Penny ValueYour coins, your data
Summary
- To identify a coin, the app sends cropped coin photos, close-ups and, when you use holder mode, a crop of the holder and label to our server for AI identification. Our server does not save these photos. The app can save photos on your phone; AI providers handle requests under their own retention policies.
- You do not need to sign up. We use an anonymous app identity and do not ask for your name, email or phone number.
- Your collection is stored on your phone and backed up by Android's own backup to your Google account, if you have backup turned on.
- Free users may see ads from Google AdMob. Purchases are handled by Google Play and RevenueCat.
- Versions with measurement choices let you opt into usage analytics and marketing measurement separately. Both choices are optional and off until you choose them.
Coin photos and AI identification
When you scan a coin, the app crops the photos around the coin or the selected close-up area, removes location and other photo metadata (EXIF), and uploads the crops to our server (Cloudflare Workers, operated by Dahmani Limited). Holder mode also includes a wider crop of the holder and its label; some surrounding background can be included. Our server forwards them to an AI model through OpenRouter (currently OpenAI's GPT-6 Luna), which reads the coin's design, date and mint mark. The AI returns a description of the coin, and the app then looks up values in its own built-in catalogue on your phone.
- Our server processes the photos in memory and does not save them once it has answered.
- We require OpenRouter routing to exclude providers that use your data for training, and OpenRouter does not store prompts by default. This does not guarantee zero retention: AI providers may retain requests for purposes such as abuse prevention under their own policies.
- Please photograph coins only. Do not include people, documents or other personal items in the frame.
Corrections and reports
If you correct a result or report a problem, the app sends us what you changed (for example the date or mint mark), the coin it concerns and any comment you write, linked to your random install ID. We use this to measure and improve accuracy and keep it for up to 180 days. We remove email addresses and phone numbers from comments. Photos attached to a report are not stored.
Our servers do not retain your coin photos. Scan history and collection photos can be saved locally on your phone. If we ever offer an opt-in way to retain submitted photos to improve recognition, it will be off by default and we will update this policy first.
App identifiers and usage
The app creates a random install ID and, in versions using Firebase Authentication, an anonymous app identity to count scans, verify subscriptions and prevent abuse. Your country, inferred from your internet connection, sets your daily free-scan allowance. Firebase Remote Config supplies app settings, and App Check verifies app integrity. These operational functions do not depend on optional analytics consent.
If you enable Usage analytics, Google Firebase Analytics and Crashlytics receive app interactions, screen names, diagnostic information and a random app-instance identifier. RevenueCat can associate subscription lifecycle events with that identifier and send them to Firebase Analytics. Google Analytics associates these server events with the same app instance and its consent settings. We use this information to understand feature usage, subscription performance and crashes. We do not include coin photos, your written reports, or contact details in analytics events.
You can change optional measurement choices in Settings. Turning usage analytics off stops future optional analytics and crash-report collection and removes the Firebase app-instance identifier from our RevenueCat integration. It does not automatically erase information already received by service providers; contact us if you want to request deletion.
Purchases (Google Play and RevenueCat)
Subscriptions are sold through Google Play. We use RevenueCat, Inc. to check whether you have an active subscription. RevenueCat receives the purchase token from Google Play, an anonymous app user ID and basic device information. We never see your payment card details. See RevenueCat's privacy policy.
Advertising (Google AdMob)
Free users may see ads from Google AdMob:
- optional rewarded ads you choose to watch, for example to get extra scans;
- labelled ad cards in some lists;
- occasional full-screen ads at natural breaks, never before a scan result.
To serve and measure ads, Google may collect your device's advertising ID, IP address, device and app information, and ad interactions. In the EEA, the UK and Switzerland, and in US states that require it, we ask for your choices through Google's consent form. You can change them at any time in Settings → Ad privacy choices. Pro subscribers and users in a free trial see no ads. See how Google uses information from apps that use its services.
Marketing measurement (Singular, Google and Meta)
If you enable Marketing measurement, we use Singular and Google to understand which advertising campaigns bring people to Penny Value and how those campaigns lead to app activity and subscriptions. Depending on your ad privacy choices, this can include advertising and app identifiers, IP address, device and app information, install/referral information, selected app events and subscription events. Our app waits for your marketing choice and applicable advertising-consent result before initializing Singular.
Where your choices allow partner sharing, the app supplies Singular's device identifier to RevenueCat so RevenueCat can send subscription events to Singular. Campaign partners may receive allowed attribution events through configured Singular integrations. Your optional measurement choices also apply if you use Pro. Turning marketing measurement off stops Singular tracking in the app and removes its device identifier from the RevenueCat integration. See Singular's privacy policy and Google's privacy policy.
From version 1.1.2, a new marketing measurement choice also names Meta (Facebook). If you enable that choice and your advertising privacy choices permit sharing, the Meta App Events SDK receives app installs, app activations and selected feature events, together with advertising identifiers, IP address and device/app information, to measure and improve our campaigns. Older marketing choices do not enable Meta automatically. We do not send coin photos, written reports or contact details to Meta, and automatic purchase logging is disabled. Turning marketing measurement off stops new app events to Meta. Previously received data is subject to Meta’s privacy policy; contact us for deletion requests.
App reviews
After a completed coin task, we may request Google Play's native review sheet. Google controls whether the sheet appears and processes any rating or review you choose to submit. The app does not receive your rating or confirmation that you submitted a review. Requests are optional and limited in frequency.
Notifications
If you allow notifications, the app sends reminders scheduled on your phone, such as a reminder before a free trial ends or a weekly penny tip. They are not based on tracking.
What we do not do
- We do not sell personal information.
- We do not access your contacts or request GPS or precise location. Country and approximate location may be inferred from your IP address for the purposes described above. Photo access is limited to pictures you capture or choose to import.
- We do not use your photos to identify people.
Children
Penny Value is not directed at children under 13, and we do not knowingly collect personal information from children.
Data retention and deletion
We keep no coin photos on our servers. Daily quota records are eligible for cleanup after 8 days; monthly subscription quota records are kept for roughly three months. Cached scan results expire after 24 hours. Cleanup occurs when the relevant device ledger is accessed, so inactive records can remain longer. Corrections and reports are kept for up to 180 days. Anonymous identity and subscription records support ongoing access and abuse prevention; Google Play and RevenueCat also retain billing records under their policies. Analytics and attribution providers retain information under their configured retention settings and policies.
Your collection and settings stay on your phone, and in your Android backup, until you delete them or uninstall the app. You can delete local app data and request deletion of server records in Settings → Delete my data or by email; see Delete your data. Deleting app data does not cancel a Google Play subscription.
Security
Traffic to our services uses encrypted connections (HTTPS). Our private AI and backend credentials are held on our server, not in the app.
Changes
If this policy changes, we will update the effective date above and, for material changes, tell you in the app.
Contact
Dahmani Limited · support@dahmani.me · dahmani.me