking and improving identification, usage analytics, protection against abuse: our legitimate interest in an app that works and is secure (Art. 6(1)(f) GDPR).
• Notifications: your consent (Art. 6(1)(a) GDPR).

Coin photos are deleted after 30 days. Data on your device stays until you delete it or remove the app. You delete your account and the collection backed up there yourself in the app under Settings → Account.

Deleting your account does not end a subscription. You cancel a subscription in your iPhone’s Settings. Apple and RevenueCat keep purchase records according to their own legal obligations.

You have the right to access, rectification, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests, and you can withdraw consent at any time with effect for the future. To do so, write to info@jayasena.dev.

You can also lodge a complaint with a data protection supervisory authority, for example the authority where you live.

CoinOptic is not directed at children under 16. We do not knowingly collect data from them.

We update this policy when the app or the law changes. The date at the top shows the last change.