Privacy Policy

Who we are

BullionView is a mobile application for tracking precious metal collections. The application is operated by Roman Tabi, a sole trader registered in the Czech Republic (hereinafter "we", "us", or "our").

As the operator of BullionView, Roman Tabi is the data controller responsible for your personal data under Regulation (EU) 2016/679 (GDPR).

Contact: bullionvault70@gmail.com

What data we collect and why

Account data

When you sign in with Google, we receive your name, email address, and profile photo from your Google account. We use this to identify your account and associate your holdings data with you.

Anonymous mode (no account)

If you choose "Continue without account" on the welcome screen, BullionView creates a random per-device identifier (a UUID) stored locally in your app preferences. This identifier never leaves your device and is not tied to any personal information — no name, no email, no profile photo, no Google account. Your holdings, vaults, photos, and preferences remain on your device only.

While in anonymous mode we do not use Firebase Authentication, Firestore, Cloud Storage, or Cloud Messaging — none of your data leaves your device. Anonymous mode does not support cloud backup, push price or ratio alerts, photo upload, or sync across devices; those features require a Google account.

Holdings and portfolio data

All holdings you enter — coins, bars, purchase prices, dates, weights, conditions, vault assignments, and notes — along with any custom coin or bar specs you create yourself (for items not in the curated catalogue) are stored locally on your device. If you enable cloud backup, this data is also stored in our cloud database (Firebase Firestore) to allow restoration on a new device. Cloud backup is optional and can be enabled or disabled at any time in Settings.

Photos

Photos you take of your coins and bars are stored locally on your device. If cloud backup is enabled, photos are also uploaded to Firebase Storage for restoration on a new device. Before any upload, all EXIF metadata (including GPS location if present) is automatically stripped. Photos are stored under your account and are not shared with third parties. If cloud backup is disabled, photos remain on your device only and cannot be recovered after reinstallation. In anonymous mode, photos are always stored on your device only and are never uploaded to Firebase Storage, regardless of any other setting.

Usage analytics

We collect anonymous usage data via Firebase Analytics — which screens you visit, which features you use, and how often. This data cannot be used to identify you personally. Each session is tagged with a coarse "anonymous mode" boolean so we can split retention and feature-use reports by cohort; this tag carries no identifying information. You can opt out at any time in Settings → Analytics.

Crash reports

If the application crashes, we collect a crash report via Firebase Crashlytics including the error, device type, and OS version. No personal data is included. Crash reporting is active only in release builds.

Push notifications

If you enable price or ratio alerts, we store a Firebase Cloud Messaging (FCM) device token to deliver push notifications to your device. This token is not linked to your identity — it identifies your device only. Tokens are automatically removed when they become invalid. You can disable notifications at any time in your device settings.

Price and ratio alerts

Alert configurations you create (target prices, ratio thresholds, direction, repeat mode) are stored in our database and evaluated server-side by Firebase Cloud Functions to determine when to send notifications. Alert data is deleted when you delete the alert or your account.

Subscription data

If you subscribe to BullionView Pro, your purchase is processed by Google Play (or Apple App Store). We use RevenueCat, a third-party subscription management service, to validate your subscription status. RevenueCat receives your anonymous app user ID and purchase receipt — we do not receive or store your payment details (credit card, billing address, etc.).

Preferences and favourites

Your app preferences (display currency, theme, sound settings, the sell-spread defaults table, and any per-spec premium and sell-spread overrides you set) and favourite coin/bar families are stored locally on your device. If cloud backup is enabled, these are also synced to our database to restore on reinstall.

Importing anonymous data into an account

If you start using BullionView anonymously and later sign in with a Google account, the App will ask whether you would like to move your locally-stored holdings, vaults, snapshots, alerts, and photo metadata into your account. This is an explicit, opt-in action — we never move any data automatically. If you accept and cloud backup is enabled on the account, the moved data is then stored in Firebase Firestore as described in "Holdings and portfolio data" above. If you decline, your anonymous-mode data stays on your device only and the App keeps offering the import in Settings → Anonymous data.

Third-party services

We use the following third-party services to operate BullionView. Firebase data is stored in the European Union (europe-west1 region).

In anonymous mode the App uses only Firebase Analytics, Firebase Crashlytics, Cloudflare Workers (spot prices), the Frankfurter API (FX rates), and RevenueCat (anonymous customer ID). Firebase Auth, Firestore, Storage, Cloud Messaging, and Cloud Functions are skipped entirely.

Google's privacy policy: policies.google.com/privacy
Cloudflare's privacy policy: cloudflare.com/privacypolicy
RevenueCat's privacy policy: revenuecat.com/privacy

How long we keep your data

Your data is kept for as long as your account exists. When you delete your account from Settings → Delete account, all of the following are permanently deleted:

• Your holdings, photos, vaults, alerts, favourites, and portfolio history from our servers
• Your Firebase Auth account
• All local data on your device

Some anonymised analytics data may be retained by Firebase Analytics for up to 14 months as per Google's standard retention policy. This data cannot be linked back to you after account deletion.

Your rights under GDPR

As an EU resident you have the following rights:

• Right of access

  You can request a copy of all personal data we hold about you.
• Right to rectification

  You can correct inaccurate data directly within the app.
• Right to erasure

  Delete your account and all data from Settings → Delete account, or email us at bullionvault70@gmail.com.
• Right to data portability

  Export your collection data at any time via Settings → Export collection (CSV format). You can also request your data by emailing bullionvault70@gmail.com.
• Right to object

  Opt out of analytics at any time in Settings → Analytics.
• Right to lodge a complaint

  You may contact the Czech data protection authority: Úřad pro ochranu osobních údajů (uoou.cz).

We will respond to all requests within 30 days.

Data security

We use Firebase's security infrastructure, which includes encryption in transit (TLS) and at rest. Access to your data is restricted to your authenticated account via Firebase Security Rules — no other user can access your data.

Children

BullionView is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us at bullionvault70@gmail.com and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy. For significant changes we will notify you within the app.

Contact

For any privacy-related questions, requests, or complaints: