This Privacy Policy explains how Gem Heaven ("we", "us", "our") collects, uses, stores, and shares information when you use the Gem Heaven mobile application and related services (the "Service"). We are committed to protecting your privacy and handling your data transparently.
By using the Service you agree to the collection and use of information in accordance with this Policy.
1.Information We Collect
1.1 Information You Provide
- Account information: email address, display name, profile photo (optional)
- Authentication data: if you sign in with Google or Apple, we receive your name and email from those providers
- Listing content: photos, descriptions, pricing, and other details you add when creating a marketplace listing
- Messages: content of in-app messages between buyers and sellers
- Payment information: billing address for Stripe transactions. We do not store card numbers — all payment data is handled directly by Stripe
- Bank account details (manual payout sellers only): account number and bank details for manual payouts, stored securely and used solely for payout processing
1.2 Information Collected Automatically
- Device information: device type, operating system version, app version
- Usage data: features used, screens viewed, scan history, credit transactions — collected via Firebase Analytics
- Push notification tokens: Firebase Cloud Messaging tokens for delivering notifications
- Crash and diagnostic data: error logs collected via Firebase to help us identify and fix bugs
- Approximate location: country or region inferred from IP address or device locale, used solely to display prices in your local currency. We do not collect precise GPS location
1.3 Camera and Photos
When you use the Identify feature, your camera image is transmitted to our backend server and then to Anthropic's Claude API for AI analysis. Images are processed in real time and are not stored on our servers or linked to your account after processing. We do not build a database of your scans' photographs.
2.How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process marketplace transactions and manage escrow
- Send push notifications (order updates, bids, messages, promotions)
- Display prices in your local currency using approximate location
- Detect and prevent fraud, abuse, and violations of our Terms
- Respond to support requests and disputes
- Analyse usage patterns to improve the Service (aggregated, non-personal)
- Comply with legal obligations
We do not use your data for targeted advertising. We do not sell your personal information to third parties.
3.Information Sharing
3.1 Service Providers
We share data with the following trusted third-party providers who process it on our behalf:
- Stripe — payment processing and Connect payouts (stripe.com/privacy)
- Anthropic — AI processing of gem identification images (anthropic.com/privacy). Images are sent for analysis and are not retained by Anthropic beyond the processing request
- Firebase (Google) — analytics, crash reporting, and push notifications (firebase.google.com/support/privacy)
- PocketBase — database hosted on our EC2 server. Data does not leave our infrastructure
- exchangerate-api.com — currency conversion rates (no personal data shared)
3.2 Marketplace
When you purchase from or sell to another user, certain information is shared between the parties to facilitate the transaction: your display name, ratings, and shipping address (shared with the seller upon purchase). We do not share your email address or payment details with other users.
3.3 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights or the safety of our users.
3.4 Business Transfer
If Gem Heaven is acquired, merged, or transfers its assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
4.Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or dispute resolution purposes.
Transaction records are retained for 7 years to comply with financial recordkeeping requirements. Chat messages in completed or cancelled transactions are retained for 90 days and then deleted.
5.Data Security
We take reasonable technical and organisational measures to protect your data, including:
- HTTPS encryption for all data in transit
- PocketBase access restricted to authenticated sessions
- Stripe handles all payment card data — we never touch raw card numbers
- EC2 server access restricted by SSH key and firewall rules
- Nightly encrypted backups with 30-day retention
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.
6.Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Correction: request that we correct inaccurate or incomplete data
- Deletion: request that we delete your account and associated personal data
- Portability: request your data in a structured, machine-readable format
- Objection: object to processing of your data for certain purposes
To exercise any of these rights, contact us at contact@codematics.co. We will respond within 30 days.
7.Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at contact@codematics.co and we will delete it promptly.
8.International Transfers
Your data may be processed outside your country of residence, including in the United States (Stripe, Firebase, Anthropic) and on servers operated by Gem Heaven in cloud infrastructure. By using the Service, you consent to the transfer of your information to these locations.
9.Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.
10.Push Notifications
We send push notifications for order updates, new bids, messages, and promotional content. You can disable push notifications at any time through your device settings. Disabling notifications will not affect your ability to use the Service but you may miss time-sensitive order updates.
11.Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email at least 14 days before the changes take effect. The effective date at the top of this document will always reflect the most recent version.
12.Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact: