Privacy Policy

1. Who we are and what this policy covers

1.1 Obverse LLC, a Washington limited liability company ("Obverse," "we," "us"), is responsible for your information under this policy. Our contact details are in section 18.

1.2 This policy covers your own account and what you put in the Service. If you're a member of a dealer's workspace, or a customer of a dealer who uses Obverse, section 15 explains how it works for the dealer's business records.

1.3 Obverse isn't currently offered to people in the European Union, the European Economic Area, the United Kingdom or Switzerland. We'll update this policy before it is.

2. In short

• We collect what you give us to run your account and your collection, plus a small amount of technical information to keep the Service working and secure.
• We don't sell your information, share it for advertising, or track you across other apps and websites. The app contains no advertising, no analytics and no tracking code.
• Retail values are fetched live when you ask and are never stored.
• You can export your items from Profile, and delete your account and everything in your personal collection in the app at any time.
• We give the same core privacy rights to everyone, wherever you live.

3. What we collect

3.1 Your account. Your email address, your first name and, if you give it, your last name. When you sign up or change your password, it passes through our servers encrypted on its way to our sign-in provider, which stores it only in a scrambled (hashed) form that can't be read back. We don't store or log your password. You also confirm that you're 16 or older.

3.2 Two-step sign-in. If you turn it on, our sign-in provider holds the secret your authenticator app uses, and we keep your recovery codes only in a scrambled form, with when each was made and used.

3.3 Your collection. The items you record and what you write about them: country, denomination, year, series or mintmark, serial number, grade, certification service and number, notes, the collections and wishlists you make, and anything else you choose to enter, such as what you paid and when you got an item.

3.4 Your photographs. The pictures you take or choose for an item. The app resizes each one on your phone and saves a new copy before sending it, so the location and camera details a phone stores inside a photo are not sent to us.

3.5 Value lookups. When you ask for values, we record that lookups were made, how many, when, and for which account, so we can apply your plan's monthly limit and reconcile our own usage. We don't keep the values themselves.

3.6 Purchases. If you subscribe, Apple or Google handles payment. We receive information about your subscription, such as the plan, its status, the country of purchase, and when it started, renews or ends. We never receive your card details.

3.7 Dealer workspaces. If you create or join a workspace: your role, and what you and your team add, such as company details, inventory, purchases, sales, consignments and contacts. If a workspace invites someone, we store that person's email address and the invitation's status, and send them the invitation.

3.8 Messages to us. What you write when you contact support, and our replies.

3.9 Protection against abuse. When someone signs up, asks to reset a password or uses a recovery code, we record a scrambled (hashed) form of the email address and of the network address the request came from, so we can limit repeated attempts. These records aren't linked to an account, are used only to count attempts in the last 24 hours, and are deleted after that.

3.10 Ordinary server records. Our hosting provider keeps short-lived logs of requests, such as the time, the address requested, the network address and the type of browser or device it came from, to run and secure the Service.

3.11 On your phone only. Your sign-in is kept in your phone's secure storage (the iOS Keychain or Android Keystore), and your light or dark choice is kept on the phone. Neither is sent to us as data.

4. What we don't collect

4.1 We don't collect your location, your contacts or your device's advertising identifier. The app contains no advertising, no analytics and no tracking code, and we don't follow you across other apps or websites.

4.2 The app uses your camera and photo library only when you choose to add a photograph, and only for that photograph.

4.3 We don't collect information about your health, we don't use photographs to identify people, and we don't make decisions about you by automated means that have legal or similarly significant effects.

5. How we use it

5.1 We use your information only to:

• create and run your account, keep your collection and photographs, and show them on your devices;
• fetch catalog information and values when you ask, and apply your plan's limits;
• provide subscriptions, and keep the records tax and accounting law requires;
• send the email a service like this needs: confirming your address, resetting your password, telling you if someone tries to sign up with your address, two-step and security alerts, workspace invitations, and subscription messages;
• keep the Service and your account secure, prevent abuse and fix problems;
• answer you when you write to us;
• comply with the law, enforce our Terms, and establish or defend legal claims.

