Privacy Policy

Last updated: 25/09/2026
Data controller: Giovanni Randis
Privacy contact: [email protected]

CoinLens recognizes collectible coins from photos and shows an indicative value estimate. This policy explains what data we process, how, and why.

1. Data we process

• Account: email address and login credentials (via Supabase Auth). You may also sign in with Google, in which case we receive the associated email and name: we only use the first word of the name, to greet you. We store them with your account and never sell them or share them for advertising. You can choose a different one, optionally, in Settings: only you can see it. You can use the app as a guest, without creating an account: a guest session is created automatically and gives you the same features. In that case we hold no email address for you, only an internal identifier.
• Your collection: saved coins, condition grade, any real value you enter, corrected year, personal notes.
• Coin photos: images you capture or upload are sent to our service for recognition and, if you save the coin, stored in your private archive.
• Scan history: the list of coins you have scanned.
• Error reports: if you report a misidentified coin, we keep the report (error type, optional note, the coin involved) to improve accuracy.
• Technical and usage data: basic device information and app diagnostics.
• Advertising data: via Google AdMob (advertising identifier and ad interactions). Ads are personalized only with your consent, requested at startup.
• Device identifier (abuse prevention): to enforce the daily limit of free scans we count scans per device. Your device identifier is never stored as-is: it is converted into an irreversible hash on our server, so the stored value cannot be traced back to your device, and it is not linked to your account. It is used solely to prevent abuse of the free tier — never for advertising, profiling or tracking you across apps or websites.
• Purchase and subscription data: if you subscribe to Premium, the purchase is handled by Google Play and RevenueCat, which process a user identifier and transaction information (for example subscription status). We do not receive or process your payment-card details.

2. Why we process data

• Providing the service: recognition, collection, sync — performance of the contract.
• Showing ads: to support the free app — consent, for personalized ads.
• Managing Premium subscriptions: activation and restore — performance of the contract.
• Improving accuracy: for example through your reports — legitimate interest.
• Security and abuse prevention: scan quota per account and per device, rate limits — legitimate interest.

3. Who we share data with

We do not sell your personal data.

• Supabase: backend: authentication, database, photo storage.
• Google: AdMob for advertising and the Gemini API for image recognition. Photos are processed to identify the coin and are not used to train models.
• Google Play: app distribution and subscription payment handling.
• RevenueCat: subscription management (Premium status), using a user identifier and the transaction information provided by the store.

4. Retention

We keep your account and collection data for as long as your account is active. You can request deletion at any time.

Guest sessions: data created as a guest is retained in the same way. If you never create an account and lose access to the guest session — for example by uninstalling the app or changing phone — that data can no longer be linked to you or recovered, and not even we can identify it as yours. While you still have access to the session you can delete it at any time from the app, in Settings.

5. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to request portability and to withdraw consent at any time.

• To exercise them: write to [email protected].
• Account deletion: you can delete your account — including a guest session — directly in the app under Settings, or request it by email.
• Complaints: you may lodge a complaint with your national data protection authority.

6. Advertising consent

On first launch we ask for your consent for ads through Google’s form (UMP). You can choose personalized or non-personalized ads, and change your choice later.

7. Children

The app is not directed to children under 16 and does not knowingly collect their data.

8. Changes

We may update this policy: the date at the top shows the latest revision.

If you have any question about this policy you can write to us at any time. [email protected]