Privacy Policy

Last Updated: March 13, 2026

Effective Date: September 17, 2026

1. Introduction

CoinsWorth ("we," "us," or "our") operates the coinsworth.com website, the CoinsWorth iOS application, and the CoinsWorth Chrome extension (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2a. Information You Provide Directly

  • Account Information: When you create an account in the App, we may collect your name, email address, and authentication credentials.
  • Subscription Data: Premium subscriptions bought in the iOS App are processed by Apple through the App Store. Premium subscriptions bought on the Site (coinsworth.com/scan) are processed by Stripe through RevenueCat Billing; for these purchases we receive your email address, the plan, and the payment status, and Stripe receives your payment card details. In both cases we do not collect or store your credit card numbers or banking information. We receive confirmation of your subscription status via RevenueCat.
  • Support Requests: If you contact us via email, we collect your email address and the content of your message.

2b. Information Collected Automatically

  • Coin Images: When you scan a coin in the App or on the Site, the photographs are uploaded to our servers for AI analysis and are stored with your collection, together with the grading result, so you can revisit your reports. They remain stored until you delete the coin, delete your account, or ask us to remove them. If you scan without creating an account, the images are stored under an anonymous profile tied to your device or browser.
  • Device Information: We collect device type, operating system version, unique device identifiers, and app version for diagnostics and crash reporting.
  • Usage Data: We collect information about how you interact with the Service, including pages visited, features used, scan frequency, and session duration.
  • IP Address: Your IP address is collected automatically when you access the Site or App. This is used for security, analytics, and approximate geographic location.
  • Cookies and Similar Technologies: The Site uses cookies and similar tracking technologies for analytics and functionality. See Section 7 for details.

2c. Information From Third Parties

  • Apple Sign-In: If you use Sign in with Apple, we receive your name and email address (or a relay email, depending on your Apple privacy settings).
  • Analytics Providers: We receive aggregated analytics data from Google Analytics and Mixpanel about Service usage patterns.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To process coin scans, display grading results, and provide pricing data.
  • Account Management: To create and maintain your account, manage subscriptions, and authenticate your identity.
  • Improvement: To analyze usage patterns and improve the accuracy of our AI grading model, the quality of our content, and the user experience.
  • Communications: To send you service-related notifications, respond to support inquiries, and (with your consent) send promotional communications.
  • Security: To detect, prevent, and address fraud, abuse, and security issues.
  • Legal Compliance: To comply with legal obligations and respond to lawful requests from public authorities.

4. How We Share Your Information

We do not sell your personal information to third parties. We may share your information with:

  • Service Providers: Third-party vendors who help us operate the Service, including:
    • Google Cloud Platform — hosting and infrastructure
    • Cloudflare — content delivery network and security
    • RevenueCat — subscription management
    • Stripe — payment processing for subscriptions bought on the Site
    • Google Analytics / Mixpanel — usage analytics, including scan and purchase events on the Site
    • Firebase — push notifications and crash reporting
  • Legal Requirements: If required by law, regulation, or legal process (such as a court order or subpoena).
  • Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.
  • With Your Consent: For any other purpose disclosed to you at the time we collect the information.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account Data: Retained while your account is active and for up to 12 months after deletion.
  • Coin Scan Images and Reports: Retained with your collection until you delete the coin or your account, or request removal by emailing support@coinsworth.com. Deleting your account in the App (Account > Delete account) removes your stored coins and images.
  • Usage Analytics: Retained in aggregated, anonymized form for up to 26 months.
  • Support Correspondence: Retained for up to 24 months after the inquiry is resolved.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

  • Encryption in transit (HTTPS/TLS) for all data transmitted between your device and our servers.
  • Encryption at rest for sensitive data stored on our servers.
  • Access controls limiting employee access to personal data on a need-to-know basis.
  • Regular security reviews and monitoring for unauthorized access.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

7. Cookies and Tracking Technologies

The Site uses the following cookies and tracking technologies:

  • Essential Cookies: Required for the Site to function properly (session management, security).
  • Analytics Cookies: Google Analytics cookies to understand how visitors interact with the Site. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain features of the Site.

8. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe your child has provided us with personal data, please contact us at support@coinsworth.com. If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

9. Your Privacy Rights

9a. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect about you and how it is used.
  • Delete your personal information, subject to certain exceptions.
  • Opt-out of the sale or sharing of your personal information. Note: we do not sell your personal information.
  • Non-discrimination for exercising your privacy rights.

To exercise these rights, email us at support@coinsworth.com with the subject line "CCPA Request."

9b. European Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including the right to:

  • Access your personal data and receive a copy.
  • Rectify inaccurate or incomplete personal data.
  • Erase your personal data ("right to be forgotten").
  • Restrict or object to processing of your personal data.
  • Data portability — receive your data in a structured, machine-readable format.
  • Lodge a complaint with your local data protection authority.

Our legal basis for processing your data is typically your consent, the performance of a contract, or our legitimate interests in operating and improving the Service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers are located. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions as necessary for the purposes described in this Privacy Policy.

11. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Because there is no accepted standard for how to respond to DNT signals, the Service does not currently respond to DNT browser signals or headers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page with a revised "Last Updated" date. For significant changes, we may also send a notification through the App. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, your data, or your privacy rights, please contact us: