RockLense
Privacy Policy
Last updated 24 August 2026
The short version. Your collection, your photos, and your notes stay on your phone. RockLense has no accounts with your name on them, no analytics, no advertising, and no tracking. Photos are sent to our server only while a scan is running, are passed to the AI model that analyses them, and are not stored afterwards.
What stays on your device
Everything you build up in the app is stored locally and never uploaded:
- Your collection — saved stones, their names, and your own notes
- The photos attached to saved items
- Your settings and your acceptance of the in-app disclaimer
Deleting the app deletes all of it. There is no copy on our side to recover, which is the trade-off for not holding it in the first place.
What is sent when you scan
Running a scan sends the photos you selected to our server, which forwards them to Anthropic's Claude API for analysis and returns the result. Specifically:
- Photos are re-encoded on your device before they are sent. That strips EXIF metadata, including GPS coordinates, camera serial numbers, and timestamps. Location data never leaves your phone.
- Photos are not stored on our server. They exist in memory for the duration of the request. We keep a cryptographic hash of the image so that re-scanning the same photo within an hour can return the previous result without paying for a second analysis — a hash cannot be turned back into a picture.
- Any clues you add (colour, hardness, what a label said) are sent with the photos and are treated the same way.
Your account
An account is created automatically the first time you open the app so that scan credits have somewhere to live. It is anonymous: a random token stored on your device, held on our side only as a hash. It carries no name, no email, and no device identifier.
An email address is attached only if you buy something and choose to provide one, so the purchase can be restored to another device. You are never asked to sign up to use the app.
Who else sees anything
| Service | What it receives | Why |
|---|---|---|
| Anthropic (Claude API) | Your scan photos and clues | Analyses the image and returns the suggested match |
| Vercel | Standard request data, including IP address | Hosts the app and the API; IP is used for rate limiting |
| Neon (PostgreSQL) | Anonymous account id, credit balance, purchase records | Stores credits so they survive reinstalling |
| Stripe | Payment details, and an email if you give one | Processes payment. We never see or store card details |
We do not sell data, share it for advertising, or pass it to anyone not listed above.
What we do not collect
- No name, address, phone number, or date of birth
- No location data — it is stripped from photos before they are sent
- No analytics, behavioural tracking, or advertising identifiers
- No contacts, calendar, microphone, or background location access
Children
RockLense is not directed at children under 13, and we do not knowingly collect information from them. Since the app collects no personal information from anyone, there is nothing held about a child user either.
Deleting your data
Delete all data in the app's Settings screen erases your collection, photos, settings, and the anonymous session token from your device, and detaches the account this device was using. Uninstalling the app achieves the same thing locally.
To have the server-side record of an account and its purchase history removed, contact us at the address below.
Changes
If this policy changes in a way that affects what is collected or who receives it, the app will ask you to review the disclaimer again before your next scan.
Contact
Questions about this policy, or a request to delete an account: support@rocklense.com