Privacy Policy
Last updated October 9, 2026
Coin AI is made by Sycamore Software. This policy covers the website at coinaiapp.com and the Coin AI mobile app.
The short version: we collect the least we can, we don't sell anything to anyone, and you can have it all deleted by sending one email.
What we collect
If you join the waitlist. Your email address, and the date you joined. That's it. No name, no tracking pixel, no advertising profile.
If you use the silver counter. Nothing. The weights and purities you type stay in your browser. The only request that leaves your device is for the current metal price, and it carries no information about you.
If you use the app.
- Photos of coins you scan. These are sent for identification and grading, and stored against your collection so your binder has pictures in it.
- The results — what the coin was identified as, the estimated grade, the values we found.
- Your subscription status, so the app knows whether you have access.
- An account identifier. If you sign in with Apple you may choose to hide your email, in which case we only ever see Apple's relay address.
- Basic diagnostics: crashes, and which screens are used. Not keystrokes, not your location, not your contacts.
What we never collect. Location, contacts, microphone, health data, advertising identifiers, or anything from other apps on your device.
Why we collect it
| What | Why |
|---|---|
| To tell you when the app launches, and occasionally about the product | |
| Coin photos | To identify and grade the coin, and to show it in your binder |
| Scan results | So your collection persists and totals correctly |
| Subscription status | To unlock the features you paid for |
| Crash diagnostics | To fix what's broken |
We do not use any of it for advertising, and we do not build a profile of you.
Who else touches it
We use a small number of services to run Coin AI. Each one sees only the part it needs.
| Service | What it handles |
|---|---|
| Supabase | Database and file storage. Your account, collection and photos live here |
| Vercel | Hosts the website and its serverless functions |
| RevenueCat | Subscription status and receipts. Never sees your coin data |
| Apple / Google | Process the payment. We never see your card details |
| Google Gemini | Receives coin photos to produce a grade estimate |
| Numista | Receives coin photos to identify the coin against its catalogue |
Payment card details never reach us. Apple and Google handle that entirely, and we are told only whether a subscription is active.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
How long we keep it
- Waitlist emails until you unsubscribe, or until you ask us to delete them.
- Your collection and photos for as long as your account exists.
- Crash logs for 90 days.
Delete your account and your collection, photos and account record go with it.
Your choices
Wherever you live, you can ask us to:
- tell you what we hold about you
- correct it
- delete it
- send you a copy
If you are in the UK, EU or EEA, those are your rights under the GDPR, and our lawful basis is contract for running the app and legitimate interests for diagnostics and product emails. If you are in California, the CCPA gives you equivalent rights, and we do not sell or share your personal information as those terms are defined there.
To exercise any of them, or to delete everything, email contact@cardsaiapp.com. You do not need to give a reason and we will not ask you to stay. In the app you can also use Settings → Delete my data.
Unsubscribing from emails is one click in any email we send.
Children
Coin AI is not directed at children under 13 and we do not knowingly collect anything from them. If you believe a child has given us information, email contact@cardsaiapp.com and it will be removed.
Where data is held
Our database and storage are hosted in the United States. If you are writing from outside the US, your information is transferred there to be processed.
Security
Access to your collection is restricted to your own account at the database level. Traffic is encrypted in transit. No system is perfect, and we won't pretend otherwise — but we hold as little as we can, which is the only protection that always works.
Changes
If this policy changes materially we will say so on this page and update the date below. Continuing to use Coin AI after a change means you accept it.
Contact
Sycamore Software — contact@cardsaiapp.com