Privacy Policy
Effective date: 6 November 2026
The short version
- There is no account. The app identifies your device with a random ID, not your name or email.
- Coin photos are sent to our server only to identify the coin. We do not keep them.
- Your collection, including your photos, is stored on your phone.
- No ads, no advertising or analytics trackers, and we do not sell or share your personal data.
This policy explains how the Mintwise mobile app (the “app”) and the website getmintwise.com handle information. Mintwise is provided by Dang Duy Tu (Đặng Duy Từ), Tổ Tân Thanh 1, phường Tân Giang, tỉnh Cao Bằng, Vietnam (“we”, “us”). For the purposes of data protection law, we are the controller of the personal data described here.
What we collect and why
Random install ID
The first time you open the app, it creates a random identifier (an “install ID”). It is not derived from your device, your name or any other identifier. The app sends it with every request to our server so that we can count your free scans, check whether you have a subscription and limit abuse. On iPhone, it is kept in the iOS Keychain and may survive reinstalling the app. On Android, it is removed when you uninstall the app.
Coin photos
When you scan a coin, the app crops the two photos (front and back) to the coin and sends them to our server, together with small turned copies of the same photos (so that the coin can be shown the right way up) and the size of the coin in the original photo. Our server forwards the photos to our AI provider to read the coin, then looks up the result in the Numista catalog. We do not store your coin photos; they are discarded once the result has been returned to you. Please photograph only the coin: avoid including people, documents or anything else in the frame.
To find the edge of the coin in a photo, the app also uses the image analysis built into your phone: Apple’s Vision framework on iPhone, or Google’s ML Kit, provided through Google Play services, on Android. This runs on your phone; your photos are not sent to Apple or Google for it. ML Kit sends Google technical information about its own use, such as the device model, operating system and app version, processing times, error codes and identifiers for the device and the installation, which Google uses to maintain and improve ML Kit and detect abuse. It does not include your photos. See the ML Kit terms and Google’s Privacy Policy.
Scan results and service logs
For each scan our server creates a scan ID and records the result (for example the coin type and the year read), your install ID, the app version and the time. We use this to answer support requests, fix errors and prevent abuse. These records do not contain your photos. We keep them for up to 7 days.
Scan count and subscription status
We store your install ID with the number of scans you have used. To check whether you have an active subscription, our server asks our subscription provider, using your install ID.
Purchases
Subscriptions are bought through the Apple App Store or Google Play. Apple or Google processes your payment; we never see your card details, name or Apple/Google account. Our subscription provider, RevenueCat, receives your install ID and the purchase information that Apple or Google provides (such as the product, purchase date, renewal and expiry) so the app can unlock the subscription and restore purchases.
Network information
Like any internet service, our server and hosting provider receive your IP address when the app or website connects. We use it for security and rate limiting, and do not use it to identify you or work out where you live.
App integrity checks
To make sure only the genuine app can use our scanning service, the app may use Apple App Attest on iPhone or Google Play Integrity on Android. These services tell our server whether the request comes from an unmodified copy of the app.
Emails to support
If you email us, we receive your email address and whatever you include in your message, and we use them only to reply and help you. We keep support emails for up to 24 months after the last message in the conversation.
What we do not collect
- No account, name, email address or phone number is needed to use the app.
- No precise or approximate location from your device.
- No contacts, and no access to your photo library beyond the photo you choose to scan.
- No advertising identifiers, no advertising SDKs and no third-party analytics or tracking.
Data stored only on your phone
Your collection is stored on your phone and is not uploaded to us. It includes the photos you took, the Numista catalog number and issue of each coin, and the condition you selected. The app may also keep coin details and prices from Numista on your phone for a limited time so that screens load quickly. You can delete coins in the app at any time; uninstalling the app deletes this data. We cannot recover it for you, because we never had a copy.
Device permissions
- Camera: to photograph coins. The app asks right before opening the camera.
- Photos: only if you choose to scan an existing photo. The app uses the system photo picker where available, so it only receives the photo you select.
