Privacy policy
Draft pending legal review.This policy describes how the software is built. It must be reviewed by qualified counsel before launch (SPEC §14).
Who we are
PlainCoin is operated by Daniyar Ketebay (Kazakhstan). Contact: support@plaincoin.app. Our servers are hosted in the United States, so your data is processed internationally.
What we process and why
| Data | Purpose | Retention |
|---|---|---|
| Coin photos (only after you allow photo identification) | Suggest the coin’s identity | Held in server memory during processing only; not stored. Sent to Anthropic, which may retain API inputs and outputs for up to 30 days, with exceptions for safety or legal requirements. Not used to train models. |
| Structured identification and your confirmation | Resume the flow; service quality | 24 hours |
| Anonymous installation credential (hashed) and usage counters | Free and paid scan limits, abuse prevention | Usage counters 35 days; installations expire after 180 days of inactivity |
| IP address (as a rotating keyed hash) | Abuse limits | 35 days; security access logs with IP for 7 days |
| Consent decisions | Record of your choices | Minimal evidence up to 24 months after deletion, subject to legal review |
| Subscription status (iPhone app) | Unlock paid scans | Verified through RevenueCat and Apple; webhook receipts 30 days |
| Optional product analytics (off by default) | Understand which features help | Raw events 30 days, then aggregated |
Your collection, its photos and notes stay on your device. They may be included in your device backup; that is not a recovery service we run.
Processors
- Render (hosting and database, United States)
- Anthropic (AI identification)
- RevenueCat and Apple (purchases, iPhone app)
- Cloudflare Turnstile (browser abuse check on the website)
What we never do
No sale of personal data, advertising tracking, fingerprinting, session replay, face recognition or location access. We do not put photos, notes or collection values in analytics. The website respects Global Privacy Control and opt-out.
Your choices
You can withdraw photo-identification consent in Settings at any time; it stops future uploads immediately. You can delete all data from Settings; we erase our live records and revoke your installation credential, and backups expire within seven days. Deleting data does not cancel an Apple subscription. To exercise other rights, contact us at support@plaincoin.app.