Patina ("the app") is built to work without accounts and with as little data as possible. This page explains exactly what the app processes and why.
Photos you scan
When you scan an object, the photo is sent over an encrypted connection to our server, which forwards it to an AI provider (OpenAI) to identify the piece. Photos are processed to produce the identification and are not stored on our servers. Per OpenAI's API policy, API data is not used to train their models. Your collection, its photos and the notes and prices you record are stored only on your device.
Reference library
The marks library, period almanac and articles are bundled with the app and work entirely offline. Browsing or searching them sends nothing anywhere.
Device identifier
The app sends an anonymous per-install identifier (Apple's identifierForVendor) with each scan. We use it solely to rate-limit requests and prevent abuse. It resets if you delete the app and cannot be used to identify you personally.
Subscriptions
Purchases are processed by Apple. We use RevenueCat to manage subscription status; RevenueCat receives an anonymous app user ID and purchase information from Apple. See RevenueCat's privacy policy. We never see your payment details.
What we don't do
- No accounts, no email collection
- No advertising or tracking SDKs
- No sale or sharing of personal data
- No analytics that identify you
- No location access โ the app never asks for it
Data deletion
Your collection lives on your device โ deleting the app deletes it. Server logs (rate-limiting counters) expire automatically within hours.
Children
The app is not directed at children under 13 and does not knowingly collect data from them.
Changes & contact
We may update this policy; the effective date above will change accordingly. Questions: inkpocket.app@gmail.com