CoinRadar Privacy Policy

Version of 20 October 2026.

CoinRadar is built to work with as little data as possible: your photos never leave your phone, there is no account, no advertising and no ad tracking. This policy describes exactly what is processed, why, for how long and how to exercise your rights.

1. Who is responsible

The controller is NATIVIK, Elyes JLASSI (EI, sole trader), a French micro-enterprise registered under SIREN 131 738 742, 105 quai Jules Guesde, 94400 Vitry-sur-Seine, France. Contact for any question about your data: lesviesretrouvees@gmail.com. NATIVIK has not appointed a data protection officer (not required for its activity).

2. At a glance

3. What stays on your phone

• Coin photos: identification is performed by a model built into the app. Photos are sent neither to NATIVIK nor to any third party. If you add a coin to your collection, the cut-out photo is stored in the app's private storage.
• Reading the year (Android): the year struck on the coin is read by ML Kit Text Recognition, a Google component that runs on your phone with a model built into the app; your photos and the text read never leave the device. Google designs this component to send technical usage and performance metrics (device model, version, processing times, a per-installation identifier); CoinRadar turns this sending off: the component transmits no data to Google.
• Collection: coins, quantities, declared grades, entry dates, inventory numbers, settings. You can erase everything in Settings > Delete my data, or by deleting the app; only withdrawal acknowledgements are kept by this function, as proof (§ 6.1).
• Installation identifier: a random string generated the first time the app opens. It contains no information about you or your device, is not linked to any advertising identifier and changes if you reinstall the app.
• Backup: if your device backup is turned on (Google backup on Android, iCloud device backup on iPhone), it includes your collection, the photos you kept and your withdrawal acknowledgements, so that you find them again on a new device. The installation identifier and your usage-measurement choice are excluded: they are recreated on the new device. The backup is kept by Google or Apple in your account under their terms; NATIVIK has no access to it. You can turn it off in your device settings.
• Sharing and export: sharing an inventory label and exporting to CSV use your system share sheet, only when you decide to, towards the recipient you choose.

4. Data sent to our relay

The app contacts only one server operated by NATIVIK (the "relay"), hosted by Cloudflare. It never contacts Numista directly.

4.1 Recorded sales

Sales are requested from the relay only if you are a subscriber, when the app shows the result of an identification or a coin's record. Without a subscription, no request is sent. The request contains:

• the coin type number in the Numista catalogue (and, where relevant, the issue number);
• the installation identifier described in § 3;
• like any Internet connection, your IP address, used by Cloudflare to route the request and not recorded by the relay.

The relay queries Numista with the coin type number and NATIVIK's access key only: no data about you is passed to Numista. The answer (the sales) is returned to you without being stored, either by the relay or by the app.

To respect the access quota granted by Numista and prevent abuse, the relay keeps a lookup counter per installation identifier and per day, automatically erased 48 hours after it is created, and global counters (per month and per day) that contain no identifier.

Legal bases: performance of the contract between you and NATIVIK (Art. 6(1)(b) GDPR) for showing sales; NATIVIK's legitimate interest in protecting its service against abuse and complying with its licence (Art. 6(1)(f)) for the counter.

4.2 New coin alerts

The app regularly downloads the public list of the latest €2 commemoratives and compares it with its catalogue. No data about you is sent (apart from the transport IP address). Notifications are generated by your phone: there is no notification server and no push token. Likewise, the app checks the current version of the terms on the relay so it can notify you in the app 30 days before any change; no data about you is sent.

4.3 Usage measurement, only with your consent

On first launch the app asks whether you accept usage measurement. If you decline, nothing is sent and the app works the same way. If you accept, it sends in batches:

• events from a closed list (for example "app opened", "coin identified", "subscription screen shown", "label shared") and, for some, a numeric value;
• the platform (iOS or Android), the app language and its version.

