This policy covers CoinDuo: Coin Identifier, its coin analysis and collection services, and these CoinDuo support pages. Mavio LLC (“we”, “us”) provides CoinDuo. For privacy questions or requests, email [email protected]. The separate website Privacy Policy covers the CoinDuo web service at coinduo.app. Features can vary by app version and availability; the choices described below apply when the relevant feature is offered.
Information we process
- Coin photos and details: photos you take or select, coin images extracted from a selected video, replacement images, coin details you submit for analysis, identification results, condition categories, reference estimates and task status.
- History and collection: saved coin details, photos, quantities, folders, notes, tags and purchase information you choose to add, including records imported from a list. Completed scans may enter history before you mark them as favorites. Some imported records have no photos.
- Visitor and account information: pseudonymous visitor, account and installation identifiers, authentication and consent records. Optional Sign in with Apple supplies an account identifier and email, which may be a private relay address. Apple authorization credentials needed for account deletion are encrypted on our server. We do not receive your Apple Account password. Guest use and random identifiers do not make your records anonymous to us.
- Purchases and access: Apple transaction identifiers, verification results, subscription status, scan-pack balances, usage and refund adjustments. Apple handles payment; we do not receive your full payment card details. Limited purchase and fraud-prevention records can remain after content deletion.
- Technical and support information: network requests may expose an IP address; service records include task/request identifiers, timestamps, processing durations and errors. Support includes messages and attachments you send. Optional product analytics, crash reports and video diagnostics are explained separately below.
Coin photos and AI analysis
Camera access is used to photograph coins. The system picker gives us access to the photos or videos you select, rather than your entire library. Camera preview frames are processed on your iPhone for capture guidance. Ordinary single-coin and hands-free scans upload prepared still images, not a continuous camera recording. Photos are normalized and encoded without carrying over the original photo’s EXIF metadata. We do not modify or delete originals in your system photo library.
Cloud identification and valuation send prepared coin images or the coin details you choose to analyze to our servers and third-party AI service providers. This requires Coin Analysis permission. You can withdraw it in Settings → Privacy & Data → Coin Analysis. Withdrawal stops new analysis submissions until you agree again; it does not undo completed processing or delete existing records. Synchronizing an existing collection is separate from ordering a new AI analysis.
Avoid including faces, addresses, documents or other unnecessary personal information. A visible detail in an image remains visible even when file metadata is removed. Reference estimates can be inaccurate and are not professional authentication, grading or a guaranteed sale price.
Excel and CSV imports
Your selected .xlsx or .csv file is parsed on your iPhone. The original spreadsheet file is not uploaded to our server or an AI provider. Mapped fields become normal collection records; they can be uploaded when you synchronize those records. “Import only” does not send the rows for AI analysis, but it does not mean that the resulting records can never leave your device.
If you choose to have CoinDuo value imported coins, the relevant coin-name, country, denomination, year, mint and condition text is sent through our service to third-party AI service providers. The AI request does not include the original file, unmapped columns, your account email, private collection notes or the sheet’s price values. Text you put inside a mapped coin field will be included, so keep personal information out of those fields. A record with no photo is valued from its supplied details; this cannot establish its actual physical condition.
Video import and optional video sharing
Local analysis: the selected video is analyzed on your iPhone to find coin appearances and candidate front/back images. After you confirm the coins to identify, prepared coin images are uploaded for ordinary AI identification. This does not by itself upload the full video.
Numerical diagnostics: when video diagnostics are enabled by our service and you have given Coin Analysis permission, confirming identification sends a numerical summary of the local analysis and related actions. This can include timings, sharpness, detected coin bounds, scene motion, counts of hands in view, pairing decisions, reason codes, deleted candidates and retake actions. It does not contain image pixels, audio, file names, original recording dates, location metadata or raw image feature vectors. A random session identifier and the authenticated request associate it with your visitor/account records for access control and deletion; it is not anonymous. We use it to investigate missed sides and improve video import. This is separate from the optional Product analytics switch.
