CoinIn – Coin Scan Identifier

"We also automatically collect from your device language settings, IP address, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, hardware ID, Facebook ID, and other unique identifiers (such as IDFA and AAID). We need this data to provide our services, analyze how our customers use the app, to serve ads."

The app collects hardware IDs, Facebook IDs, mobile carrier info, ISP, and advertising identifiers — data well beyond what a coin collection app needs for core functionality, primarily used for ad targeting and analytics.

"We will ask you only to choose your goals, later we may also ask you to give information on your coins and your geolocation. Additionally, we may also ask to access your geolocation to better understand locality of the coin. Under this legal basis we may track your geolocation and communicate with you by sending push notifications."

The app requests geolocation access ostensibly to understand coin locality, but geolocation data is also collected alongside other device data that is shared with third-party ad networks.

"We collect your Apple Identifier for Advertising ("IDFA") or Google Advertising ID ("AAID") (depending on the operating system of your device). We use Facebook Ads Manager together with Facebook Custom Audience, which allows us to choose audiences that will see our ads on Facebook or other Facebook's products (for example, Instagram). Through Facebook Custom Audience we may create a list of users with certain sets of data, such as an IDFA, choose users that have completed certain actions in the App."

The app collects advertising identifiers and shares them with Facebook to build custom audiences, enabling cross-platform tracking and ad targeting across Facebook, Instagram, and other services.

"We may share some sets of personal data, in particular, for purposes and with parties indicated in Section 3 and 5 of this Privacy Policy. The types of third parties we share information with include, in particular: cloud storage providers (Amazon), data analytics providers (Facebook, Appsflyer, Firebase, Amplitude), marketing partners (in particular, social media networks, marketing agencies, email delivery services; Facebook, IronSource, Appodeal)."

Personal data is shared with at least seven named third parties spanning cloud storage, analytics, and advertising, many of which are SDKs that collect data directly from the user's device.

"We may modify this Privacy Policy from time to time. If we decide to make material changes to this Privacy Policy, you will be notified through our Service or by other available means and will have an opportunity to review the revised Privacy Policy. By continuing to access or use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy."

The company can change the privacy policy at will, and continued use of the app automatically constitutes agreement to the new terms, with no requirement for affirmative consent.

"We will store your personal data for as long as it is reasonably necessary for achieving the purposes set forth in this Privacy Policy (including providing the Service to you), which includes (but is not limited to) the period during which you have an account with the App. We will also retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements."

There is no specific deletion timeline; data is retained for as long as deemed "reasonably necessary" and may be kept after account closure for undefined legal and dispute resolution purposes.