Legal
Privacy Policy
Last updated: 4 August 2026
This policy explains what AntiqueID: Antique Appraiser collects, why, who else touches it and what you can ask us to do about it. It covers the mobile app and this website, both operated by Yaysoft LTD.
1. The short version
You never give us your name, your email address or a password. The app signs you in anonymously. When you scan an object, the photographs you take and any note you type are sent to our servers and to Google’s Gemini model so the object can be identified and valued. We keep a record of each scan and its result, plus basic technical information such as your device type, app version, language and IP address. We do not sell your data, we do not show you third-party advertising, and the collection you save inside the app never leaves your phone.
2. Who we are
Yaysoft LTD (“we”, “us”) is the data controller for the personal data described in this policy. We publish AntiqueID: Antique Appraiser for iOS and Android (bundle identifier net.yaysoft.antique) and operate the website at antiqueid.app.
You can reach us at any time at support@yaysoft.net.
3. What we collect
| Data | Details |
|---|---|
| Photographs | Up to five photographs of the object you are scanning, plus up to two optional close-ups of a maker’s mark, hallmark or backstamp. You choose what to photograph; please do not photograph people, documents or anything else you would not want us to hold. |
| Your note | An optional free-text note of up to 500 characters that you may add to a scan (for example “inherited from my grandmother, bought in Vienna”). It is sent with the photographs. |
| Anonymous user identifier | A random identifier created by Firebase Anonymous Authentication the first time you open the app. It lets us count your daily free scans and support you if you write in. It is not linked to a name, an email address or a social account. |
| Scan record | For each scan: its status, the category of object, the maker or origin identified, the estimated value range, the model’s confidence, how long the scan took, the language of the request and the app version. |
| Device and connection data | Your IP address, device platform and model, operating system version, app version and device language, as sent with each request. |
| Product events | Events describing how the app is used: first install, onboarding steps completed, subscription screen viewed, free trial started, purchase completed, daily scan limit reached, and similar. |
| Subscription status | Whether you hold an active subscription, which plan, and its renewal state, as reported to us by RevenueCat from the App Store or Google Play. We never receive or store your card or payment details. |
| Push token | If, and only if, you allow notifications: a push token issued by Apple or Google and held by OneSignal so a notification can reach your device. |
| Diagnostics | Crash reports and error traces, including the technical state of the app at the moment it failed. |
We do not ask for your name, postal address, date of birth, contacts, precise location or advertising identifier, and the app does not read your photo library beyond the images you explicitly choose for a scan.
4. Why we collect it
- To identify and value your object. Your photographs and note are the input to the identification; without them there is no result. Legal basis: performance of our contract with you.
- To enforce the free tier and prevent abuse. The anonymous identifier and IP address let us apply the three-scans-per-day limit and block automated abuse of the service. Legal basis: performance of our contract and our legitimate interests in protecting the service.
- To make the app work better. Scan records, product events and crash reports show us which results are weak, where people get stuck and what breaks. Legal basis: our legitimate interests in operating and improving the service.
- To manage subscriptions. Subscription status tells the app whether to unlock unlimited scans. Legal basis: performance of our contract with you.
- To send notifications. Only if you accepted the notification prompt. Legal basis: your consent, which you can withdraw at any time in your device settings.
5. Your photographs
When you run a scan, your photographs and any note travel over an encrypted HTTPS connection to our API, which runs on Cloudflare Workers. They are stored in Cloudflare R2 object storage in the European Union and forwarded, through Cloudflare AI Gateway, to Google’s Gemini model, which produces the identification, the condition and authenticity assessment and the estimated value range.
We use Google’s paid Gemini API. Under Google’s terms for that paid service, Google acts as our processor and states that it does not use content submitted through it to train its general models. Google may retain content briefly for abuse monitoring in line with its own published policies.
We may review individual scans and their results to investigate a support request, to debug a failure or to improve the quality of our prompts and our own service. We do not publish your photographs, sell them, or use them for advertising.
6. Who processes your data
We keep the list of companies involved deliberately short. Each is bound by a data processing agreement and may only act on our instructions.
| Provider | Role |
|---|---|
| Cloudflare, Inc. | Hosts our API (Workers), stores your photographs (R2), stores scan records and product events (D1), and routes requests to the AI model (AI Gateway). |
| Google LLC — Gemini API | Runs the model (gemini-3.6-flash) that identifies the object and produces the assessment and value range from your photographs and note. |
| Google LLC — Firebase | Firebase Anonymous Authentication issues the anonymous user identifier. Google Analytics for Firebase receives the product events described above. |
| RevenueCat, Inc. | Validates App Store and Google Play purchase receipts and tells the app whether your subscription is active. |
| Apple Inc. / Google LLC (app stores) | Take the payment, run the billing and issue refunds for subscriptions. They are independent controllers for that payment relationship, and we never see your payment details. |
| OneSignal, Inc. | Delivers push notifications to your device, if you allowed them. |
| Functional Software, Inc. (Sentry) | Receives crash reports and error traces so we can fix faults. |
Some of these providers are based in, or process data in, the United States. Where data leaves the United Kingdom or the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses (with the UK Addendum where applicable) or another lawful transfer mechanism.
