Rockipedia Privacy Policy

1. Introduction and Scope

This policy covers personal information collected through the Services. By using the Services, you agree to the practices described in this policy. Capitalized terms not defined here have the meanings given in our Terms of Service.

2. Information We Collect

2.1 Information You Provide. Account Information: if you create an account, we collect your email address, username, and profile information. Photos for Identification: the photos of rocks, minerals, crystals, and gemstones that you take or upload for identification. Communications: information you provide when you contact us for support, feedback, or other inquiries.

2.2 Information Collected Automatically. When you use the Services, we and our service providers may collect: device type and model, operating system and version, app version, language preferences, IP address, usage data (such as features used, identification requests, and timestamps), and crash or error logs.

2.3 Purchase Information. Payments for subscriptions and in-app purchases are processed by Apple. We receive confirmation of purchase (such as transaction identifiers and the items purchased) from Apple, but we do not collect or store your payment card details.

2.4 Information from Third Parties. Analytics providers may share aggregated or pseudonymized usage information with us to help us understand how the Services are used.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Services, including analyzing your photos to generate identification results;
• Improve and develop the Services, including training and evaluating our machine-learning models (we use aggregated or de-identified data for model development where reasonably possible);
• Provide customer support and respond to your inquiries;
• Send you service-related communications and, with your consent where required, marketing communications;
• Detect, prevent, and address fraud, security, and technical issues; and
• Comply with legal obligations and enforce our Terms of Service.

4. Legal Bases for Processing (EEA, UK, and Switzerland)

We process personal information on the following legal bases: (a) performance of a contract with you, to provide the Services you request; (b) our legitimate interests, such as improving our Services, maintaining security, and preventing fraud; (c) your consent, where we request it, which you may withdraw at any time; and (d) compliance with legal obligations.

5. How We Share Information

We do not sell your personal information. We share information only as follows:

• With service providers that help us operate the Services, such as cloud hosting, analytics (for example, Firebase or Google Analytics), and crash-reporting providers, subject to contractual confidentiality obligations;
• With Apple, as necessary to process purchases and deliver your purchases within the App Store ecosystem;
• When required by law, legal process, or government request, or to protect our rights, safety, or the rights of others;
• In connection with a merger, sale, acquisition, or reorganization; and
• With your consent, with third parties when you direct us to.

6. International Data Transfers

Your information may be processed in countries other than your own, including the United States. When we transfer personal data from the EEA, the UK, or Switzerland to countries that have not been recognized as providing an adequate level of protection, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses. You may request a copy of these safeguards by contacting us.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy, to comply with legal obligations, and to resolve disputes. Photos you submit may be retained as needed to provide and improve the Services; you may request deletion as described in Section 9.

8. Children’s Privacy

The Services are not directed to children under 13 years of age (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. If you believe your child has provided us personal information, please contact us.

9. Your Privacy Rights and Choices

9.1 General Rights. You may request access to, correction of, or deletion of your personal information; object to or request restriction of certain processing; request data portability; and withdraw consent where processing is based on consent. To exercise these rights, contact us at support@novaxfy.com. We will respond within the timeframe required by applicable law.

9.2 GDPR Rights (EEA, UK, and Switzerland). If you are located in the EEA, the UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

9.3 California Rights (CCPA/CPRA). If you are a California resident, you have the right to: (a) know the categories and specific pieces of personal information we collect, use, and share; (b) request deletion of your personal information; (c) opt out of the “sale” or “sharing” of personal information — we do not sell your personal information and do not share it for cross-context behavioral advertising; (d) request correction of inaccurate personal information; and (e) receive non-discriminatory treatment for exercising your rights. We do not collect or process “sensitive personal information” (as defined under the CPRA) for purposes that would require you to limit its use.

9.4 Other U.S. States. If you reside in Virginia, Colorado, Connecticut, Utah, or another state with similar privacy laws, you may have rights to access, correct, delete, and opt out of certain processing, which you can exercise by contacting us.

10. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Analytics and “Do Not Track”

We and our analytics providers use technologies such as software development kits (SDKs) and identifiers to collect the usage data described in Section 2.2. At this time, our Services do not respond to browser-based “Do Not Track” signals. You can limit analytics collection by adjusting your device settings or by contacting us.

12. Third-Party Services

The Services rely on Apple’s App Store and may include links to third-party websites or services. Those third parties have their own privacy policies, and we are not responsible for their practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the App or by other means before the changes take effect, and we will update the “Last Updated” date. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.