Privacy Policy

1. Overview

This Privacy Policy applies to the Stamp Identifier iOS app, related AI identification services, Pro purchase features, and public support pages.

Stamp Identifier helps identify postage stamps from photos you select or capture. Results may include whether the image appears to be a postage stamp, likely name, country, year, series, denomination, condition, estimated value range, physical details, historical context, rarity, catalog number hints, themes, confidence, and identification notes.

Stamp Identifier does not create user accounts and does not operate a cloud history database for your saved scans. The app stores scan history and settings locally on your device. When you start an AI identification, selected image data and request information are sent to Stamp Identifier backend services and Google Gemini so the result can be generated.

2. Short Summary

3. Information Stored Locally on Your Device

Stamp Identifier stores app data locally so the app can work without an account. Local data can include:

• Onboarding status, onboarding goal, onboarding pain points, and onboarding experience answer.
• Your selected estimate currency, such as USD, EUR, GBP, CAD, AUD, JPY, or CHF.
• A randomly generated device ID used for daily scan limits and RevenueCat purchase identity.
• The backend URL setting if you change it in Advanced settings.
• Saved scan history, including scan ID, creation date, local front image path, optional local back image path, and generated identification fields.
• Saved front and optional back stamp photos stored in app storage for history records.
• Subscription status and purchase management information returned by RevenueCat.

If you uninstall Stamp Identifier, iOS normally removes the app's local data. Device backups controlled by Apple, your device, or your device settings may include local app data.

4. Camera and Photo Library Access

Stamp Identifier may ask for camera or photo library access so you can capture or choose stamp photos for identification. The app uses camera and photo access only for scans you start.

• Stamp photos are sent for AI analysis only when you choose or capture an image and tap to identify the stamp.
• You can scan a front image and optionally add a back image for more context.
• The app may use the edited image when you crop it, otherwise it uses the original image selected through the iOS picker.
• Images are downscaled and encoded before being sent to the backend.
• Stamp Identifier does not continuously monitor your camera or photo library.
• You can change camera and photo permissions in iOS Settings.

5. Information Sent for AI Identification

When you start an identification, Stamp Identifier sends the information needed for that scan to the Stamp Identifier backend over HTTPS. This can include:

• The front stamp photo as base64-encoded JPEG image data.
• The optional back stamp photo as base64-encoded JPEG image data.
• Your selected currency for value estimates.
• The app-generated device ID in the X-Device-Id request header.
• An optional app token header if configured by the backend.
• Technical request data needed to transmit, route, secure, rate-limit, and debug the request.

Stamp Identifier asks the AI provider to return compact structured data with stamp identification, condition, value range, physical details, history, rarity, themes, confidence, and notes.

6. How AI Requests Travel

1. You choose or capture a front stamp photo and optionally add a back photo.
2. The app sends the image data, selected currency, and device ID to the Stamp Identifier Cloudflare Worker endpoint /identify.
3. The Worker validates the request, image size, image format, currency, optional app token, and daily scan limits.
4. The Worker sends the prompt and image data to Google Gemini API using the configured Gemini model.
5. Google Gemini returns generated structured output to the Worker.
6. The Worker normalizes the result, adds the selected currency when needed, and returns the result plus remaining scan count to the app.
7. If the result is saved, the app stores the photos and generated scan record locally on your device.

7. Backend Processing, Rate Limits, and Logs

The Stamp Identifier backend is hosted on Cloudflare Workers. It receives scan requests, validates inputs, applies daily scan limits, builds Gemini prompts, forwards image data and prompts to Google Gemini, and returns generated results.

The Worker uses Cloudflare KV to store daily rate-limit counters. Counters can include a key derived from the app-generated device ID and a separate key derived from a short hash of the connecting IP address. These counters are used to limit abuse and control AI costs. The current Worker stores those counters with a 48-hour expiration.

Stamp Identifier does not intentionally store your full scan photos or AI results in a Stamp Identifier cloud database. Cloudflare may process technical and network information needed to operate the backend, such as IP address, routing information, request timing, status code, endpoint, security events, and operational logs. Worker logs are intended to record operational events such as errors, service availability, and rate limits, not full uploaded images.

8. Google Gemini Processing

Stamp Identifier uses Google Gemini API to analyze selected stamp images and generate identification output. The information sent to Gemini can include the selected image data, prompt, selected currency, generated output, and technical usage information needed to provide, secure, monitor, and improve the Gemini API service according to the terms and policies that apply to the developer's Gemini API account.

AI provider retention, safety review, abuse monitoring, product improvement, and legal disclosure practices may depend on the Gemini API terms, billing status, account configuration, region, and policies in effect at the time of processing.

9. Purchases, App Store, and RevenueCat

Stamp Identifier may offer Pro access through Apple App Store in-app purchase. Apple processes the payment transaction. Stamp Identifier does not receive your full payment card number.

RevenueCat helps validate purchases, restore purchases, manage product offerings, and determine whether the stampid Pro entitlement is active. RevenueCat may process an app-specific user identifier, product identifiers, entitlement status, subscription status, renewal status, expiration information, transaction identifiers, device or app technical information, and related purchase analytics.

Stamp Identifier package identifiers may include monthly, yearly, $rc_monthly, and $rc_annual, depending on the app version and current RevenueCat offering.

10. Service Providers

Stamp Identifier uses service providers to operate app features:

• Apple, for App Store distribution, iOS permissions, in-app purchase, and Apple account subscription management.
• Google, for Google Gemini API and related AI processing.
• Cloudflare, for Worker hosting, routing, security, rate limiting, KV counters, and operational logs.
• RevenueCat, for purchase validation, entitlement management, restore purchases, product offerings, and subscription analytics.

11. Sensitive Data and Professional Use

Stamp Identifier is not designed for highly sensitive content or critical decisions. Do not submit images or information that you do not want processed by Stamp Identifier, Cloudflare, Google Gemini, RevenueCat, or Apple where applicable.

Stamp Identifier results are AI-generated estimates and may be wrong. The app is not a professional appraisal service, insurance valuation service, tax service, legal service, authentication authority, conservation authority, marketplace, auction house, or substitute for a qualified philatelic expert.

12. Your Choices and Data Deletion

• You can decline camera or photo permissions, though scan features may not work without image access.
• You can change camera and photo permissions in iOS Settings.
• You can delete individual scan history items or clear all scan history inside the app.
• You can remove remaining local app data by deleting Stamp Identifier from your device.
• You can manage or cancel subscriptions through your Apple Account subscription settings.
• You can contact support with privacy questions at salamsalamoner@gmail.com.

13. Security

Stamp Identifier uses HTTPS for AI requests and relies on platform security controls provided by iOS, Cloudflare, Google, RevenueCat, and Apple. No method of transmission, processing, or storage is perfectly secure, and AI processing requires transmitting selected scan content to service providers.

14. International Processing

Stamp Identifier and its providers may process information in countries other than your own. Data protection laws may differ from those in your country or region.

15. Children

Stamp Identifier is not directed to children under 13 and AI identification features are intended for users who are at least 18 years old. The app does not knowingly collect personal information from children. If you believe a child provided personal information through support or scan features, contact us so we can review the request.

16. Changes to This Policy

This policy may be updated when the app, providers, legal requirements, purchase setup, or data practices change. The effective date above shows when this version took effect.

17. Contact

For privacy questions, support requests, or deletion questions, contact salamsalamoner@gmail.com.