Product: Rock Identifier (the “App” or the “Service”)
Operator: the developer of Rock Identifier (“we”, “us”, or “our”)
Contact: [email protected]
This Privacy Policy explains what personal information we collect, why we collect it, who receives it, how long we keep it, and the choices you have. It applies to the Rock Identifier apps for iOS and Android, the APIs that operate the App, and the legal pages on https://rock.relaxlio.com. Please read it with our Terms of Use.
If a translation of this Policy differs from the English version, the English version controls, except where the mandatory law of your country gives you additional rights.
1. Information we collect
We collect only what the App needs to identify specimens, run your account, process a store subscription, keep the Service secure, and understand whether the App is working.
1.1 Account and sign-in
- A guest session linked to a stable device identifier, if you use the App without an account.
- Your email address and a verification code, if you register or sign in with email.
- An account identifier, and the name or email address, if you choose Sign in with Apple or Google Sign-In and the provider shares those details with us.
- Membership status, so the App can tell a free session from an active Pro entitlement.
You can use the core identification features as a guest. Signing in is optional unless you want Pro features that depend on an account, including Collection and History sync across devices.
1.2 Photos and identification content
- Photos you take with the camera or choose from your photo library for rock and mineral identification.
- Cropping, retakes, and a choice to continue after a quality warning, when you make those choices.
- Optional follow-up photos or physical observations you add to a result, such as a hardness note.
- Identification results, confidence labels, History, Collection items, and result cards you save.
- Feedback you choose to send about a result.
Do not photograph other people for identification, and do not submit a photo you are not allowed to share. A specimen photo can incidentally include a person, a place, or another object. We process the image to identify a rock or mineral, not to identify a person.
1.3 Device and technical data
- Device model, operating system version, app version, language, and time zone.
- A stable device identifier stored on the device. On Android it is derived from the system Android ID when no identifier is already stored, and then kept in secure device storage. On iOS it is read from secure device storage, or, only if that storage is empty, from an Adjust identifier, and otherwise from a random identifier created on the device. We reject blank and known-invalid values.
- Network diagnostics needed to call our API, crash reports, and performance data.
- Remote configuration needed to present the paywall, offers, and version checks.
We do not collect precise location. The current Android build does not request the advertising-ID permission. The current iOS build does not include an App Tracking Transparency prompt. We do not use the advertising identifier as the device identifier.
The device identifier is how we recognise the same installation for guest access, free-quota accounting, fraud prevention, and the device limit on a membership. After it is stored, we do not replace it. Delete all data and Delete account do not erase or rotate it. Uninstalling the App on Android does not, by itself, create a new Android ID for the same app signature.
1.4 Purchases
Apple or Google processes the payment. We do not receive your full card number, bank account number, or store password. We receive product identifiers, purchase or restore tokens, subscription status, and related transaction data so we can unlock Pro, restore a purchase, and prevent fraud.
1.5 Support messages
Contact Support and Send Feedback open your email app. The draft includes the app version and account status. It does not automatically attach photos, identification results, verification codes, precise location, or the device identifier. If you add those details yourself, we use them only to answer you.
1.6 What we do not collect for this App
We do not ask for your contacts, SMS, microphone, precise location, health data, or government identity document. We do not sell personal information.
2. How we use information
| Purpose | What we use |
|---|---|
| Provide identification | Photos, quality-check results, and the identification you request |
| History, Collection, and guides | Results you save, encyclopedia entries, and market-price guide content when that content exists for a mineral |
| Accounts and sync | Sign-in details. Cross-device sync requires a signed-in account and an active Pro entitlement |
| Free allowance and Pro | Daily identification count, product identifiers, and store receipts or tokens |
| Security | Device identifier, authentication data, and abuse signals |
| Reliability | Crash reports, diagnostics, and support messages |
| Measurement | App events such as onboarding, identification, and paywall actions, without using photo contents for advertising |
| Legal | Records we must keep to comply with law, tax, accounting, or a valid legal request |
A free session includes a limited number of reliable named identifications per local calendar day. The number is shown in the App. At the date of this Policy that allowance is three. A photo that fails the quality check, a cancellation, a timeout, or a result with no reliable name is designed not to consume that allowance. Pro removes the daily limit and unlocks the paid features described on the paywall.
3. Legal bases
Where the GDPR, UK GDPR, or a similar law applies, we rely on:
- Contract, to provide the identification, account, History, Collection, and subscription features you request.
- Legitimate interests, to keep the Service secure, prevent quota abuse and fraud, measure stability and feature use in a limited way, and improve identification quality. You may object where the law gives you that right.
- Consent, where a law requires consent before a particular optional processing step. You may withdraw consent without affecting processing that already took place lawfully.
- Legal obligation, where we must retain or disclose information.
Providing a photo is necessary if you want an identification. Providing an email is necessary only if you choose email sign-in. A store purchase is necessary only if you choose Pro.
4. Photos and automated identification
When you submit a photo, the App sends the image and the technical data needed for that request to our API at rock.relaxlio.com. Our servers send the image to Google’s Gemini API to produce identification candidates and, when used, a photo-quality check. Results are returned to the App for you to review, save, or discard.
The result is an assistive estimate for personal, educational, and hobby use. It is not a laboratory certificate, appraisal, or decision about your legal rights, credit, employment, insurance, or access to an essential service. You can retake a photo, discard a result, or delete it from History.
