Privacy Policy

This Privacy Policy explains how Quke Huyu Interactive Technology Co., Ltd. ("we", "us" or "our") collects, uses, shares, retains and protects personal information in connection with the mobile application Coin Identifier&Value Scanner ("Coinval" or the "App"), including all features, content and services made available through it (the "Service").

It applies when you download, install or use the App; when you scan or import an image of a coin; when you use the in-app AI assistant; when you make a purchase through an app store; and when you contact us. It does not apply to third-party services that have their own privacy policies — see Section 10.

"Personal information" (or "personal data") means information that relates to an identified or identifiable individual. This Privacy Policy forms part of, and should be read together with, our Terms of Service; terms used but not defined here have the meaning given to them in the Terms of Service. If you do not agree with this Privacy Policy, please do not use the Service.

In particular, we do not ask for, collect or use:

• Your name, postal address, telephone number or email address, unless you choose to write to us — in which case we receive whatever you include in your message;
• Your contacts, calendar, messages, call logs or files on your device;
• Precise, GPS-level location. We do not track your movements and we do not request location permission;
• Health, biometric, genetic or financial-account information, or government-issued identifiers;
• Advertising identifiers used to track you across other companies' apps or websites. We do not show third-party behavioural advertising; or
• Information about your activity in other apps or on other websites.

We do not sell your personal information. We do not share it for cross-context behavioural advertising, and we do not disclose it to third parties for their own independent marketing.

We also do not use the images you scan, the messages you send to the in-app assistant, or the contents of your Collection to train our own general-purpose AI models, or to permit third parties to train their general-purpose models.

The App does not require an account, and most of what you create in it never leaves your device. The following is stored locally in the App's private storage on your device:

• Your Collection. The coin images you keep, together with the metadata you record — such as country, denomination, year, mint mark, condition, estimated value, notes and tags;
• Your preferences. Favourites, view settings such as grid or list, sorting and filters;
• Cached reference content. Catalogue and reference material cached on your device so that the App can display it quickly.

Exports and device backups. Where the version of the App you use offers an export function, the exported file is created and controlled by you. Once an export leaves the App — for example by saving it to your device, sending it to another app or uploading it to a cloud service — it is outside our control and no longer covered by this Privacy Policy, and you are responsible for its security and deletion. Similarly, if you back up your device using a service offered by your platform provider (such as iCloud backup or Android Auto Backup), your App data may be included in that backup; that backup is controlled by you and by your platform provider, not by us.

When you scan a coin or import an image for identification, the App transmits that image to our servers so that it can be processed into a result. Depending on your device and the version of the App you use, the image may be cropped, resized or compressed before it is transmitted.

To find a match, our systems derive the fields required for a database lookup — for example the coin's apparent country, denomination, year, mint mark and visual characteristics. Those derived fields, and in some configurations the image itself, are transmitted to the third-party recognition, AI and numismatic catalogue providers that we use to return a result (see Section 10).

What we use it for. We process scan images and derived fields only in order to:

• generate your identification result and return the associated catalogue information and price references;
• operate, maintain, secure and debug the Service, including detecting and preventing abuse, fraud and automated misuse;
• apply and enforce any usage quota, rate limit or other technical limit that applies to your use of the Service;
• investigate and resolve a support request you have sent us; and
• comply with our legal obligations and enforce our Terms of Service.

How long we keep it. Scan images are processed transiently and are not assembled into a permanent library of your scans. We retain them, and the fields derived from them, only for as long as necessary for the purposes set out above. Section 12 sets out the retention periods that apply.

When you use the App, we and our service providers automatically receive certain technical, usage and diagnostic information. This information is generally not sufficient on its own to identify you by name, and we use it in aggregated or de-identified form wherever possible. It consists of:

• Device and app information. Device model and manufacturer, operating system and version, app version and build, language and locale settings, time zone, display characteristics, and the type of network connection in use;
• Approximate location. Your IP address allows us to determine an approximate, country- or region-level location, which we use for language defaults and for service availability and security. We do not collect precise location data;
• Identifiers. A randomly generated installation identifier that the App creates on your device, and store-issued tokens where these are needed to validate a purchase. We do not use advertising identifiers to track you across other companies' apps or websites;
• Usage and event data. Which screens you open, when you start, complete or abandon a scan, whether an identification succeeded, how you interact with features, which limits or quotas have been reached, and similar product-interaction events;
• Diagnostic and crash data. Crash reports, error and stack-trace information, and performance measurements such as response and processing times;
• Server and security logs. Your IP address, the date and time of requests, the type of request, response status, and basic device or agent information. We use these logs to deliver content, to protect the Service against attacks and abuse, to apply rate limits, and to diagnose faults.

