Privacy Policy

1. Information We Collect

Information You Provide

• Email address — used for account creation, magic-link sign-in, and price alert notifications.
• Contact form submissions — your name, email, reason for contact, and message text when you use the Contact Us form.
• Portfolio data — metal type, weight, purchase price, purchase date, dealer name, and notes you voluntarily enter to track your holdings.
• Price alerts — metal, target price, direction, and notification preferences you configure.
• Predictions — your daily gold price predictions (up/down guesses).

Information Collected Automatically

• Device identifier — a randomly generated, anonymous device ID stored locally on your device, used to associate predictions with your device when you are not signed in.
• Push notification token — an Expo push token used solely to deliver price alert notifications to your device.
• Usage data — basic server logs (IP address, request timestamps) generated by our API infrastructure for security and operational purposes.

Information We Do NOT Collect

• We do not collect your real name (unless you provide it via the contact form).
• We do not collect your location, contacts, photos, or any other device data.
• We do not use advertising trackers or third-party analytics SDKs.
• We do not collect financial account numbers, bank details, or payment information.

2. How We Use Your Information

• Authentication — to verify your identity via magic-link codes sent to your email.
• Price alerts — to send push notifications and/or email notifications when metals reach your target prices.
• Portfolio tracking — to calculate and display the current value and gain/loss of your holdings.
• Predictions — to track your prediction history, streaks, and accuracy.
• Customer support — to respond to your contact form inquiries.
• Service improvement — to monitor uptime, fix bugs, and improve the app experience.

3. Data Storage and Security

Your data is stored on secure servers hosted by Railway with encrypted database connections. Authentication tokens are signed with industry-standard JWT (JSON Web Tokens) and transmitted over HTTPS.

Locally on your device, alert configurations and preferences are stored using AsyncStorage and SecureStore. We implement rate limiting, input validation, and CORS restrictions to protect against unauthorized access.

While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties, except:

• Email delivery — we use SMTP email services to send magic-link codes and alert notifications.
• Push notifications — we use Expo's push notification service to deliver alerts to your device.
• Legal compliance — we may disclose information if required by law or to protect our legal rights.

5. Data Retention

We retain your account data for as long as your account is active. If you wish to delete your account and associated data, please contact us at info@goldlensapp.com and we will process your request within 30 days.

Server logs are retained for up to 90 days for security and debugging purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and personal data.
• Portability — request your data in a portable format.
• Opt out — disable push notifications through your device settings, or unsubscribe from email alerts by toggling them off in the app.

To exercise any of these rights, contact us at info@goldlensapp.com.

7. Children's Privacy

GoldLens is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app and updating the "Last updated" date above. Your continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us