Rock Identifier: Mineral Scan · Effective date: April 8, 2026 · Last updated: April 8, 2026
The data controller responsible for your personal data is:
For all privacy-related inquiries, including exercising your rights under GDPR or CCPA, please contact us at the email above.
When you use the mineral identification feature, you may take or upload a photo of a rock or mineral. That image is transmitted to our backend server solely for AI-based identification processing. Once the identification result is returned to your device, the image is permanently deleted from our servers. We do not store, retain, or share your photos.
We use the following third-party services to understand how the App is used and to diagnose technical issues:
These services may collect pseudonymous device identifiers, IP address, app version, OS version, language, and usage events. This data is pseudonymous — it cannot directly identify you by name, but it is associated with a device identifier. For more information, see Google's Privacy Policy.
Premium features and subscriptions are processed entirely through Google Play. We do not receive or store your payment card details. We receive only a confirmation of purchase status (active/inactive subscription) from Google Play to unlock premium features.
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Rock/mineral identification | Photos (temporarily) | Performance of contract (Art. 6(1)(b)) |
| App analytics and performance monitoring | Pseudonymized usage data, device data | Consent (Art. 6(1)(a)) |
| Crash diagnosis and bug fixes | Crash reports, device info | Legitimate interests (Art. 6(1)(f)) |
| Subscription management | Purchase status from Google Play | Performance of contract (Art. 6(1)(b)) |
| Legal compliance | As required | Legal obligation (Art. 6(1)(c)) |
We do not sell, rent, or trade your personal data. We share data only with the following parties and only to the extent necessary:
If we ever sell or transfer our business, your data may be part of that transfer. You will be notified in advance.
Our backend servers and third-party services (Google LLC) may process your data outside the European Economic Area (EEA), including in the United States. These transfers are covered by:
You can request details of the relevant safeguards by contacting us at [email protected].
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR:
To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority. In Austria, this is the Datenschutzbehörde (DSB).
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
| Category | Examples | Collected? |
|---|---|---|
| Identifiers | Email address, account ID | No |
| Internet / network activity | App usage events, crash reports | Yes |
| Commercial information | Subscription status | Yes |
| Biometric data | Fingerprints, facial recognition | No |
| Geolocation data | GPS or precise location | No |
| Sensitive personal information | Photos (transient, immediately deleted after processing) | Temporarily |
To submit a CCPA request, email [email protected] with the subject line "CCPA Request". We will respond within 45 days. We may ask you to verify your identity before processing the request.
We implement appropriate technical and organizational measures to protect your personal data, including:
No method of transmission over the internet is 100% secure. In the event of a data breach affecting your rights and freedoms, we will notify you and relevant authorities as required by law within 72 hours of becoming aware of the breach.
The App does not knowingly collect personal information from children under 13 years of age (or under 16 in certain EU member states). If we become aware that a child under the applicable age has provided us with personal information without parental consent, we will delete that information promptly. If you believe your child has provided us with personal information, please contact us at [email protected].
When you first launch the App, you will be presented with a consent dialog for analytics data collection in compliance with GDPR requirements. This consent is voluntary — the App's core identification features work without it. You may withdraw your analytics consent at any time through the App's settings. You may also limit analytics data collection by adjusting your Android device's advertising settings under Settings → Google → Ads → Delete advertising ID.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification. The updated policy will be effective from the date listed at the top of this page. Continued use of the App after the effective date constitutes acceptance of the revised policy.
For any questions, concerns, or to exercise your privacy rights:
We aim to respond to all legitimate requests within 30 days.