Privacy Policy — RockScan

Introduction

RockScan helps you identify rocks, minerals, gemstones, crystals, and fossils from photos and browse a collector directory. This Privacy Policy explains how we handle information when you use the RockScan website at rockidentifier.tech, the web studio at https://rockidentifier.tech/app, and related pages.

The RockScan iPhone app is a separate product surface with its own account identifier and App Store billing. Where mobile and web differ, we call that out below.

Information we collect

Web sign-in. If you create a web account, we collect your email address when you request a magic link or sign in with Google. Google may also provide your name and profile photo depending on your Google account settings.

Photos and scans. When you upload a specimen photo for identification, the image is sent to our identification service to generate a result. We may store the image and result in your private web collection while you remain signed in.

Device and usage data. Like most websites, our servers receive standard technical data such as IP address, browser type, pages visited, and timestamps. This helps us operate, secure, and improve the service.

iPhone app. The iOS app uses an anonymous user ID stored in your device Keychain for cloud sync and purchases. It does not require an email address unless you choose to contact support. Scan photos and discovery history are tied to that anonymous ID on our backend when cloud sync is enabled.

How we use information

We use collected information to:

Authenticate you on the web and keep you signed in
Process photo identifications and show results
Save your specimen history and collection where the product supports it
Enforce free-tier limits, subscriptions, and abuse prevention
Respond to support requests and maintain security

We do not sell your personal information.

Data retention

Web account data and scan history are kept while your account remains active. You may sign out at any time; session cookies expire according to browser settings. To request deletion of web account data, email heipkhei@gmail.com.

iOS discovery data synced to our cloud is retained while the anonymous account remains in use. Deleting the app removes local data; cloud copies may persist until you request deletion.

Private by default

Your identifications and uploaded photos are not published for other users to browse. Specimen history is visible only to you within your signed-in session or app collection unless we explicitly introduce a sharing feature and you opt in.

Sharing with service providers

We share information only with vendors that help us run RockScan, including:

Cloudflare — hosting, storage, and edge infrastructure for the website and API
OpenRouter / vision models — photo analysis for identifications
Resend — transactional email for magic-link sign-in
Google — optional Google Sign-In on the web
Stripe — web subscription checkout when offered
RevenueCat and Apple — iOS subscription and purchase validation

These providers process data under their own policies. We recommend reviewing their privacy documentation if you need more detail.

Educational disclaimer

RockScan identifications, value estimates, and authenticity notes are generated for learning and collector interest. They are not guaranteed to be complete or correct. Do not rely on RockScan alone for buying, selling, mining, safety, or legal decisions. Consult qualified gemologists, geologists, or accredited appraisers for professional opinions.

Web vs iPhone

The website and iPhone app use separate sign-in systems. A web email account does not automatically link to the iOS anonymous ID, and subscriptions purchased on one platform do not unlock the other unless we explicitly add cross-platform entitlements in the future.

Cookies

We use essential cookies and similar storage to keep you signed in on the web and remember preferences. We do not use third-party advertising pixels on RockScan at this time.

Security

We use HTTPS, HttpOnly session cookies on the web, and access controls on stored images and scan records. No method of transmission or storage is perfectly secure; use the service at your own discretion.

Children

RockScan is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

Changes

We may update this policy as the product evolves. The “Last updated” date at the top will change when we do. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy: heipkhei@gmail.com