Service providers
We use the following providers to run the app. They process data on our behalf and only for the purposes described here.
| Provider | What it does | Data it receives |
|---|---|---|
| Anthropic, PBC (USA) | AI model that reads the coin in your photos | The two cropped coin photos. Not your install ID. Under Anthropic’s commercial terms, data sent through its API is not used to train its models. Anthropic may retain inputs for a limited period for safety and abuse monitoring, as described in its own policies. |
| Numista (France) | Coin catalog and price estimates | Search text describing the coin (for example “25 Pesetas Juan Carlos I”) and catalog numbers. Never your photos or your install ID. Requests come from our server, not your phone. |
| RevenueCat, Inc. (USA) | Manages subscriptions and restoring purchases | Install ID, purchase information from Apple or Google, device type and app version |
| Apple and Google | App distribution and payment; app integrity checks | Handled under your agreement with Apple or Google and their privacy policies |
| Cloudflare, Inc. (USA) | Hosts our server, database and this website | IP address, request data, install ID, scan count and logs as described above. Coin photos pass through Cloudflare in transit but are not stored. |
We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We may disclose information if required by law, to protect our rights or users’ safety, or as part of a merger or sale of our business, in which case this policy will continue to apply to your data.
International transfers
Some of our providers are based in the United States. Where personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to countries without an adequacy decision, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, or the provider’s certification under the EU–U.S. Data Privacy Framework and its UK and Swiss extensions where applicable.
How long we keep data
- Coin photos: not stored; discarded after the scan.
- Install ID and scan count: for as long as the install ID is used, and deleted after 24 months without any request from it.
- Scan results and service logs: up to 7 days.
- Purchase records: as long as needed to provide your subscription and as required by tax and accounting law.
- Support emails: up to 24 months after the last message.
Security
All traffic between the app and our server is encrypted with HTTPS. API keys for our providers are kept on our server, never in the app. Access to our systems is limited to the people who run Mintwise. No system is perfectly secure, but we keep the data we hold to a minimum.
Your rights in the EEA and UK (GDPR and UK GDPR)
We process personal data on these legal bases:
- Performance of a contract: identifying your coins, counting free scans, providing your subscription.
- Legitimate interests: keeping the service secure, preventing abuse and fraud, fixing errors and answering support requests. We have balanced these interests against your rights; you can object at any time.
- Legal obligation: keeping purchase records where the law requires it.
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. Because there is no account, we can only find data linked to your install ID; include it when you contact us; you can find it in the app under Settings. We will reply within one month. You also have the right to complain to your local data protection authority; in the UK, this is the Information Commissioner’s Office (ico.org.uk).
The app is not currently offered in the European Economic Area.
Your rights in California (CCPA/CPRA) and other U.S. states
In the last 12 months we have collected these categories of personal information: identifiers (install ID, IP address), commercial information (subscription status and purchase records) and internet or network activity (service logs). Coin photos are processed only to provide the scan and are not retained. We collect this information for the purposes described in this policy and from the sources described above (you, your device, Apple, Google and RevenueCat).
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information. You have the right to know what personal information we hold about you, to delete it, to correct it, and to not be discriminated against for exercising these rights. Residents of other U.S. states with similar laws have the same rights. To make a request, email us with your install ID. An authorized agent may also make a request on your behalf with your written permission. We may need to verify that the request relates to your install ID before acting on it.
Children
Mintwise is a general-audience app and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.
This website
getmintwise.com does not use cookies, analytics or advertising trackers. It loads fonts from Google Fonts, so your browser connects to Google’s servers, which receive your IP address. Our hosting provider, Cloudflare, processes your IP address to deliver the site and protect it from attacks.
Changes to this policy
If we change this policy, we will update the effective date above. If a change materially affects how we use your data, we will tell you in the app before it takes effect.
Contact
Dang Duy Tu (Đặng Duy Từ)
Tổ Tân Thanh 1, phường Tân Giang, tỉnh Cao Bằng, Vietnam
Email: support@getmintwise.com