Usage measurement includes no crash or technical incident reports. No installation identifier, IP address, location (not even the country), photo or collection content is sent. The data is aggregated in Cloudflare's statistics tool (Workers Analytics Engine) and deleted after 3 months. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 82 of the French Data Protection Act, implementing Art. 5(3) of the ePrivacy Directive). You can withdraw it at any time in Settings > Privacy > Usage measurement; sending stops immediately.

4.4 This website

The coinradar.pages.dev website sets no cookies, uses no trackers or analytics and loads no third-party resources (fonts included). Its host processes your IP address to serve the pages, in its technical logs, under its own policy.

5. What we do not do

No account, no name, no e-mail address requested in the app, no geolocation, no access to your contacts or photo library, no advertising, no advertising identifier, no sale of data, no profiling, no automated decision about you.

6. Subscription and payment

Purchases are made from Apple (App Store) or Google (Google Play), which collect the payment and process your payment data as separate controllers under their own policies. NATIVIK receives neither your name, nor your address, nor your payment details.

To know whether your subscription is active, the app receives transaction information from the store: product, purchase, trial and expiry dates, status, country and currency, transaction identifier. This check takes place on your device, directly with Apple or Google; no third-party provider is involved. It is used to give access to the subscription, to handle a withdrawal request and to keep sales statistics. Legal basis: performance of the contract (Art. 6(1)(b)). Retention: for the duration of the subscription, then 3 years after it ends for handling claims; withdrawal statements follow the rules in § 6.1.

6.1 Withdrawal

If you use the "Withdraw from the contract here" function, the app sends the relay a withdrawal statement containing: the installation identifier, the platform (iOS or Android), the plan subscribed to, the purchase references provided by the store (Google Play purchase token or order number; Apple original transaction identifier), the app language and the date of the statement. The relay records it with its date of receipt and returns an acknowledgement of receipt (number and date), shown and kept in the app. No other data is collected. Purposes: to process your withdrawal, trigger the refund with the store and be able to prove the date and content of your statement. Legal bases: compliance with a legal obligation (Art. 6(1)(c) GDPR; Arts. L. 221-21 and L. 221-24 of the French Consumer Code) and NATIVIK's legitimate interest in keeping evidence that it has met its obligations (Art. 6(1)(f)). Retention: 5 years from receipt, the general limitation period (Art. 2224 of the French Civil Code; Art. L. 110-4 of the French Commercial Code), then deletion. To prevent abuse, a per-installation daily counter of statements is erased after 48 hours.

7. Recipients and processors

Our processors are contractually bound to provide protection at least equivalent to that described here. Numista is the source of the recorded sales; it receives no data about you.

8. Security

All communications are encrypted (HTTPS). The Numista access key is never present in the app. The relay keeps no request logs containing the IP address or the installation identifier.

9. Your rights

You have the rights of access, rectification, erasure, restriction, objection (in particular to processing based on legitimate interest), portability, the right to withdraw consent at any time, and the right to give instructions about your data after your death (Arts. 15 to 22 GDPR; Art. 85 of the French Data Protection Act).

Because NATIVIK does not know who you are, exercising some rights requires you to send us the installation identifier shown in Settings > About (Art. 11 GDPR). As most data is on your phone, you can also view, export (CSV) and erase it yourself.

Write to lesviesretrouvees@gmail.com. We reply within one month. You can lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France; www.cnil.fr), or with the authority of your country of residence (in the United Kingdom: the ICO, ico.org.uk).

10. Minors

CoinRadar is intended for a general audience. Subscribing requires being able to contract on the store; minors' accounts are subject to Apple's and Google's parental controls. For usage measurement, a minor under 15 may consent only with the agreement of a holder of parental authority.

11. Changes

Any significant change will be announced in the app before it takes effect. The version date appears at the top of this page.

References

Regulation (EU) 2016/679 (GDPR), Arts. 5, 6, 11, 12–22, 28, 44–46; French Act No. 78-17 of 6 January 1978 (Data Protection Act), Arts. 45, 82 and 85; Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 (EU–US Data Privacy Framework); Apple App Store Review Guidelines 5.1.1; Google Play User Data policy.

This English text is a translation of the French version.