Sharing a video is a separate choice: sharing is off until you actively choose Share videos. Choosing Not now does not change identification, scan charges or access to import. You may be asked once more after a video batch needs a retake. You can change the choice in Settings → Privacy & Data → Video Import. Our service selects which eligible videos to receive, so agreeing does not mean every video is uploaded. There is no reward for sharing.
Before a shared video leaves your iPhone, the app creates a copy without its audio track, location tags, recording dates and descriptive metadata. Essential playback information remains. This does not blur hands, faces or other objects already visible in the image. Video-file upload uses Wi-Fi; control requests and ordinary coin analysis may use your normal connection. Sharing runs separately from identification, so a failed share does not affect your result or scan charge.
Shared videos are private and used to improve coin-video detection, pairing and retake guidance. Our authorized team and trusted service providers, including third-party AI services, may review or analyze the shared content for this purpose. Sharing does not authorize us to publish your video or use it to train general-purpose AI models. Non-image evaluation results may remain after a video expires; any records still linked to you remain subject to deletion requests.
Turning sharing off stops future sharing and cancels pending uploads; it does not automatically erase completed shares. Use Delete shared videos to request deletion of shared videos and associated annotation derivatives, or use Delete all data / Delete account. Deleting shared videos leaves saved coin records intact and does not by itself delete the separate numerical diagnostics. Deletion requests require a connection. Our target is to complete shared-video deletion within seven days; contact us if it remains pending.
Coin feedback and support
Submitting More suggestions from a coin result/detail sends separate copies of available coin photos, the displayed result snapshot, your message and technical context such as the result ID, app version and recorded model/prompt version. Imported records may have no attached photos. Feedback is used to investigate and improve the service; it does not order another identification or change a saved estimate. Later collection edits do not change the report. Feedback is retained for one calendar month from successful submission and is also covered by all-data/account deletion.
Product analytics, crash diagnostics and attribution
Product analytics is off by default and can be changed in Privacy & Data. If enabled, our analytics service providers receive usage events, such as feature interactions and purchase outcomes, with random identifiers and technical information. We do not send coin photos, private notes, email, purchase credentials or spreadsheet contents to these services. The identifiers can be associated with your CoinDuo records. Session recording is not enabled.
Crash diagnostics is a separate, off-by-default setting. If enabled, our diagnostics service providers receive crash and error reports, app/device information and installation identifiers to help fix faults. We do not attach your coin photos, private notes, email or purchase credentials. Turning either setting off stops new permitted sends; it does not erase information already received by a provider.
Apple Ads attribution: the app can send an Apple AdServices attribution token and installation identifier to our server. The server asks Apple whether the installation came from our Apple Ads campaign and retains the returned campaign/ad-group/keyword identifiers and attribution status. The encrypted raw token is removed when the lookup completes or its 24-hour validity window expires. This helps us understand acquisition and choose which explanatory messages to show; it does not change your underlying free allowance. It is separate from optional product analytics. We do not access IDFA or use these records to track you across other companies’ apps/websites, and do not send your coin content to ad networks.
Uses and limits
We process information to provide identification and valuation, save and synchronize your collection, operate purchases and account access, recover interrupted tasks, prevent abuse, answer requests and improve reliability. The optional improvement activities and their choices are described above. We do not sell personal information or use private coin photos or notes for targeted advertising. Permission to analyze a coin or share a video is not a general-purpose AI-training license.
Service providers and international processing
- AI processing: contracted AI service providers process coin images or relevant text for identification and valuation. If you separately agree to share videos for improvement, AI service providers may also assist with that work. We use service terms that do not permit using this content to train general-purpose AI models. Providers may keep inputs and outputs for security and abuse monitoring, normally for up to 55 days depending on the service, with legal/safety exceptions; flagged content may be reviewed by authorized personnel. This separate provider retention is not overridden by deletion from CoinDuo.
