Vestic — Privacy Policy

Effective date: 2 October 2026 · Operator: Crafted Studio (craftedstudio.io@gmail.com) · Applies to the Vestic iOS app (formerly Relic; io.craftedstudio.relic)

Summary. Vestic has no accounts and no sign-up. Your collection lives on your device. The data that leaves your device is (a) what's needed to appraise an item you scan — and the photo is only sent after you agree on the in-app consent screen shown before your first scan — and (b) if you allow tracking when iOS asks, a small set of ad-measurement events sent to Meta so we can tell whether our ads work (never your photos, your collection, or your chats). Apple's privacy-preserving SKAdNetwork also reports aggregate ad results to us regardless of that choice. Details below.

1. What we process and why

When you scan an item, the following happens:

• Item photo → AI identification (Anthropic). The photo you take or select is sent over an encrypted connection, through our server proxy, to Anthropic PBC (the Claude API), which analyzes the image and returns the identification (maker, era, materials, authenticity signals) as text. Under Anthropic's commercial API terms, API inputs and outputs are not used to train Anthropic's models.
• Item description → marketplace search (ScrapingBee, Bright Data). The short text description of the identified item (never the photo, and nothing about you) is used to search recent sold and current listings on public marketplaces such as eBay and Etsy. These searches are executed via our server by web-data providers ScrapingBee SAS and Bright Data Ltd.
• Item photo → temporary public hosting for photo matching. To find visually matching listings (a reverse image search, similar to Google Lens), the scan photo must be reachable at a public URL. Our server uploads a downscaled copy of the photo to a third-party image host — currently uguu.se (primary) or x0.at (fallback) — at a random, unguessable URL, and passes that URL to the photo-match search (Google Lens), which is executed via our server by our search providers: SearchApi.io (primary), with SerpApi, LLC, ScrapeBadger and ScrapingBee SAS as backups. These providers receive only the image URL — no information about you. We do not control retention on these hosts: uguu.se deletes files after roughly 3 hours; x0.at may retain files for an extended period under its own policy. The URL is not published anywhere by us and contains no information about you. Please do not scan photos that include people, documents, or anything private — photograph only the item.
• Appraiser chat (Anthropic). If you use the in-app appraiser chat, your messages, the item's identification and value context, and (on the first message) the item photo are sent to Anthropic to generate the reply. Conversations are not stored on our servers.
• Infrastructure. All of the above is routed through our API proxy hosted on Cloudflare, Inc. Cloudflare processes requests transiently (including your IP address, as any web server does) to deliver the service; we do not log or store request contents or build profiles. Anonymous search results (never photos or photo-based searches) may be cached briefly at the network edge to speed up repeat lookups. Currency exchange rates are fetched without any personal data.
• Purchases (Apple). Subscriptions are processed entirely by Apple. We never see your payment details. See Apple's privacy policy for how Apple handles purchase data.

2. Advertising and measurement (Meta & Apple SKAdNetwork)

We advertise Vestic (for example on Facebook and Instagram) and need to measure whether those ads actually bring people to the app. Two mechanisms are used, and you control the second one:

• Apple SKAdNetwork — always on, privacy-preserving. iOS itself reports aggregated, anonymized conversion signals to the ad network that showed you an ad, so we can see that ads led to installs and key actions without identifying you or your device. This is Apple technology that works whether or not you allow tracking, and it never exposes your identity to us or to the ad network.
• Meta SDK — only if you allow tracking. When you finish onboarding, iOS shows Apple's App Tracking Transparency prompt asking whether to allow tracking. Only if you tap Allow does the Meta SDK (Meta Platforms, Inc.) use your device's advertising identifier (IDFA) and share with Meta a small set of in-app events — that you opened the app, completed onboarding, did your first scan, opened checkout, and started a free trial or subscribed (including the amount charged) — so Meta can attribute and optimize our ads. No item photos, no collection contents, and no chat messages are ever sent to Meta. If you tap Ask App Not to Track (or don't allow), no advertising identifier is used and Meta receives no attributable events — only the anonymized SKAdNetwork signal above is reported.

You can change your choice at any time in iOS Settings > Privacy & Security > Tracking. The data shared with Meta for these purposes is listed in our App Store privacy label under "Data Used to Track You" (device identifier, purchase history, product interaction).

3. What stays on your device

Your collection (photos, identifications, values, notes, prices you paid), your settings, your remaining free-scan count, and your chat history are stored locally on your device only. Deleting the app deletes them. CSV exports you create are files you own and share yourself.

4. What we do NOT do

• No accounts, no registration, no email collection.
• No server-side database of users, photos, or collections.
• No sale of your personal data.
• No advertising tracking of any kind unless you opt in via the iOS tracking prompt (see "Advertising and measurement"). If you decline, only Apple's anonymized SKAdNetwork is used.
• We never send your item photos, collection, or chat messages to any advertising, analytics, or ad-measurement company — those go only to the appraisal processors named in Section 1.

5. Your consent and choices

Before your first scan, the app shows a consent screen explaining that the photo will leave your device for AI analysis and a photo-match search; nothing is uploaded until you agree. Separately, the iOS tracking prompt controls whether Meta receives the ad-measurement events described in Section 2 — you can allow or decline, and change it later in iOS Settings. You can stop using the scan feature at any time. Because we keep no copies of your data on our own servers, deletion requests are fulfilled by deleting the app; for anything else, email us and we will help.

If you are in the EEA/UK: the legal basis for processing scan photos is your consent (Art. 6(1)(a) GDPR), given on the consent screen; for the ad-measurement events shared with Meta it is also your consent (given via the tracking prompt); for the transient infrastructure processing it is our legitimate interest in operating the service (Art. 6(1)(f)). You may withdraw consent at any time. You have the right to lodge a complaint with your local supervisory authority.

6. Children

Vestic is rated 4+ on the App Store but is a general-audience utility and is not directed at children. We do not knowingly collect personal information from children.

7. Subscriptions (Vestic Pro)

Vestic Pro is an auto-renewing subscription purchased through Apple (a yearly plan with a 7-day free trial for eligible new subscribers, a yearly plan with a reduced first month, a discounted yearly plan that may be offered once, or weekly/monthly plans — exact terms are shown in the app before purchase). Payment is charged to your Apple Account; the subscription renews automatically unless cancelled at least 24 hours before the end of the current period. Manage or cancel in iOS Settings > Apple Account > Subscriptions. Subscriptions are managed through RevenueCat (RevenueCat, Inc.), which validates your App Store purchase receipt and stores an anonymous app-user identifier so your Pro status stays in sync across your devices; only if you allow tracking may it also receive the advertising identifier to attribute a subscription to an ad. RevenueCat never receives your item photos, collection, or chats. See our Terms of Use for details.

8. Changes

We will update this policy if our practices change and revise the effective date above. Material changes will be reflected in the app's App Store listing.

9. Contact

Crafted Studio — craftedstudio.io@gmail.com