Do not submit an image if you do not want it processed by our servers and by Google’s Gemini API. We do not sell specimen photos. We do not use the contents of specimen photos to build advertising profiles. Google’s handling of API inputs is also governed by Google’s terms and by our API configuration.
5. Analytics, attribution, and diagnostics
The App uses:
- Firebase Analytics, for product events such as screens and feature actions.
- Firebase Crashlytics, for crash and stability reports.
- Adjust, for install and conversion measurement, including a subscription event when a real charge occurs. A free trial is not reported as a purchase.
- Apple Ads attribution, on iOS, when an Apple attribution token is available. That token is an advertising attribution value. It is not the device identifier.
These tools receive device, app, and event data as described in their own notices. They do not receive your specimen photo in order to advertise to you. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
6. Who receives information
| Recipient | Why |
|---|---|
| Our hosting and database providers | Store and serve account, identification, and subscription records |
| Google (Gemini API) | Analyse specimen images and photo quality |
| Google (Firebase) | Analytics and crash diagnostics |
| Google (Google Sign-In and Google Play) | Optional sign-in, distribution, billing, and purchase restoration |
| Apple | Sign in with Apple where offered, App Store distribution, billing, purchase restoration, and Apple Ads attribution on iOS |
| Adjust | Install and conversion measurement |
| Email provider you choose | Deliver a message you start from Contact Support or Send Feedback |
| Professional advisers | Legal, accounting, or security advice when needed |
| Authorities | When required by law, or to protect rights, safety, and the security of the Service |
We require service providers that act for us to use personal information only on our instructions and for the purposes in this Policy, except where the provider is an independent store or sign-in service acting under its own terms.
7. International transfers
We and our providers may process information in countries other than your own, including countries where our hosting, Google, Apple, and Adjust operate. Those countries may have different data-protection laws. Where the GDPR or UK GDPR requires a transfer tool, we use an approved mechanism such as Standard Contractual Clauses, together with any extra measures that are required.
8. How long we keep information
- Account, guest, History, and Collection data: for as long as you keep the account or the saved item, and then for a short period while deletion completes.
- Purchase and entitlement records: for as long as needed to provide Pro, restore purchases, resolve store disputes, and meet accounting or tax duties.
- Security logs: for a limited period suited to investigating abuse.
- Support emails: for as long as needed to resolve the request and keep a record of the outcome.
- Crash and analytics data: for the periods set by those tools, or sooner if we delete them.
Backups may retain a deleted record until the backup cycle overwrites it. We then delete it or keep only what we must.
8.1 Delete data and delete the account
In the App:
- Delete all data removes identifications, History, Collection, result cards, pending sync changes, and app preferences on that installation. If you were signed in, the sign-in account itself remains and you are signed out. This does not cancel a store subscription and does not erase the device identifier.
- Delete account is available when you are signed in. It permanently deletes the Rock Identifier account and the app data linked to it, after you confirm and, when asked, sign in again with the original method. This cannot be undone. It does not cancel a store subscription and does not erase the device identifier.
You can also email [email protected] from the email address on the account, with the subject “Account deletion request”. Tell us the store (Apple or Google) and enough detail to find the account. We may ask you to confirm that you control the email address. We will delete or anonymise the account and linked app data unless we must keep a specific record for law, security, accounting, or an ongoing store dispute.
Uninstalling the App does not delete server-side account data and does not cancel an Apple or Google subscription. Cancel the subscription in the store account settings.
A stable device identifier may remain after deletion so that the same device is not treated as a new device for quota, fraud prevention, or membership device limits. That identifier is not an advertising ID and is not sold.
9. Security
We use HTTPS for data in transit, access controls on our systems, and server-side storage of AI credentials. The mobile App does not embed the Gemini API key. No method of transmission or storage is completely secure. Please keep your email account and device passcode secure.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing, to receive a portable copy, to withdraw consent, and to lodge a complaint with a data-protection authority. EEA and UK users can contact their local supervisory authority. You can also contact us first at [email protected].
We will not discriminate against you for exercising a privacy right. We do not offer a financial incentive in exchange for personal information.
10.1 United States
If a US state privacy law applies to you, the categories in Section 1 are the categories we collect. We collect them from you, from your device, from Apple or Google when you sign in or purchase, and from the measurement tools in Section 5. We use and disclose them for the purposes in Sections 2 and 6.
We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not use sensitive personal information to infer characteristics about you. You may request access, correction, or deletion by emailing [email protected]. You may use an authorised agent where your state allows it; we may ask the agent for proof and may confirm the request with you.
11. Children
Rock Identifier is not directed to children under 13, or under the higher age your country sets for consent to information-society services. We do not knowingly collect personal information from children under that age. If you believe a child has provided personal information, email [email protected] and we will delete it.
12. Permissions
- Camera: to photograph a specimen.
- Photo library: to choose an existing picture for identification.
The App can be used without granting a permission until you choose the feature that needs it. Denying camera or photo access limits identification from that source. It does not by itself delete an account.
13. Changes
We will post any change on this page and revise the “Last updated” date. If a change materially reduces your rights, we will provide any additional notice the law requires. The current Policy is at https://rock.relaxlio.com/privacy/.
14. Contact
Privacy requests and support: [email protected]
Account deletion from outside the App: email [email protected] with the subject “Account deletion request”, or follow Section 8.1.
Website: https://rock.relaxlio.com
Terms of Use: https://rock.relaxlio.com/terms/