- Hosting, private storage, authentication and database providers: process the requests, accounts, consent, coin records and files necessary to operate CoinDuo. Private user files are not published as reference-gallery images.
- Analytics and stability: Analytics and diagnostics service providers handle the optional usage statistics and crash reports described above. Their purposes are limited to the disclosed service functions, not advertising with your coin content.
- Apple: provides sign-in, purchase verification and Apple Ads attribution where used. Currency reference services receive rate-data requests, not your coin photos, notes or account email.
We require processors to protect data under applicable processing terms and access restrictions. Services may process data outside your country, including in the United States. Contact us for processor and transfer-safeguard details. We may disclose limited information where legally required or necessary to protect against fraud, security threats or infringement of legal rights. A materially different AI recipient or use requires an updated disclosure and appropriate permission before that processing starts.
Retention and deletion limits
- Temporary scan work: seven days from task creation, unless required images/results become part of saved history; a retry does not restart the window.
- Numerical video diagnostics: 180 days from server receipt, or earlier through all-data/account deletion.
- Shared videos: 90 days from completed upload, then scheduled cleanup. An incomplete upload expires after seven days; the on-device upload copy is also discarded when it expires or is no longer needed. Original library videos remain yours.
- Coin feedback: one calendar month from successful submission.
- Saved history/imported records: kept until deleted. A subscription ending, removing a favorite or changing folders does not automatically erase history.
- Optional analytics: events already delivered are subject to the provider/project retention and deletion process. All-data/account deletion removes our linked analytics records and queues third-party deletion; remote completion can require a separate provider-side operation. Contact us to follow up. Disabling analytics alone is not a retroactive deletion request.
- Crash reports: Our crash-reporting provider retains crash traces and associated installation identifiers for 90 days before removal from live and backup systems begins. A local switch or account deletion does not instantly erase already delivered reports.
- Administrative records: limited transaction, consent, deletion, security and legal records may be retained as needed for those purposes. Support correspondence is retained to handle the request and meet applicable obligations.
Expiry is enforced by scheduled processing, not an assertion of instantaneous physical erasure. Restricted backups and third-party security logs have separate retention. Where a deletion is pending or fails, it must be retried or completed through support; we do not treat an uncompleted request as completed.
Your choices and requests
Open Settings → Privacy & Data to withdraw Coin Analysis permission, change Product analytics or Crash diagnostics, manage Video Import sharing when available, delete all data or delete your account. Sharing a video is optional. Consent withdrawal does not delete existing records; use the relevant deletion action if that is your intention.
Delete all data removes CoinDuo content while retaining the authentication account. Delete account also requests authentication-account removal and revocation of linked Apple sign-in authorization. External cleanup may remain pending and be retried. Signing out and uninstalling are different from deleting an account. Originals in your system library are not deleted by CoinDuo.
Request access, correction, a data copy, deletion or assistance at [email protected]. Depending on your location, you may also have rights to object, restrict processing, withdraw consent or complain to a regulator. We may request proportionate verification of ownership. Do not send passwords, verification codes or card numbers.
Deleting data or an account does not cancel an Apple subscription. Manage renewal in iPhone Settings → your name → Subscriptions. See purchase support.
Security, exports and external links
We use access controls and protected connections, but no system guarantees absolute security. Keep a suitable copy of important records. Only successfully synchronized records have a server copy; restoring a purchase does not restore a collection. PDF/CSV exports and share cards are created on your device and go to the destination you choose through the system share interface; its handling is governed by that recipient.
Marketplace/external links disclose the search terms or request needed to open the destination, not attached private notes or coin photos. The destination handles the visit under its own policies.
Adults only
CoinDuo is intended for adults aged 18 or older. Do not use it or submit content if you are under 18. We do not knowingly collect personal information from minors. Contact us if you believe a minor has provided information so we can investigate and address it.
Policy updates
We update the date when this policy changes. Where required, we provide additional notice and obtain permission before materially different processing begins. Reading a policy or continuing after an unrelated update does not itself grant permission for new optional sharing.