5.2 What we don't do. We don't sell your information, share it for advertising, or use your photographs or notes for anything other than providing the Service to you and the people you choose. We don't use your content to train artificial intelligence models. We don't send marketing email without asking you first, and every marketing email will have a way to unsubscribe.

6. Who processes it for us, and other sharing

6.1 A small number of companies run parts of the Service for us, under contracts that limit them to doing so:

• Supabase: our database, sign-in and photograph storage (United States).
• Vercel: hosts our website and the servers the app talks to.
• Resend: delivers the account emails described above.

6.2 Apple and Google distribute the app and handle payment when you subscribe. They act under their own privacy policies.

6.3 Catalog and value providers. Catalog information and values come from licensed data providers. Our servers request them using a catalog reference number only. Your personal information is never sent to them.

6.4 Inside a workspace, the workspace's members can see the workspace's records, according to the roles the workspace owner sets.

6.5 Our own access. Obverse's operator can access account and workspace data only when needed to provide support you ask for, keep the Service secure, fix problems, or comply with the law.

6.6 Legal and business reasons. We may disclose information when the law requires it, or when needed to protect the rights, property and safety of our users, the public or Obverse. If Obverse is ever sold or merged, this policy will continue to apply to the information we hold, and you'll be told before it's handled differently.

7. Where your information is processed

Obverse is based in the United States, and our database is in the United States. Our providers may process information in other countries where they operate. If you live outside the United States, your information is transferred to and stored in the United States, where courts and authorities may be able to access it under US law.

8. Cookies and signals

8.1 The website uses only the cookies needed to keep you signed in and secure. It uses no advertising, analytics or tracking cookies, and loads no third-party scripts or fonts. The app doesn't use cookies.

8.2 Because we don't sell or share your information or track you across sites, there's nothing for a Do Not Track or Global Privacy Control signal to turn off. If that ever changes, we'll treat a Global Privacy Control signal as a request to opt out.

9. Emails

Account and security emails are part of the Service, so you can't turn them off while you have an account.

10. How long we keep it

• Account, collection, wishlists and photographs: Until you delete them or your account. Then deleted at once from the live system, and from backups when they expire within 30 days.
• Two-step data and recovery codes: Until you turn two-step off or delete your account.
• Value lookup records: 2 years, for billing and audit. When you delete your account, they're no longer linked to you.
• Purchase records: As long as tax and accounting law requires, usually up to 7 years.
• Abuse prevention records (hashed): 24 hours.
• Hosting provider request logs: Less than 30 days, kept by the provider.
• Email delivery records: 30 days, kept by our email provider.
• Support messages: 2 years after the conversation ends.
• Workspace records: As the dealer decides. After a workspace closes, deleted within 60 days (Terms section 11.12).
• Workspace invitations: Kept with the workspace's records. Invitations that expire without being accepted are deleted 90 days after they expire.

We may keep information longer if the law requires it or to resolve a dispute.

11. Deleting your account and getting a copy

11.1 To delete your account in the app, open Profile and choose Delete account. On the website, open Your account and choose Delete your account. This permanently deletes your account, every item with its photographs and notes, and every collection and wishlist, straight away. You can't undo it, and we can't restore it for you. Copies in our providers' backups expire on their own within 30 days.

11.2 If you're the only owner of a dealer workspace that has other members, you'll need to make someone else an owner, or remove the other members, first. Records that belong to a workspace stay with that workspace.

11.3 Deleting your account doesn't cancel a subscription. Cancel it in your App Store or Google Play account.

11.4 Removing a photograph from an item deletes it straight away.

11.5 You can also ask us to delete your account by writing to support@obverseapp.com from the address on the account.

11.6 To get a copy, open Profile and choose Export to download your items as a spreadsheet file. For a copy of everything else we hold about you, including your photographs, write to support@obverseapp.com.

