Privacy Policy

Effective date: 1 October 2026

The short version

  • No account. CoinWiz never asks for your name, email or phone number.
  • Our server knows the app only by a random ID created on your phone.
  • To identify a coin, the photo you scan goes to our server and to Anthropic, whose Claude AI reads the coin. We don't keep your photos.
  • Your collection, saved photos and progress stay on your devices (and in your own iCloud, if you turn it on).
  • No ads, no tracking and no selling of data.
  • You can delete your data at any time in the app: Profile → Delete my data.
  • CoinWiz is for people 18 and over only.

1. Who we are

CoinWiz is published by Anas Alradhwan, Kuwait (“we”, “us”). We are responsible for the personal data described in this policy (the “controller” under laws such as the GDPR). This policy covers the CoinWiz iPhone app, the server it talks to, and this website. For any question, use the contact form on our support page.

2. What we collect and why

An anonymous app ID

When you first open CoinWiz, the app creates a random ID and keeps it in secure storage on your phone. It isn't linked to your name, email, phone number or Apple ID. The app sends it, with the app's version number, on each request to our server, so the server can count your scans, apply your subscription and stop abuse. RevenueCat uses the same ID to manage your subscription (see “Purchases” below).

Coin photos

When you scan, the app first cuts the coin out of the picture on your phone and places it on a plain background, so what it sends is the coin, not the rest of the scene. It sends that image of one or both sides to our server, which runs on Cloudflare. Our server passes it to Anthropic, whose Claude AI reads the coin: its country, denomination, year, inscriptions, mint mark, metal and condition. Claude may also compare your photo with catalogue pictures of the likeliest matches.

With each scan, the app also sends the country set as your iPhone's region (in Settings, under General, then Language & Region) and the currency you use, so results can favour coins that are common where you live and show values in your currency.

Catalogue lookups

To find the exact coin and its prices, our server searches the Numista coin catalogue using text, such as the country, denomination and year that Claude read from the coin, and asks for prices in your currency. Numista gets no photos and nothing about you, and the requests come from our server, not your phone.

Image search: Numista can also search its catalogue by image. That is turned off today. If we turn it on to help with hard-to-identify coins, your coin photos will also be sent from our server to Numista for that search, and we'll update this policy.

Catalogue search

When you search the coin catalogue in the app, the words you type (for example “1909 wheat penny”) go to our server, which passes them to Numista to find matching coins. Our server keeps only a count of your searches for the day, not what you searched for. Numista receives the search from our server, with nothing about you.

Ask Wiz questions

Ask Wiz is an AI chat for people 18 and over, and the app asks you to confirm your age before your first question. When you ask Ask Wiz a question, the app sends your question, the last few messages of that conversation and the name (and catalogue number) of the coin you're asking about to our server, which passes them to Anthropic's Claude AI to write the answer. Our server doesn't store your questions or the answers; it keeps only a count of your questions for the day. Questions and answers that contain offensive words are blocked. Anthropic handles them as it handles coin photos (above). Please don't include personal information in your questions.

Reporting an answer: if you tap Report on an answer, the app sends us that answer, the question it answered and the reason you chose, so we can review it. We keep reports for 90 days, without your app ID or anything else about you.

Values for your collection and price alerts

To show current values for the coins you've saved and to check your price alerts, the app sends our server each coin's catalogue numbers, its grade and your currency. It never sends your photos, notes or what you paid. Our server gets the current prices from Numista and doesn't keep the list.

Feedback on a result

If you tell us whether a result was right, the app sends your answer, any comment you type and the scan's reference to our server, to help us improve identifications. We keep only whether the result was right or wrong, with that scan's reference. We don't store your comment. Please don't put personal information in comments.

Purchases

Subscriptions are sold and billed by Apple. We never see your payment details. RevenueCat receives your purchase and receipt information from Apple and from the app, linked to your anonymous app ID, so it can manage your subscription and tell our server whether you have CoinWiz Pro. Because the app connects to RevenueCat directly, RevenueCat also receives technical information that comes with any connection, such as your IP address and basic device and app details, which it handles under its own privacy policy.

App security

CoinWiz uses Apple's App Attest to check that requests come from the genuine app. It works with a security key created on your phone and contains no personal information.

Notifications (optional)

If you allow notifications, CoinWiz can remind you about your streak, remind you two days before a free trial ends, tell you when a coin you watch changes in value, and let you know about new weekly content. These reminders are scheduled on your phone. You can turn them off at any time in your iPhone's Settings.

Camera and location

CoinWiz asks for access to your camera so you can scan coins, and uses photos only when you scan or save a coin. It doesn't collect your location. The country it sends is your iPhone's region setting, not where you are.

Sharing and exports

“I found it!” cards and videos are made on your phone and don't include your location or personal details. When you share one, or export your collection, you choose where it goes, and whoever receives it handles it under their own terms.

Messages to support

When you use the contact form on our support page, it sends your message, the topic you pick and, if you give them, your email address and app version to our server. We use them only to read your message and reply, and we delete them after 365 days. We don't store your IP address with it.

Statistics from Apple

If you've chosen to share analytics with app developers in your iPhone's settings, Apple may give us anonymous, combined statistics about app use and crashes.

