PRIVACY NOTICE

We process account and authentication identifiers; a name or profile name when supplied by a sign-in provider; email and language; coin photographs and information supplied by the user; scan, identification and report metadata; purchase, entitlement and transaction identifiers; support messages and attachments; public-catalog content chosen by the user; and limited security, diagnostic and operational logs. We do not use advertising SDKs and do not sell personal data.

We process data to create and secure the account, provide scans and AI identification, maintain subscriptions and virtual balances, generate reports, provide support, prevent abuse, meet legal obligations and defend claims. Depending on the activity, the basis is performance of a contract, legal obligation or legitimate interests. Consent is requested only for a specific optional action, such as publishing a report; it is not bundled with access to the service and can be withdrawn prospectively.

We receive data from the user, the device when a requested feature is used, a selected sign-in provider and Apple in connection with a transaction. Email and account identifiers are required for an account; coin photos and details are required only for the selected analysis; publication is optional. Missing information required for a feature prevents that feature from working but does not authorize another use.

When the user expressly requests QC, identification, a PRO report or image search, selected coin photos, user-supplied details, request context and necessary technical identifiers are transmitted through Coinsider infrastructure to Google Cloud/Gemini. The purpose is limited to the requested feature, security and diagnostics. Under the applicable paid API terms, prompts and responses are not used to improve Google products; Coinsider does not train its own models on them without a separate opt-in.

The principal AI provider is Google Gemini within Google Cloud; Google Cloud Vision and infrastructure may support image analysis. Base44 provides the application platform and hosting. Apple provides StoreKit, App Store billing and applicable authentication services. No push provider is active in release V1. A future push feature requires a separate product, privacy and vendor review before activation. Providers act under applicable contracts. Transfers outside the EEA or UK must rely on adequacy decisions or appropriate safeguards such as standard contractual clauses, the UK Addendum or IDTA, plus any required transfer assessment—not on “consent by use.”

Base44 hosts production application data in the United States. The Base44 DPA provides applicable adequacy and Data Privacy Framework mechanisms and Standard Contractual Clauses. Configured Google infrastructure operates in europe-west1; other support and subprocessing locations are governed by the Google Cloud DPA and SCCs. Information about safeguards may be requested at biuro@strefaczysta.pl.

Active account and coin content is kept until deletion. Immediate deletion starts after verified reauthentication; scheduled deletion provides a 30-day restoration window, while public records are withdrawn immediately. Base44 may retain deleted records in its recovery cycle for up to 30 days. Ordinary support is kept for 24 months after closure; consumer/account/AI disputes and legal claims, legal-text acceptance and deletion evidence for 6 years; moderation evidence for 12 months with a 6-month in-app appeal; security and fraud logs for 12 months. Apple/tax/ledger evidence is de-identified at account deletion and kept through 31 December of the sixth calendar year after the transaction year. A documented court, regulator, tax, claim, security or fraud hold pauses deletion only for the affected class and is reviewed at least every 90 days. Deletion does not cancel an Apple subscription.

Subject to applicable law, users may request access, correction, deletion, restriction, portability and objection, and may withdraw a specific consent. EEA users may complain to their local supervisory authority or Poland’s UODO; UK users may complain to the ICO. California residents may exercise applicable rights to know, delete, correct and non-discrimination; Coinsider does not sell or share data for cross-context behavioural advertising. Requests: biuro@strefaczysta.pl. Support: coinssupportpl@wp.pl.

Identification and valuation results are probabilistic and informational. Coinsider does not use them to make solely automated decisions producing legal or similarly significant effects on the user. A paid user can report an AI error for human review.

The web and app store necessary session state, language, settings and acknowledgement versions locally. We use no advertising SDK, ATT or behavioural-advertising cookies. Measures include transport encryption, access control, minimisation, operation logging and incident procedures. No system can guarantee absolute security. The service is only for persons aged 18 or over.

Material changes are published with a new date and version. If a new purpose requires consent, we ask before processing starts. Data requests: biuro@strefaczysta.pl. Complaints may be made to the competent authority, including Poland’s UODO or the UK ICO.