Get the app
Legal

Privacy Policy

What the Primo Worth app and this website do with your data, and the choices you have.

Last updated and effective: October 19, 2026

This Privacy Policy explains what personal data the Primo Worth app for iPhone, iPad and Android and the website primoworth.com process, why, who else receives it, how long it is kept and what rights you have. We wrote it to describe what the app and the website actually do. If something here is unclear, write to us and we will explain.

1. Who We Are

The controller of your personal data is Primo Technology Ltd. (“we”, “us”). You can reach us about anything in this policy at the address under Contact. We have not appointed a data protection officer, because the law does not require one for our processing; privacy questions come straight to us at the same address.

2. What This Policy Covers

This policy covers the Primo Worth app and primoworth.com. It does not cover the App Store or Google Play, which process your purchase and your store account under their own policies, or websites we link to, such as the eBay listings a result opens.

In short: Primo Worth has no accounts and never asks for your name or email. Your scan history stays on your device. Each photo you scan is sent to our server and to Google’s AI services to identify the item and estimate its value. Our servers do not keep it, and Google keeps it only for the limited period its terms allow. We do not sell your data or show ads.

3. What We Collect, Why, and Our Legal Basis

3.1 Photos and Scan Data

  • What: the photo you take or pick from your library (in Jewelry mode, also a close-up of a hallmark if you add one), and with it the scan mode, your language and your currency. The app reduces the photo’s size before it is processed.
  • Where: the photo and these details go to our server functions, which pass the photo to Google for analysis and return the estimate. Our servers do not store the photo. Our logs record the search words used to find comparable sales, the AI’s best guess at what the item is and, if a request fails, the error message.
  • Why: to identify the item and produce the value estimate you ask for.
  • Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

Please do not scan people, documents or anything else you would not want analysed by an AI provider. The app is built for objects.

3.2 Scan History on Your Device

The app keeps your last 100 scans on your device: a small copy of each photo, the date, the mode and the result. Older scans are removed automatically. This history never leaves your device, and you can delete it at any time, as described in section 8.

3.3 Subscriptions

  • What: Apple or Google processes your payment; we never see your card details. RevenueCat, our subscription provider, creates an anonymous identifier for your installation and receives the store’s record of your purchases, your platform, your IP address, the Google Analytics identifier of your app installation and, on iPhone and iPad, an Apple Search Ads attribution token.
  • Why: to unlock premium, restore purchases, see which Apple Search Ads campaign, if any, led to a purchase, and keep the records accounting law requires.
  • Legal basis: performance of our contract with you, and compliance with our legal obligations for financial records (Art. 6(1)(b) and (c) GDPR); for the campaign attribution, our legitimate interest in understanding our marketing (Art. 6(1)(f) GDPR).

3.4 Analytics and Diagnostics

  • What: Google Analytics for Firebase records how the app is used (screens, features used, app version, device type, language, currency, approximate region) with an app installation identifier. Scan events carry the item’s category, the marketplace and the mode, and the answers you choose in the short welcome questions are recorded. Analytics does not receive your photos or the names of the items you scan. Firebase Crashlytics sends crash and error reports with the device state at the time. On iPhone and iPad, Google Analytics uses the advertising identifier only if you allow tracking when the app asks; on Android you can reset or delete the advertising identifier in your device settings.
  • Why: to see which features work, fix crashes and learn which campaigns bring people to the app. We do not use this data to show you ads, and the app shows none.
  • Legal basis: our legitimate interest in understanding and improving the app and our marketing (Art. 6(1)(f) GDPR), and your consent where the operating system asks for it, such as Apple’s tracking prompt (Art. 6(1)(a) GDPR). You can object to analytics at any time by writing to us.

3.5 Permissions and Notifications

The app asks for the camera to scan, the photo library to value photos you already have (on Android the system photo picker gives the app only the photo you choose), notifications for reminders and, on iPhone and iPad, permission to track as described above. Reminders, such as the notice before a free trial ends or a note that names the last item you valued, are scheduled on your device and do not pass through our servers. You can change any permission in your device settings; the related feature then stops working.

