Website Privacy Policy

Last updated October 27, 2026

This policy covers the CoinDuo website at coinduo.app and its related web services, operated by Mavio LLC ("we", "us"). Contact [email protected] for privacy questions, complaints or requests. The iOS app has its own App Privacy Policy. Available features may vary. We process information as described below when you use the relevant feature.

Information we process

• Guest and account data: visitor and account identifiers, your email when you sign in or purchase, authentication sessions and records of processing permission.
• Coin batches: selected front and back photos, file names, upload metadata such as file size and hashes, pairings, identification results, reference estimates, task status and generated exports.
• Purchases: order references, purchased and remaining credits, transaction status and related payment, refund or dispute records. When checkout is available, Stripe collects payment details; our service does not receive your full card number or card security code.
• Technical and support data: IP addresses and request, browser or device information processed by our infrastructure and security services; task timings, errors, and messages or attachments you send to support.
• Optional updates: your email and confirmation or unsubscribe status if you request product launch updates.

Local photo checks and cloud analysis

Selecting photos and running the initial quality checks takes place in your browser. This local check does not send the photos to an AI service. The browser can save a working copy of selected photos and batch state so you can recover after a refresh. It is not a permanent backup.

When you confirm a cloud batch and agree to processing, the service uploads the selected photos and sends prepared coin images to a third-party AI service for identification and valuation. Avoid photos containing faces, addresses, documents or unrelated personal information. Visible details remain visible to the recipient. We use the results to deliver your batch and exports. We do not publish your submitted photos as public gallery content or use them in advertising.

Why we use information

We use this information to operate accounts and guest sessions, analyze requested coin batches, deliver results and download links, manage credits and payments, prevent abuse, investigate errors and respond to support and privacy requests. Where applicable, processing supports your requested service, our legitimate interests in security and reliable operation, legal obligations, or consent for optional activities. Unsubscribing from optional updates does not stop necessary sign-in, purchase or service messages.

Service providers and transfers

Hosting, database, private storage, authentication, email, security and AI providers process information needed for their respective service functions. Our web infrastructure uses Cloudflare, Railway, Supabase and Resend. Cloudflare Turnstile processes technical signals for abuse prevention. Where enabled, Google Gemini processes prepared coin images, and Stripe processes website payments. Provider security logs and retention rules can differ from our batch retention period. Services may process data outside your country, including in the United States. Contact us for details about recipients and applicable transfer safeguards.

We may disclose limited information where required by law, to address fraud or security threats, or to protect legal rights. Stripe also describes its own handling of payment information in its Privacy Policy.

Cookies and browser storage

We use authentication cookies and browser storage to keep you signed in, protect access to private photos, and preserve the current batch and selected files. Security and payment providers may use their own cookies or similar technologies when their features load. These functions are separate from subscribing to product updates. You can clear site data through browser settings, but doing so may remove local-only photos, drafts or access to an unlinked guest session. Keep your originals and sign in with the email associated with a purchase to recover available account records.

Retention and deletion

Cloud batch photos, results and associated downloads expire 90 days after the batch is created. Expiry is not extended by reopening a result. Scheduled cleanup removes the content; object deletion and restricted backups may take additional time. Account, credit, transaction, security and support records can remain as needed to operate your account, handle disputes and meet legal obligations. Deleting batch content does not by itself delete an account, erase a purchase record or request a refund.

You can delete eligible batches from History. A batch already submitted and still processing currently cannot be deleted through that control; email us if you need assistance. For account deletion, access, correction or a data copy, contact [email protected]. We may verify ownership before acting. Browser copies, files you download, provider records and recipient copies have separate deletion paths.

Your choices, security and age

You can choose not to submit photos for analysis, manage browser storage, unsubscribe from optional updates, and contact us about data requests. Depending on your location, you may also have rights to object, restrict processing, withdraw consent or complain to a regulator. Withdrawal does not undo completed processing or replace a deletion request.

We use access controls and protected connections, but no service guarantees complete security. Do not share sign-in links, verification codes or download access with others. CoinDuo is intended for adults aged 18 or older. If you believe a minor has submitted personal information, contact us so we can investigate.

Updates and contact

We will update the date when this policy changes and provide additional notice or request permission where required. Email [email protected] for all privacy requests and complaints. See the Website Terms of Service and support page for related information.