We use this information for the purposes, and on the legal bases, described in Section 08, and we retain it for the periods described in Section 12.

The App asks for a permission only when it needs that permission to provide a feature you have chosen to use. Every permission is optional: you may decline it, or revoke it later in your device settings. If you decline, the related feature will not work, but you can continue to use the rest of the App.

• Camera. Used to photograph a coin while you are on the capture screen, so that the image can be identified. The App does not access your camera in the background, and does not record audio or video;
• Photos and media library. Used to let you import an existing image of a coin instead of taking a new photograph and, where the version of the App you use offers it, to save or export an image you have created in the App. We do not scan or upload your photo library: only the images you choose are processed;
• Notifications. Optional, and used only for service messages and the features you enable. You may decline them when first asked and turn them off at any time in your device settings.

If you have already granted a permission and wish to withdraw it, you can do so in your device settings — for example, in iOS under Settings → Coinval, or in Android under Settings → Apps → Coinval → Permissions. Withdrawing a permission does not affect processing carried out before the withdrawal.

If you buy an in-app item, a bundle of content, or a subscription where the version of the App you use offers one, the transaction is processed by the app store you obtained the App from — for example the Apple App Store — under that store's own terms and privacy policy. Payment card details, bank details and billing addresses are handled by the store. We do not receive or store them.

We do receive limited transaction and entitlement information that we need in order to give you the access you have paid for. Depending on the store, this may include:

• the product identifier and the storefront used;
• a transaction, order or original-transaction identifier;
• the dates of purchase, renewal and expiry, and whether the entitlement is currently active, refunded, cancelled or in a grace period;
• a store-issued app account or device token used to associate the entitlement with your installation.

We use this information only to provide and validate your entitlement, to prevent and detect fraud and misuse, to handle refunds, chargebacks and disputes, to provide support, and to meet accounting, tax and legal record-keeping obligations. We may use a third-party provider to validate purchases and confirm entitlement on our behalf.

Cancelling a recurring purchase. Recurring purchases are managed by the app store, not by us. Uninstalling the App does not cancel one. To cancel, use your app store account settings; cancelling stops future renewals, but the current period usually runs to its end.

We process personal information only for the purposes set out below. For each purpose we also identify the legal basis on which we rely, where the General Data Protection Regulation or the UK GDPR applies to you: if you are in the European Economic Area, the United Kingdom or Switzerland, we must have one of those bases in order to process your information lawfully.

• To provide the Service you have asked for. Generating identification results, presenting catalogue information and price references, providing the Assistant, and storing your Collection on your device. Legal basis: performance of a contract with you;
• To keep the Service safe, secure and available. Applying rate limits and usage quotas, detecting automated, fraudulent or abusive use, defending against attacks, monitoring availability and diagnosing faults. Legal basis: our legitimate interests in protecting the Service, our users and our providers, and in ensuring that the Service functions correctly;
• To improve and develop the Service. Understanding in aggregate which features are used, where identification attempts fail and how the App performs, so that we can prioritise fixes and improvements. Legal basis: our legitimate interests in improving our products, using aggregated or de-identified information wherever possible;
• To give you the access you have paid for. Validating purchases and entitlements and handling refunds and disputes. Legal basis: performance of a contract and our legitimate interests in preventing fraud;
• To communicate with you. Responding to a support request or a privacy request you send us, and giving you service, security and legal notices. Legal basis: performance of a contract, our legitimate interests in responding to you, and compliance with legal obligations. We do not send marketing or promotional messages, because we do not collect contact details for that purpose;
• To comply with the law and enforce our rights. Responding to lawful requests from competent authorities, meeting accounting and tax requirements, and establishing, exercising or defending legal claims. Legal basis: compliance with legal obligations and our legitimate interests in protecting our rights;
• To create aggregated and statistical information. We may create aggregated or de-identified data that no longer identifies you, which we may use and disclose for analytics, research, benchmarking and product development. Legal basis: our legitimate interests in understanding and improving our Service; such information is not personal information.

We do not use personal information for automated decision-making that produces legal effects or similarly significant effects for you, and we do not carry out profiling for advertising purposes.

We do not sell your personal information. We do not share it with third parties for their own marketing, and we do not share it for cross-context behavioural advertising. We disclose personal information only in the limited circumstances set out below, and only to the minimum extent necessary.