12. Your rights

12.1 Everyone. Wherever you live, you can:

• see and correct your name and every item in the Service at any time;
• get a copy of your information, in a commonly used format;
• delete your information, as described in section 11;
• withdraw any consent you've given, at any time, without affecting what we did before;
• ask us questions about how we handle it.

We won't treat you differently for using your rights.

12.2 United States. Some state laws, such as the California Consumer Privacy Act, give their residents rights to know, access, correct, delete and port their information, and to opt out of its sale, sharing for targeted advertising, or use for profiling. We honor those rights for everyone. In the last 12 months we collected these categories, from you and your devices, for the purposes in section 5: identifiers (name, email, network address); customer records (account details); commercial information (items you record and what you paid, and purchase records); internet activity (server request logs); photographs (images of items); and sensitive information limited to your account login, which we use only to sign you in. We disclose these only to the service providers in section 6, for those purposes. We don't sell or share personal information, including that of anyone under 16, and we don't use sensitive information to infer anything about you. If you're in a state that gives you a right to appeal our decision on a request, reply to our answer and ask us to reconsider; if you're still not satisfied, you can contact your state attorney general.

12.3 Canada. You can access and correct your information and withdraw consent as described above. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information. Our person in charge of protecting personal information is named in section 18.

12.4 Australia. You can access and correct your information as described above. If you have a complaint, write to us first. If you're not satisfied with our answer, you can contact the Office of the Australian Information Commissioner.

12.5 How to make a request. Write to support@obverseapp.com from the email on your account. We may need to confirm it's you. We answer within 30 days; if the law allows more time and we need it, we'll tell you why within those 30 days. If we decline a request, we'll explain why, and you can ask us to reconsider by replying. You can use an authorized agent if your local law allows it; we'll ask for proof of their authority.

13. Security

13.1 Information travels between the app, the website and our servers encrypted. Your photographs are stored privately and shown to you through links that expire within minutes. The app never reaches our database directly: every request goes through our servers and is checked against your account. Our database enforces access rules on every record, and you can protect your account with two-step sign-in.

13.2 No system is perfectly secure. If a breach affects your information, we'll tell you, and the authorities that need to know, as the law where you live requires.

14. Children

14.1 Obverse isn't for children. You must be 16 or older to use it, wherever you live, and you confirm your age when you sign up. If you're 16 or 17, a parent or guardian must agree to our Terms for you.

14.2 We don't knowingly collect information from anyone under 16. If we learn that an account belongs to someone under 16, we delete the account and its information. If you believe someone under 16 is using Obverse, write to support@obverseapp.com.

15. Dealers, their staff and their customers

15.1 Obverse also serves dealers, whose workspaces hold business records such as inventory, purchases, consignments and customer contacts. For those records, the dealer decides what's kept and why, and Obverse processes them on the dealer's behalf as its service provider and processor. The dealer's own privacy notice applies to them.

15.2 We may create aggregated, de-identified statistics from workspace records, such as how prices for a type and grade of item have moved. These statistics never identify a dealer, a dealer's customers or any single transaction.

15.3 If you're a dealer's customer or consignor and want to see, correct or delete information a dealer holds about you, contact that dealer. If you contact us, we'll pass your request to the dealer.

15.4 If you use Obverse as a member of a dealer's workspace, this policy covers your own account. Deleting your account removes you from the workspace but leaves the business's records with the business.

16. Washington health data

We don't collect consumer health data as Washington's My Health My Data Act defines it.

17. Changes to this policy

When we change this policy, we'll post the new version here with its effective date. If a change matters to how your information is used, we'll tell you in the app or by email before it takes effect, and we'll ask for your consent where the law requires it.

18. Contact and privacy officer

Obverse LLC, c/o Northwest Registered Agent LLC, 522 W Riverside Ave, Ste N, Spokane, WA 99201-0581, USA. Phone (425) 940-4999. Email support@obverseapp.com.

Person in charge of protecting personal information (Privacy Officer): the Owner of Obverse LLC, at support@obverseapp.com.