Privacy Policy
Last updated: March 28, 2026
BullionDex ("we," "our," or "us") operates the BullionDex mobile application and associated services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.
1. Information We Collect
Account Information: When you create an account, we collect your email address, display name, and an encrypted password hash. We never store plaintext passwords.
Inventory Data: Coin and bullion inventory information you enter, including denominations, grades, certification numbers, purchase prices, and photos. This data is stored on our servers to enable cross-device sync.
Camera Images: When you use the AI identification feature, photos are transmitted to our server for processing and are retained to fulfill identification requests. Images are associated with your account for identification history.
Usage Data: We collect basic usage analytics including feature usage, error logs, and performance data to improve the application.
Payment Information: Subscription payments are processed by Stripe. We do not store your credit card numbers or banking details. Stripe's privacy policy governs payment data handling.
2. How We Use Your Information
- To provide, maintain, and improve our services
- To process AI coin identification requests
- To sync your inventory data across your devices
- To process subscription payments and token purchases
- To provide eBay market price data and listing services
- To send service-related communications (account verification, billing notices)
- To detect and prevent fraud or abuse
3. Third-Party Services
We use the following third-party services that may receive your data:
- Google Gemini AI: Coin images are sent to Google's Gemini API for identification. Subject to Google's Privacy Policy.
- Anthropic Claude: Text data may be sent to Claude for search query generation and filtering. Subject to Anthropic's Privacy Policy.
- Stripe: Payment processing. Subject to Stripe's Privacy Policy.
- eBay: If you connect your eBay account, we access your seller policies and can create listings on your behalf. Subject to eBay's Privacy Notice.
4. eBay Account Linking
When you connect your eBay seller account to BullionDex:
- We store an OAuth refresh token to maintain your connection (encrypted at rest)
- We access your eBay business policies (shipping, payment, return) to populate listing forms
- We create inventory items and listings on eBay on your behalf when you choose to list a coin
- We upload your coin photos to eBay's image hosting service
- You can disconnect your eBay account at any time from the app settings, which deletes all stored eBay credentials
5. Data Storage and Security
Your data is stored on servers operated by us. All connections use TLS encryption. Passwords are hashed using industry-standard algorithms. We implement reasonable security measures to protect your personal information, but no method of electronic transmission or storage is 100% secure.
6. Data Retention
We retain your account data for as long as your account is active. Identification request images are retained for 90 days after processing. You may request deletion of your account and all associated data at any time by contacting us.
7. Your Rights
- Access: You can access all your inventory and identification data through the app
- Export: You can export your inventory data as CSV
- Deletion: You can request complete account deletion by contacting [email protected]
- Disconnect: You can disconnect third-party accounts (eBay) at any time
8. Children's Privacy
BullionDex is not intended for children under 13. We do not knowingly collect personal information from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Your continued use of BullionDex after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or your data, contact us at: