Privacy Policy
Effective April 3, 2026
This privacy policy applies to the Circa mobile application ("Application") for iOS, developed by Stanislav Perevozchikov ("Developer," "we," "us," or "our"). The Application is provided as a freemium service.
We are committed to protecting your privacy. This policy explains what information we collect, how we use it, and the rights you have regarding your data.
Information We Collect
Information You Provide
- Photos and Images. When you use the Application to identify an item, you capture or select a photo. Photos are stored locally on your device. When you request an identification or appraisal, the image is compressed and temporarily transmitted to our servers for AI processing (described below). We do not store your photos on our servers.
- Collection Data. Items you save to your collection (names, descriptions, notes, tags, grading) are stored locally on your device using Apple's SwiftData framework. This data is not transmitted to or stored on our servers.
- Chat Messages. Conversations with the "Expert on Call" feature are stored locally on your device. Messages are transmitted to AI providers for generating responses but are not retained on our servers after the response is delivered.
Information Collected Automatically
- Anonymous Identifier. When you first open the Application, an anonymous user ID is created automatically. This identifier is not linked to your name, email, or any personal information. It is used solely to manage your session and usage limits.
- Device Locale and Region. We read your device's locale setting (e.g., country and language) to display prices in your local currency. We do not collect your GPS location or precise geolocation.
- Scan Logs. When you identify an item, we log the anonymous user ID, a cryptographic hash of the image (not the image itself), the AI model used, processing cost, and a timestamp. These logs help us monitor service health and costs.
- Identification Cache. AI identification results are cached on our servers using the image hash as a key. The image itself is never stored — only the hash and the text result.
- Pricing Cache. Product pricing search results are cached on our servers for 24 hours, then automatically deleted.
Information We Do NOT Collect
- No personal identity information. We do not collect your name, email address, phone number, or any account credentials. The Application uses anonymous authentication only.
- No location data. We do not access GPS, Wi-Fi, or Bluetooth-based location services.
- No advertising identifiers. We do not collect the Apple Identifier for Advertisers (IDFA) or any other advertising identifier.
- No tracking or analytics. We do not use analytics SDKs, tracking pixels, or behavioral profiling tools.
- No cookies. The Application is a native iOS app and does not use cookies.
How We Use Your Information
- Item Identification. Transmitting your photos to AI services to identify and appraise antiques and collectibles.
- Pricing. Searching for comparable market prices to provide you with estimated valuations.
- Currency Conversion. Detecting your region to display prices in your preferred currency.
- Service Operation. Maintaining scan logs to monitor system health, manage costs, and improve the identification pipeline.
- Caching. Storing identification and pricing results to deliver faster responses for previously analyzed items.
We do not use your information for advertising, marketing, profiling, or selling to third parties.
Third-Party Services
The Application relies on the following third-party services. Each receives only the minimum data necessary to perform its function:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Backend infrastructure, anonymous authentication, database | Anonymous user ID, image hashes, scan logs, cached results |
| RevenueCat | Subscription and purchase management | Purchase receipts, subscription status (handled by Apple — we do not receive payment details) |
| Google Gemini API | AI-powered item identification, appraisal, and chat | Compressed images, text prompts, chat messages |
| OpenAI | AI-powered item identification and chat (fallback) | Compressed images, text prompts, chat messages |
| Serper.dev | Market pricing search | Search keywords (item descriptions), region code |
We encourage you to review each provider's privacy policy: Supabase, RevenueCat, Google AI, OpenAI, Serper.dev.
AI Image Processing
When you identify an item, your photo is compressed to a maximum of 768 pixels and encoded as a JPEG at reduced quality before being transmitted to our servers via HTTPS. Our server forwards the image to one or more AI providers (Google Gemini or OpenAI) for analysis. The image is used solely to generate the identification result and is not stored on our servers or, to the best of our knowledge, retained by AI providers beyond the duration of the API request.
Data Retention
| Data | Location | Retention |
|---|---|---|
| Photos and collection items | Your device (local) | Until you delete them |
| Chat history | Your device (local) | Until you delete them |
| Scan logs | Our servers | Indefinite (anonymized) |
| Identification cache | Our servers | Indefinite (no images stored) |
| Pricing cache | Our servers | 24 hours (auto-expired) |
| Subscription status | RevenueCat | Per RevenueCat's policy |
You can delete all local data (photos, collection items, chat history) by deleting the Application from your device. To request deletion of server-side data associated with your anonymous identifier, contact us at the email below.
Your Data Rights
For All Users
- Access the data we hold about you.
- Request deletion of your data from our servers.
- Stop all data collection by uninstalling the Application.
For European Economic Area (EEA) Residents
Under the General Data Protection Regulation (GDPR), you additionally have the right to:
- Rectification — request correction of inaccurate data.
- Portability — receive your data in a structured, machine-readable format.
- Restriction — request that we limit processing of your data.
- Objection — object to processing based on legitimate interests.
- Lodge a complaint with your local data protection authority.
Legal basis for processing: We process your data based on legitimate interest (providing the Application's core functionality) and, where applicable, your consent (e.g., granting camera or photo library access).
For California Residents
Under the California Consumer Privacy Act (CCPA), you have the right to:
- Know what personal information we collect and how it is used.
- Delete your personal information.
- Opt out of the sale of personal information. We do not sell your personal information.
- Non-discrimination — we will not discriminate against you for exercising your rights.
To exercise any of these rights, contact us at the email address below.
International Data Transfers
The Application's servers are hosted in the United States via Supabase. AI processing may occur in the United States or other countries where our AI providers operate. By using the Application, you acknowledge that your data (anonymous identifier, image hashes, compressed images during processing) may be transferred to and processed in the United States, which may not provide the same level of data protection as your home country.
Children's Privacy
The Application is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. Since the Application uses anonymous authentication and collects no personal identity information, we have no way to determine a user's age. If you believe a child under 13 has provided personal information through the Application, please contact us and we will take steps to delete such information.
Security
We use commercially reasonable measures to protect the information processed by the Application, including:
- HTTPS encryption for all data in transit.
- Anonymous authentication (no passwords or credentials to compromise).
- Minimal data collection by design — we cannot leak what we do not store.
No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically. Your continued use of the Application after changes are posted constitutes your acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:
Stanislav Perevozchikov