PRIVACY NOTICE

We process account and authentication identifiers; a name or profile name when supplied by a sign-in provider; email and language; coin photographs and information supplied by the user; scan, identification and report metadata; purchase, entitlement and transaction identifiers; support messages and attachments; public-catalog content chosen by the user; and limited security, diagnostic and operational logs. We do not use advertising SDKs and do not sell personal data.

We process data to create and secure the account, provide scans and AI identification, maintain subscriptions and virtual balances, generate reports, provide support, prevent abuse, meet legal obligations and defend claims. Depending on the activity, the basis is performance of a contract, legal obligation or legitimate interests. Consent is requested only for a specific optional action, such as publishing a report; it is not bundled with access to the service and can be withdrawn prospectively.

We receive data from the user, the device when a requested feature is used, a selected sign-in provider and Apple in connection with a transaction. Email and account identifiers are required for an account; coin photos and details are required only for the selected analysis; publication is optional. Missing information required for a feature prevents that feature from working but does not authorize another use.

When the user expressly requests QC, identification, a PRO report or image search, selected coin photos, user-supplied details, request context and necessary technical identifiers are transmitted through Coinsider infrastructure to Google Cloud/Gemini. The purpose is limited to the requested feature, security and diagnostics. Under the applicable paid API terms, prompts and responses are not used to improve Google products; Coinsider does not train its own models on them without a separate opt-in.

Coinsider Snap does not use AI and does not transfer photos or data to Google.

The permission to transfer data to AI is separate and voluntary. Your collection, Coinsider Snap and support provided by people work without it. We ask for it before you first use an AI feature; at sign-up you may give it or skip it.

AI features are: the photo quality check, identification, the PRO analysis, image search, the assistant in support, and the machine translation of your messages to support and of your appeals against moderation. Before each such operation our server checks the permission of the owner of the data, also when a member of Coinsider staff acts. Without the permission neither your photos nor your texts reach the AI provider, and our staff read your messages in the original.

You can withdraw the permission at any time in your account settings, as easily as you give it. After the withdrawal we start no new AI operation on your data; operations already accepted are completed. Results saved in your collection remain, and the withdrawal does not affect the lawfulness of earlier transfers.

We record the giving and the withdrawal of the permission with the date, the version and the language of the text, so that we can demonstrate what you agreed to or withdrew. We keep this record for 6 years.

The principal AI provider is Google Gemini within Google Cloud; Google Cloud Vision and infrastructure may support image analysis. Base44 provides the application platform and hosting. Apple provides StoreKit, App Store billing and applicable authentication services. No push provider is active in release V1. A future push feature requires a separate product, privacy and vendor review before activation. Providers act under applicable contracts. Transfers outside the EEA or UK must rely on adequacy decisions or appropriate safeguards such as standard contractual clauses, the UK Addendum or IDTA, plus any required transfer assessment—not on “consent by use.”

Base44 hosts production application data in the United States. The Base44 DPA provides applicable adequacy and Data Privacy Framework mechanisms and Standard Contractual Clauses. Configured Google infrastructure operates in europe-west1; other support and subprocessing locations are governed by the Google Cloud DPA and SCCs. Information about safeguards may be requested at biuro@strefaczysta.pl.

Active account and coin content is kept until deletion. Immediate deletion starts after verified reauthentication; scheduled deletion provides a 30-day restoration window, while public records are withdrawn immediately. Base44 may retain deleted records in its recovery cycle for up to 30 days. Ordinary support is kept for 24 months after closure; consumer/account/AI disputes and legal claims, legal-text acceptance and deletion evidence for 6 years; moderation evidence for 12 months with a 6-month in-app appeal; security and fraud logs for 12 months. Apple/tax/ledger evidence is de-identified at account deletion and kept through 31 December of the sixth calendar year after the transaction year. A documented court, regulator, tax, claim, security or fraud hold pauses deletion only for the affected class and is reviewed at least every 90 days. Deletion does not cancel an Apple subscription.

When a subscription ends, the account and its data stay in the Free plan until you delete the account. We may delete a Free plan account that nobody has signed in to for 3 months, after an e-mail notice sent at least 30 days in advance; this does not apply to accounts with unused Coinsider Coins or purchased scans. Details are set out in the Terms, section “End of the subscription and account deletion”.

A coin you delete is kept in the Trash for 30 days in the Free plan and 90 days in a paid plan, and is then deleted for good.

After you ask for your account to be deleted, you can restore it within 30 days, or within 3 months for an account in the PRO plan. We then delete the account and its data, except data we must keep by law and data covered by a documented deletion hold (legal hold). You can also delete the account at once.

Subject to applicable law, users may request access, correction, deletion, restriction, portability and objection, and may withdraw a specific consent. EEA users may complain to their local supervisory authority or Poland’s UODO; UK users may complain to the ICO. California residents may exercise applicable rights to know, delete, correct and non-discrimination; Coinsider does not sell or share data for cross-context behavioural advertising. Requests: biuro@strefaczysta.pl. Support: coinssupportpl@wp.pl.

We give effect to the right to data portability by, among other means, the Iron Vault file, which you can save in the application on every plan, also after your subscription ends. The file covers the whole collection: Coinsider Snap and Coinsider Vision coins, including those in the Trash, their data and identification results in JSON and CSV files, and their photos, in ZIP archives. It is a commonly used, machine-readable format. You can encrypt the file with your password; anyone who has a file saved without a password can open it. We receive neither the file nor the password. We will provide data that the file does not cover on a request sent to the address given above.

Identification and valuation results are probabilistic and informational. Coinsider does not use them to make solely automated decisions producing legal or similarly significant effects on the user. Every user can ask for a human review of an AI result, whatever the plan; we reply within 7 days.

The application saves in the storage of your device the data necessary for the operation of the services you ask for: session state, language and settings, a copy of collection data for offline use and photos of coins added in Coinsider Snap. Coinsider Snap photos do not leave the device unless you export them yourself, for example in an Iron Vault file or in a collector card PDF. A backup of the whole device that you turn on in the system settings (for example iCloud) may include the application data, including these photos. You and the provider of the system manage such a backup. You can exclude the data of this application from such a backup in the backup settings of the system. Before saving, the application re-encodes the photo, reduces its size if necessary and removes its metadata, including location information. Saving these data is necessary to provide the service, so it does not require separate consent (Article 399 of the Polish Electronic Communications Law). You can delete these data in the application settings, by deleting the application or by clearing the site data in the browser.

We do not process Coinsider Snap photos on our servers and we have no access to them. We process only the descriptive data linked to the coin and the cryptographic hash and parameters of the photo (size, dimensions, time added). We do this to recognise the photos when they are restored from an Iron Vault file or a Coinsider Snap backup and to avoid creating duplicates.

After migration from Coinsider Snap to Coinsider Vision is complete, the new card keeps the collection number and date added. We retain the link between records and the consent and completion markers so that old backups and pending writes cannot restore the deleted Snap card. These technical records remain until account deletion, even if you delete the new Vision card earlier. Backup files and PDFs previously saved outside the application remain under your control.

The web and app store necessary session state, language, settings and acknowledgement versions locally. We use no advertising SDK, ATT or behavioural-advertising cookies. Measures include transport encryption, access control, minimisation, operation logging and incident procedures. No system can guarantee absolute security. The service is only for persons aged 18 or over.

The application removes EXIF metadata, including GPS data, from Coinsider Snap photos and does not send these photos to servers. Files on the device are kept separate for each account. The application encrypts the Iron Vault file with a password that you choose, using AES-256; a file saved without a password is not encrypted. We receive neither the file nor the password. When Coinsider Vision coins are restored, the application sends us only their data and photos from the file, and we keep those photos like the photos of scans. Coinsider Snap coins return to the account as descriptions, and their photos stay on the device. Details are set out in the section “Data stored on your device”.

Material changes are published with a new date and version. If a new purpose requires consent, we ask before processing starts. Data requests: biuro@strefaczysta.pl. Complaints may be made to the competent authority, including Poland’s UODO or the UK ICO.

The Coinsider service provider identified in this Notice controls notice data. We process contact details, supplied name, language, URL/identifier, description, reasons, correspondence and necessary email metadata to review, reply, handle appeals and prevent abuse. The bases are applicable legal obligations and legitimate interests in protecting the service and people’s rights, not marketing consent or AI permission.

Preparing the form does not transmit its fields to Base44 or AI or save them in browser storage. Opening your email app passes the text to that app; subsequent processing and sending follow your email service. WP Poczta (Wirtualna Polska Media S.A.) and authorised Coinsider staff handle mail to coinssupportpl@wp.pl. Where necessary for moderation or appeal, an authorised person may record case evidence in Base44; receiving an email does not automatically create a ticket or run AI.

Moderation evidence follows the retention table: generally up to 12 months, and appeal evidence up to 6 months; specific claims evidence may require up to 6 years, with longer retention where legally required or subject to a documented legal hold. Access is limited to necessary staff and providers. Reporter contact details are not published in the archive. Without contact details, an individual reply is impossible. Data rights and contact biuro@strefaczysta.pl are described in this Notice.