Privacy policy
Draft. This policy is not in effect yet. It describes the Pocketful app as it is being built and will be checked again before the app is released.
This policy explains what the Pocketful app keeps on your iPhone or iPad, what it sends to Pocketful's server and to OpenAI, how long it is kept, and how to delete it. Pocketful is made by Lucent Enterprises Ltd. ("we"), the seller of Pocketful on the App Store.
The short version
- Pocketful sends the photos of your coin only after you agree, and only when you tap Identify.
- The photos go to Pocketful's server and then to OpenAI, which identifies the coin. Pocketful's server does not keep them. OpenAI may keep them for up to 30 days.
- You do not give a name or an email. Pocketful uses a random guest ID to count your scans.
- Your saved coins and their photos stay on your iPhone.
- The app has no ads, no analytics and no tracking. We do not sell your data.
- You can delete your data in Settings → Delete my data in the app.
What stays on your iPhone
- Your collection. The coins you save: what each coin is, the date you saved it, how many you have, your notes, and any correction you made.
- Your coin photos. The photos of the coins you save, and the round coin picture Pocketful cuts out of each one. Pocketful finds the coin in the photo on your iPhone. Photos of a scan you do not save are not kept.
- Location in photos. Before a photo is saved or sent, Pocketful draws it again as a new picture. The new picture does not carry the photo's location or camera details.
- Your guest ID, in the iPhone's Keychain, on this device only.
- Your free-scan count (how many of your 3 free identifications you used), in the iPhone's Keychain. It can stay after you delete the app.
- Your choices: whether you agreed to send photos, and whether you want a reminder before a free trial ends. The reminder is a notification that your iPhone schedules. Pocketful does not use push notifications.
Pocketful uses the camera only to photograph your coin. When you choose a photo from your library, iOS gives Pocketful only that photo.
Data on your iPhone may be included in your iCloud or computer backups, as set in your iOS settings. Pocketful does not sync your collection with iCloud.
What goes to Pocketful's server
Pocketful's server runs on Cloudflare. When you tap Identify, it receives:
- The photos of your coin: the front, and the back if you took it, as JPEG pictures of at most 1.5 MB. The server sends them to OpenAI and sends the answer back to your iPhone. It does not store the photos or the answer.
- Your guest ID. The server makes a random ID the first time you identify a coin. It does not contain your name, email or a device identifier.
The server keeps only this:
| What | Why |
|---|---|
| For each guest ID: the times of your identifications in the last 10 minutes, and how many you made today | Fair-use limits (10 in 10 minutes, 30 a day) |
| How many identifications all users made today (one number) | A daily limit on cost |
| One short log line per identification: whether it worked, how many photos, how long it took, and its size in tokens. Never your photos, your guest ID or your internet (IP) address | To find problems and measure speed and cost |
When you buy Pocketful Pro or restore it, the app sends Apple's signed receipt for that purchase to Pocketful's server with your guest ID, so the server allows unlimited scans. The server keeps which plan you have, when it ends, and whether it was refunded, linked to your guest ID, until 30 days after the plan ends. It never receives your Apple Account, your payment details or the price you paid.
OpenAI
OpenAI provides the AI that identifies your coin. It receives the photos of your coin from Pocketful's server, and nothing else about you: not your guest ID and not your iPhone's internet (IP) address. Under OpenAI's API terms, OpenAI may keep the photos and its answer for up to 30 days, then deletes them, unless the law requires longer. See OpenAI: your data.
Other companies
- Cloudflare hosts Pocketful's server and this website. Your request passes through Cloudflare's network, which sees your internet (IP) address to deliver it. Pocketful's server does not log it.
- Apple handles payments, subscriptions and refunds. Apple's privacy policy applies to your Apple Account and payments. We never see your payment details.
The app has no advertising, analytics or crash-reporting SDK. This website has no cookies, no analytics and no third-party scripts.
How long we keep it
| Data | Kept |
|---|---|
| Your collection, coin photos and choices | On your iPhone, until you delete them or the app |
| Free-scan count | In your iPhone's Keychain. It can stay after you delete the app |
| Coin photos and answers sent for identification | Not kept by Pocketful's server. OpenAI: up to 30 days |
| Identification counts for your guest ID | On the server, until 2 days after your last identification, or until you use Delete my data |
| Server log lines | Up to 7 days |
Why we use your data
- With your agreement (consent): photos are sent only after you tap Continue on the screen "Before your photos leave this iPhone". If you tap Not now, nothing is sent.
- To give you the service you asked for (contract): identifying the coins you photograph, your free scans and your plan.
- To keep Pocketful working and fair (legitimate interests): fair-use limits, the daily cost limit and server logs.
Delete your data
Open Settings → Delete my data in the app. This deletes, on your iPhone: your saved coins, their photos, your guest ID and your agreement to send photos. It also asks Pocketful's server to delete the identification counts for your guest ID. If your iPhone is offline, the server deletes them on its own within 2 days. The next time you identify a coin, Pocketful asks again.
To stop sending photos without deleting anything, turn off Share photos to identify coins in Settings.
A few things stay:
- Your free-scan count, so the free scans are not reset.
- A reminder you asked for before your running free trial ends.
- OpenAI's copies are deleted within 30 days.
To delete one coin, open it in your collection and tap Delete; its photos are deleted too. Deleting your data does not cancel a subscription. To manage it, open Settings on your iPhone, tap your name, then tap Subscriptions.
Your rights
Depending on where you live, you can ask to see, correct, delete or move your data, withdraw your agreement, or object to how we use it. Most of your data is on your iPhone, where you control it. Because Pocketful has no name or email for you, we may need your guest ID to find data on the server. Write to us at contact@lucententerprises.com. You can also complain to your data protection authority.
Pocketful does not respond to "Do Not Track" signals, because it does not track you across apps or websites.
Children
Pocketful is not directed to children under 13, and we do not knowingly collect data from them. If you think a child has used Pocketful, write to us and we will help delete the data.
Where data is processed
Lucent Enterprises Ltd. is a British Columbia company in Canada. Pocketful's server runs on Cloudflare's global network. OpenAI processes data in the United States. Your data may be processed outside your country.
Changes
If this policy changes, we will update it here and change the date at the top. For important changes, such as a new company that receives your photos, we will also tell you in the app before anything new is sent.
Contact
Lucent Enterprises Ltd., 329 Howe St, Unit #800, Vancouver, BC V6C 3N2, Canada. Email: contact@lucententerprises.com. This address is also the contact for privacy questions; our Privacy Officer is Nicholas Rempel.