1. Service providers acting on our instructions. We use third parties to run parts of the Service: cloud hosting and storage infrastructure, AI model and image-recognition providers, numismatic catalogue and price-data providers, analytics and crash-reporting services, subscription validation services, and email or support tooling. They may process your information only on our documented instructions, under written agreements that impose appropriate confidentiality and security obligations, and only for the purposes described in this Privacy Policy. They are not permitted to use it for their own purposes;
2. App stores and payment processors. Where you make a purchase, the app store processes the transaction and shares limited transaction information with us, as described in Section 07;
3. Professional advisers. Lawyers, auditors, accountants, insurers and other advisers, where necessary and subject to duties of confidentiality;
4. Corporate transactions. If we are involved in a merger, acquisition, reorganisation, financing, insolvency or sale of assets, information may be transferred or disclosed as part of that transaction or the related due diligence, subject to this Privacy Policy and, where required, to additional protections;
5. Legal, safety and enforcement. Where we believe in good faith that disclosure is necessary to comply with the law or a valid legal process; to respond to a lawful request from a competent authority; to protect the rights, property or safety of our users, the public, our providers or us; to detect, prevent or address fraud, security or technical issues; or to enforce our Terms of Service;
6. With your direction or consent. Where you ask us to share information, or where you consent — for example if you use a sharing feature built into the App.

What third-party providers receive. In order to return an identification result, the fields derived from your scan — and, in some configurations, the image itself — may be transmitted to third-party recognition and catalogue providers. Those providers process that information under their own terms and privacy policies, which we encourage you to review. See Section 10.

Your own sharing is outside our control. If you share a result, an exported file or a screenshot outside the App, or post it publicly, that information is no longer covered by this Privacy Policy and you are responsible for it.

The Service depends on and may link to third-party services, including app stores, cloud infrastructure providers, AI model and image-recognition providers, numismatic catalogue and price-data providers, and analytics and diagnostics providers. We select those providers with care, but we do not control them and we are not responsible for their privacy practices. Their own privacy policies govern their processing of your information, and we encourage you to read them.

App stores. When you download the App, or make a purchase through it, the relevant store provider collects information under its own privacy policy. That processing is not covered by this Privacy Policy.

Third-party links. If you follow a link from the App to a third-party website or service, that third party's terms of use and privacy policy apply to what happens there.

We and our service providers may process and store information in countries other than the country in which you live, including in the United States and in the jurisdictions in which our service providers operate. Wherever we process information, we apply the protections described in this Privacy Policy.

Where we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on an appropriate safeguard: a decision by the relevant authority that the destination country provides an adequate level of protection, or the standard contractual clauses approved by the European Commission — and, for the United Kingdom, the UK International Data Transfer Addendum — together with additional technical and organisational measures where these are required.

You may ask us for more information about the safeguards that apply to a specific transfer by contacting us using the details in Section 17.

We keep personal information only for as long as we need it for the purposes described in this Privacy Policy, and we delete or de-identify it once it is no longer needed. The periods we apply are:

• Information stored on your device. Kept until you delete it, clear the App's data, or uninstall the App. We hold no copy;
• Scan images and derived identification fields. Processed in order to produce your result and then deleted or de-identified in the ordinary course, and in any event within thirty (30) days — except where a copy must be retained for longer for security, abuse-prevention, dispute-handling or legal reasons, in which case it is deleted once that purpose has been met;
• Assistant conversations. Processed in order to generate a reply. We do not keep a permanent archive of your conversations; transient processing records are deleted on the same basis as scan images. Your conversation history remains on your device until you delete it;
• Usage and event data. Retained in identifiable form for a maximum of fourteen (14) months, after which it is aggregated, de-identified or deleted;
• Crash and diagnostic data. Up to ninety (90) days;
• Server and security logs, including IP addresses. Up to thirty (30) days, except where a longer period is necessary to investigate a security incident;
• Support correspondence. Up to twenty-four (24) months after your request or inquiry has been closed;
• Purchase and entitlement records. For as long as is necessary to provide your entitlement and to meet the record-keeping requirements of applicable tax, accounting and consumer law;
• Aggregated or de-identified information. May be retained indefinitely, because it no longer relates to an identifiable individual.

We may retain information for longer than the periods above where the law requires it, where we are subject to a legal hold, or where retention is necessary in order to establish, exercise or defend a legal claim — and where we do, we will limit processing to that purpose.

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse and alteration. These include encryption of information in transit using industry-standard protocols, access controls and least-privilege permissions for our personnel, separation of production and development environments, logging and monitoring for security events, confidentiality and data-protection obligations in our contracts with service providers, and limiting both the information we collect and the period for which we keep it.

Protection on your device. Your Collection, your preferences and your Assistant history are stored in the App's private storage on your device, and their security also depends on your device: a screen lock or passcode, biometric protection and full-device encryption all help to protect them. Anyone with access to your unlocked device can see the content of your App. Exported files may be less well protected once they leave the App.

No absolute security. No method of transmission over the internet, and no method of electronic storage, is completely secure, and we cannot guarantee absolute security. We cannot guarantee that unauthorised third parties will never be able to defeat our security measures or use your information improperly. If we become aware of a breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

The Service is not directed to children and is not intended for their use. As set out in our Terms of Service, you must be at least 13 years old — or 16 years old if you live in the European Economic Area, the United Kingdom or Switzerland — in order to use the Service.

We do not knowingly collect personal information from children below those ages. Because the App does not require an account, and does not ask for your name, email address or date of birth, we do not ordinarily know the age of the person using it.

If you are a parent or guardian and you believe that a child has used the Service or has provided personal information to us — for example by writing to us, or by sending a message to the Assistant — please contact us using the details in Section 17. We will take reasonable steps to delete that information, and we will not use it for any other purpose.

Where we learn that we have collected personal information from a child below the applicable age without the required consent, we will delete it promptly. Where a parent or guardian contacts us, we process their own contact details solely in order to deal with the request.

Depending on where you live, you may have some or all of the following rights in relation to personal information we hold about you:

• Access. To be told whether we process personal information about you, and to receive a copy of it;
• Correction. To ask us to correct personal information that is inaccurate or incomplete;
• Deletion. To ask us to delete personal information we hold about you;
• Portability. To receive certain personal information that you have provided to us in a structured, commonly used, machine-readable format, and to ask us to transmit it to another provider where this is technically feasible;
• Objection and restriction. To object to processing that is based on our legitimate interests, and to ask us to restrict processing in certain circumstances;
• Withdrawal of consent. Where we rely on your consent, to withdraw it at any time; withdrawal does not affect processing carried out before the withdrawal;
• Non-discrimination. We will not deny you the Service, charge you a different price, or give you a lower quality of service because you have exercised your rights.

Your device is where most of the information is. The quickest way to delete your Collection, your preferences or your Assistant history is to use the controls in the App: delete individual coins, delete one conversation or all conversations from the history screen, or uninstall the App (or clear its data) to remove everything that is stored locally. We cannot delete information that exists only on your device, and we cannot recover it once it is gone.

How to make a request. Send your request to the contact address in Section 17, telling us what you are asking for and, where relevant, which app store you obtained the App from.

Verification and limits. Because we do not operate user accounts, we may hold no information that identifies you, and there may be no records for us to act on. Where we can act, we may ask you for information that helps us to locate the relevant records and to confirm that you are the person concerned — for example the approximate date of a scan, the model of your device, or a purchase identifier. We will use that information only for that purpose. We will respond within the period required by applicable law: normally within one month for requests under the GDPR or the UK GDPR, and within 45 days for requests from California residents, in each case subject to any permitted extension.

Additional information for California residents. In the twelve months before the date of this Privacy Policy, we have collected the categories of personal information described in Sections 04, 05 and 07, for the business purposes described in Section 08, and we have disclosed them to the categories of recipients described in Section 09. We do not "sell" or "share" personal information as those terms are defined by the California Consumer Privacy Act, as amended; we do not use or disclose sensitive personal information for purposes other than those permitted by law; and we do not knowingly sell or share the personal information of consumers under 16 years of age. California residents also have the right to know, to delete, to correct and to limit the use and disclosure of sensitive personal information, and to use an authorised agent to exercise these rights.

Tracking signals. We do not track your activity across other companies' apps or websites for advertising purposes, and we do not build advertising profiles about you. Accordingly, we do not currently respond to "Do Not Track" signals or to Global Privacy Control signals, because there is no such tracking for those signals to control. If our practices change, we will explain how we handle those signals here and, where required, in the App.

Supervisory authorities. If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to lodge a complaint with your local data-protection supervisory authority. We would appreciate the opportunity to address your concern first, so please consider contacting us before you do.

We may update this Privacy Policy from time to time, for example to reflect changes in the Service, in the categories of information we process, in law, or in our practices. When we make changes, we will update the "Last updated" date at the top of this Privacy Policy and, where the changes are material, we will notify you within the App or by other reasonable means before they take effect. Where required by law, we will obtain your consent.

We will not use personal information collected under an earlier version of this Privacy Policy for a materially new purpose without first giving you notice and, where required, obtaining your consent.

Your continued use of the Service after the effective date of a revised Privacy Policy means that you accept it. If you do not agree with the revised Privacy Policy, you should stop using the Service and uninstall the App. You may request a copy of an earlier version by contacting us using the details in Section 17.