This website

This website uses no cookies and no analytics. Its only script is our own, on the support page, and it just sends the contact form to our server. Cloudflare, which hosts the site, processes your IP address to deliver the pages and protect the site.

3. What stays on your phone

Your collection (the coins you save, their photos, grades, notes and what you paid), your sets, lessons, streaks, XP and settings (including your answers to the consent screen and to the 18+ question for Ask Wiz) are stored on your phone. We can't see them. Like other app data, they may be included in your iPhone's own backups, which you and Apple control.

iCloud (optional): if you're signed in to iCloud and iCloud is on for CoinWiz, your collection and progress are also kept in your own private iCloud storage, so they appear on your other devices. That storage belongs to your Apple Account and is handled by Apple under its own privacy policy. We can't see it. You can turn it off in your iPhone's Settings, under your name, then iCloud.

Widgets: the home-screen and Lock Screen widgets read a small summary (your streak, daily goal, level, number of coins, total estimated value and the silver price) that the app keeps on your phone. It doesn't leave your phone.

Using Delete my data removes all of this from your phone and from your iCloud storage. Deleting the app removes it from your phone, but a copy stays in your iCloud storage until you delete it in Settings, under your name, then iCloud.

4. What our server keeps, and for how long

Our server never stores your photos or your IP address, and it keeps nothing else you send it except what's listed below. It uses your IP address only for a moment, to apply rate limits, and Cloudflare processes it briefly to deliver and protect the service. This is everything the server keeps:

DataWhyHow long
Anonymous app IDConnects the records belowAs long as any of them exist
Scan countsThe free scan and the fair-use limitsHourly and daily counts: up to 3 days. Your total count: until you delete your data
Search and Ask Wiz counts (numbers only, never what you typed)The daily fair-use limitsUp to 3 days
Ask Wiz answers you report: the answer, its question and your reason (no app ID)Review answers people flag as wrong or offensive90 days
Scan reference: an ID for each scan, its time, the kind of result (for example “no match”), the catalogue number of the coin it matched, and whether you said it was rightMatch feedback to the right scan, improve identifications and look into problems180 days
Subscription status (Pro or not, plan, trial, renewal or expiry date, and when we last checked it)Unlock CoinWiz ProWhile you have Pro, then until 180 days after it ends or after our last check, whichever is later
Purchase event IDs, if RevenueCat sends us subscription updatesHandle each subscription update only once60 days
Messages you send with the contact form: topic, message, and your email and app version if you give them (no app ID, no IP address)Read your message and reply365 days
App Attest key and counterKeep fake apps and bots outUntil unused for 180 days, or until you delete your data
One-time security codesSet up App AttestValid for 5 minutes, deleted once used or within a day

5. Who we share data with

We share data only with the service providers below, and only what each one needs to do its job. Each is bound by its terms with us to protect the data and to use it only to provide its service. Apple handles App Store purchases under its own privacy policy.

ProviderWhat it does for CoinWizWhat it receives
Cloudflare, Inc. (USA)Runs our server and this websiteWhat the app and the contact form send to our server, as described above, and your IP address, briefly
Anthropic, PBC (USA)Reads the coin and answers Ask Wiz questions with its Claude AICoin photos with your iPhone's region and currency, and Ask Wiz questions with the recent messages and the coin's name and catalogue number, from our server. Never your app ID
Numista (France)Coin catalogue and pricesText searches (including the catalogue searches you type), catalogue numbers and your currency, from our server. Coin photos only if image search is turned on (section 2)
RevenueCat, Inc. (USA)Manages subscriptionsPurchase information, your anonymous app ID and technical connection details from the app; your anonymous app ID from our server, to check whether you have CoinWiz Pro
AppleApp Store, payments, App Attest and optional statisticsWhat you share with Apple, under Apple's own privacy policy

We don't share data with anyone else, except when the law requires it (for example, a valid court order), to protect people's safety or our rights, or as part of a merger or sale of CoinWiz, in which case this policy continues to apply to your data.

6. What we don't do

7. Legal bases

Where laws such as the EU or UK GDPR apply, we rely on these legal bases:

8. Where data is processed

Our service providers process data in the United States (Cloudflare, Anthropic, RevenueCat) and the European Union (Numista), and Cloudflare's network runs worldwide. We run CoinWiz from Kuwait. When data from the European Economic Area, the UK or Switzerland goes to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

9. Your choices and rights

10. Children: 18 and over only

CoinWiz is for people 18 and over only. It isn't meant for anyone under 18, it's rated 18+ on the App Store, and Ask Wiz, its AI chat, asks you to confirm that you're 18 or older before your first question. We don't knowingly collect personal information from anyone under 18. If you believe someone under 18 has sent us personal information, contact us and we'll delete it.

11. Security

All connections are encrypted with HTTPS. The keys for our providers stay on our server and are never in the app, App Attest helps keep automated abuse out, and we keep as little data as we can.

12. Changes to this policy

If this policy changes, we'll post the new version here with a new effective date. For important changes, we'll also tell you in the app.

13. Contact us

Anas Alradhwan, Kuwait
Contact: the contact form on our support page (we reply by email if you give one)