CoinTrovePrivacy Policy
Effective date: 28 October 2026
This policy explains what the CoinTrove iPhone app ("the app") and the website at coin.naomigames.com collect, why, who receives it and what choices you have. The app is provided by the CoinTrove developer (an individual developer) ("we", "us"). Contact: 2645708725@qq.com.
1. What we collect and why
| Data | What it is | Why | How long |
|---|---|---|---|
| App user ID | A random identifier created by the app on first launch. It is not your name, email, Apple Account or advertising identifier. | To apply your free-scan and subscription limits and to link your purchases to the app. | Until you delete your data (Settings → Delete Account & Data) or we stop operating the app. |
| Coin photos | The front/back photos you take, resized and with location and other metadata (EXIF/GPS) removed on your iPhone before upload. | To identify the coin. | Processed in memory and not stored, except that a copy may be kept for up to 7 days to investigate failed or incorrect identifications, then deleted automatically. |
| Recognized text | Text (dates, legends, mint marks) read from your photos on your iPhone by Apple's on-device text recognition. | Sent with the photos to improve identification accuracy. | Deleted from our servers after 30 days. |
| Scan records | Which coin was identified, confidence, time, and a non-reversible fingerprint of the photo (a hash, not the image). | To return instant results for repeated scans, enforce limits, prevent abuse and measure accuracy and cost. | Fingerprints and cached results up to 90 days; anonymous totals kept longer. |
| Feedback | If you confirm a result or tap "Wrong coin?": whether it was correct, the coin you picked instead and an optional note you type (up to 500 characters). | To fix wrong identifications and improve accuracy. | Until you delete your data or the related scan record is deleted. |
| Paywall version shown | Which version of the subscription screen you saw and how often (for testing prices and wording). | To measure which subscription screen works better. | Until you delete your data. |
| Purchases | Apple-signed records of your subscription (product, dates, trial/renewal/refund status, estimated price). We never see your payment card or Apple Account details. | To unlock Pro features and to measure revenue. | As long as required for accounting and tax purposes. |
| Apple Ads attribution | If you installed after tapping an Apple Ads ad, Apple's privacy-preserving AdServices framework tells us which campaign, ad group, keyword and country led to the install. No advertising identifier (IDFA) is used. | To measure which ads work so we can stop paying for ones that don't. | Until you delete your data. |
| Device check | Apple App Attest / DeviceCheck tokens proving requests come from a genuine copy of the app. | Fraud and abuse prevention. | Until you delete your data. |
| Server logs | IP address, request time, error codes. | Security, rate limiting and troubleshooting. | Up to 30 days. |
| Support emails | Whatever you choose to send us. | To answer you. | Up to 2 years after the conversation ends. |
Your collection (saved coins, notes, values) is stored only on your iPhone (and in your own iCloud backup, if enabled). We do not receive it.
We do not collect your name, email (unless you write to us), contacts, precise or coarse location, advertising identifier or browsing history. We do not use third-party analytics, advertising or tracking SDKs, we do not track you across other companies' apps or websites, and we do not sell or share personal information for cross-context behavioral advertising.
2. AI processing
Before your first scan the app asks for your consent to AI processing. When you scan, our server sends the photos and recognized text — but no user ID, device ID, IP address or other identifier of yours — to a third-party cloud AI provider (currently Moonshot AI, see section 4), which returns a structured description of the coin. The provider's servers are located outside the United States, in Singapore, and under its terms the data may be shared with its affiliates and transferred to and processed in the People's Republic of China. The provider's terms permit it to retain content and to use it to improve its services, including model training, and do not commit to a fixed deletion period. Because coin photos contain no personal information once metadata is removed, please avoid photographing people, documents or anything personal along with your coins. If you do not consent, you can still browse the app but cannot scan.
Results are estimates generated by AI and catalog data and may be wrong. See our Terms of Use.
3. Coin catalog and price lookups
To match the identified coin and look up prices, our server queries coin catalogs and marketplaces (Numista, eBay) using only coin attributes such as country, denomination and year. No photos and no information about you are sent to them.
4. Service providers (processors)
We use the following providers to run the service. They may only process data on our instructions or under their own terms as described.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Moonshot AI PTE. LTD. (Kimi API) | AI coin identification | Coin photos and recognized text, without identifiers | Singapore; may be transferred to the People's Republic of China |
| Apple Inc. | App distribution, in-app purchases, App Store Server Notifications, App Attest, Apple Ads attribution | Purchase records, attestation, attribution | United States and other countries |
| Alibaba Cloud | Servers and database hosting our backend | All server-side data listed in section 1 | Seoul, South Korea |
| Tencent (QQ Mail) | Support email | Your emails to us | People's Republic of China |
| Numista | Coin catalog lookups | Coin search text only (e.g. country, denomination, year); no personal data | France |
We may update this list when we change providers; the effective date above will change accordingly.
5. Legal bases (EEA/UK users)
Where the GDPR applies: AI processing of photos is based on your consent (you can withdraw it by not scanning and deleting your data); providing the app and subscriptions is based on contract; security, abuse prevention and ad measurement are based on our legitimate interests; accounting records are kept to meet legal obligations. Transfers outside your country are protected by standard contractual clauses where required.
6. Your choices and rights
- Delete your data: in the app, Settings → Delete Account & Data removes your server-side data (user ID links, scan history, attribution and recognized text). Purchase records required for accounting are kept but no longer linked to app activity. Deleting the app removes your on-device collection.
- Access, correction, objection, portability: email us from the app (Settings → Contact Us) or from the address you want us to reply to. We respond within 30 days.
- California residents: you have the rights to know, delete and correct personal information and to not be discriminated against for exercising them. We do not sell or share personal information and do not use sensitive personal information for inferring characteristics.
- You may complain to your local data protection authority.
7. Children
The app is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has used the app and sent us data, contact us and we will delete it.
8. Security
Data is encrypted in transit (TLS). API keys for AI and catalog providers exist only on our servers. Access to production data is restricted to the operator of the app; our internal reporting reads aggregated or pseudonymous data through a read-only database account.
9. Website
This website uses no cookies, analytics or third-party scripts. Our web server logs IP addresses and requested pages for up to 30 days for security.
10. Changes
We will post changes here and update the effective date. Material changes will be announced in the app.
11. Contact
Operator: the CoinTrove developer (an individual developer) · 2645708725@qq.com