We may also disclose data if we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.
7. Where your data is stored
Your photographs are stored in Cloudflare R2 with the European Union as the storage region, and our scan records and product events are held in Cloudflare D1. Our API runs on Cloudflare’s global network, so a request may be handled by the data centre closest to you before the data comes to rest in the EU.
8. How long we keep it
- Photographs and notes: kept for up to 90 days so that a scan can be re-opened, re-run or investigated after a support request, then deleted.
- Scan records and results: kept for up to 24 months in aggregate-quality and abuse-prevention form, then deleted or irreversibly anonymised.
- Product events: retained according to the retention window configured in Google Analytics for Firebase (currently 14 months) and in our own database for up to 24 months.
- Crash reports: retained by Sentry for up to 90 days.
- Subscription status: kept for as long as your subscription is active and afterwards for the period required by tax and accounting law.
If you ask us to delete your data sooner, we will do so — see Deleting your data.
9. What stays on your device
The collection of items you save inside the app — the objects, their photographs, their estimates and your notes about them — is stored in a database on your phone. It is not synced to our servers and we cannot see it. That also means we cannot restore it: if you delete the app, change device or wipe the app’s data, your saved collection is gone.
Deleting an item from your collection removes it from your phone. It does not automatically delete the corresponding scan record held on our servers; use the deletion process below for that.
10. We do not sell your data
We do not sell personal data, we do not share it for cross-context behavioural advertising, we do not run third-party advertising in the app, and we do not use your photographs to train our own or anyone else’s general-purpose models.
11. Children
AntiqueID: Antique Appraiser is not directed at children. It is intended for adults, and we do not knowingly collect personal data from children under 13, or under 16 in territories where that is the applicable age of digital consent. If you believe a child has provided us with personal data, write to support@yaysoft.net and we will delete it.
12. Your rights (GDPR / UK GDPR)
If you are in the United Kingdom or the European Economic Area, you have the right to:
- Access the personal data we hold about you and receive a copy of it.
- Rectify data that is inaccurate or incomplete.
- Erase your data (“the right to be forgotten”).
- Restrict our processing of your data in certain circumstances.
- Port your data — receive it in a structured, commonly used, machine-readable format.
- Object to processing we carry out on the basis of our legitimate interests.
- Withdraw consent at any time where we rely on it, for example for push notifications.
- Complain to a supervisory authority. In the UK this is the Information Commissioner’s Office (ico.org.uk); in the EEA it is your national data protection authority.
To exercise any of these rights, email support@yaysoft.net. We answer within 30 days.
Because we deliberately do not know who you are, we need your anonymous user identifier to find your records. Open the app, go to Settings, and copy the user identifier shown there into your email. If you no longer have the app installed, tell us as much as you can about the scans in question and we will do our best to locate them — but understand that without the identifier we may not be able to link any data to you at all, which is by design.
13. Deleting your data
Email support@yaysoft.net with the subject “Data deletion request” and include the anonymous user identifier from the app’s Settings screen. We will delete the photographs, notes, scan records and product events associated with that identifier, and confirm to you when it is done, normally within 30 days.
Deleting the app from your device removes your locally saved collection immediately, but does not by itself delete the records held on our servers. Cancelling a subscription is done in your App Store or Google Play account and is separate from deleting your data.
14. California residents
Under the California Consumer Privacy Act, as amended by the CPRA, California residents have the right to know what personal information is collected and for what purpose, the right to delete it, the right to correct it, and the right to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA, and we do not offer financial incentives in exchange for personal information. We will not discriminate against you for exercising any of these rights. To make a request, email support@yaysoft.net; the identification note in section 12 applies here too. The categories of personal information we collect are set out in section 3, the purposes in section 4, and the recipients in section 6.
15. Security
All traffic between the app and our servers uses HTTPS. Data at rest in Cloudflare R2 and D1 is encrypted. Access to production systems is limited to the people at Yaysoft LTD who need it. No system is perfectly secure, but the smallest risk of all is the data we never collect — which is why there is no account, no password and no email address in the first place.
16. Changes to this policy
If we change how we handle your data we will update this page and move the “last updated” date at the top. Material changes will also be signalled in the app. Continuing to use AntiqueID: Antique Appraiser after a change means you accept the updated policy.
17. Contact
Questions, requests or complaints about privacy: support@yaysoft.net.
Yaysoft LTD · AntiqueID: Antique Appraiser · Last updated 4 August 2026