3.6 The Website

  • Visits: Google Analytics 4 records the pages you view, how you arrived, your device and browser, an approximate location derived from your IP address (Google Analytics does not store the IP address itself) and actions such as tapping a download button. Its cookie expires after two hours. Legal basis: our legitimate interest in running and understanding the website (Art. 6(1)(f) GDPR).
  • Download prompts: your browser’s storage remembers which version of a download prompt you were shown and whether you closed it, and, for the length of your visit, whether you arrived from one of our search ads. Links to the App Store and Google Play carry the name of the page and button you came from, so we can see which pages lead to installs. Legal basis: our legitimate interest in running and improving the website (Art. 6(1)(f) GDPR).

4. AI Processing

Every identification and estimate is generated by AI and by searches for comparable sales. To produce it, we send the following to these providers, who act as our processors:

  • Google (Gemini): your photo and the scan details in 3.1, to identify the item, its condition and, in the Jewelry, Antique and Coin modes, its materials and marks. When no comparable sale is found, Gemini receives the description of the item, without the photo, and looks up an estimate with Google Search.
  • Google Cloud Vision: your photo, to find matching images on the web that help name the item.
  • RapidAPI (eBay sold listings): search words built from the item’s description, and the eBay marketplace that matches your language and currency, to find recent sold listings. No photo is sent.

Under the API terms we use, Google does not use your photos to train its models. It may keep them for a limited period to detect abuse and then delete them. On iPhone and iPad the app asks for your permission before a photo is sent for the first time. AI makes no decision about you that has legal or similarly significant effects.

5. Who Receives Your Data

We do not sell your personal data and we do not share it for advertising. Besides the AI providers in section 4, these service providers process data on our behalf, each only for the purpose described:

  • Google Firebase (Google Ireland Ltd. and Google LLC): server functions, Analytics, Crashlytics and Remote Config.
  • Google Analytics 4: website analytics.
  • Google Fonts: the app loads its typeface from Google, which receives your IP address and device details with the request.
  • RevenueCat: subscription status and purchase records.
  • Google Gemini API, Google Cloud Vision and RapidAPI: AI and price data as described in section 4.
  • Apple and Google, as the stores, process your purchase under their own privacy policies.

We may also disclose data where the law requires it, for example to a court or authority with a valid request.

6. International Transfers

Our server functions run in the United States, and several of these providers are based there or process data there. Where a recipient is certified under the EU-US Data Privacy Framework, we rely on the European Commission’s adequacy decision for it; otherwise we rely on the European Commission’s Standard Contractual Clauses in our agreement with the provider. You can ask us for more detail on the safeguard that applies to a provider.

7. How Long We Keep Data

  • Photos sent for an estimate: not stored by our servers; Google keeps them only for the limited abuse-monitoring period of its API terms.
  • Scan history: on your device, the last 100 scans, until you delete it or remove the app.
  • Server logs: up to 30 days.
  • Analytics: Google Analytics keeps event data for no longer than 14 months; Crashlytics keeps crash reports for 90 days.
  • Subscription records: as long as you have a subscription and afterwards for as long as accounting and tax law requires.

8. Delete Your Data

In the app: tap the settings button on the home screen, then choose Clear History to delete every saved scan, or Delete Profile to delete your history and reset the app to its first start. You can also delete a single scan from your history. Removing the app deletes everything it stored on your device.

What we hold: there is no account and no scan data on our servers to delete. Analytics, crash reports and subscription records are tied to anonymous identifiers rather than to your name, and Delete Profile does not reach them. Write to us at the address under Contact and we will delete the analytics data for your installation and ask RevenueCat to delete what it holds for it, except purchase records we must keep under accounting and tax law.

Subscriptions: deleting your data or the app does not cancel a subscription. Cancel it in your App Store or Google Play account settings.

9. Children

Primo Worth is intended only for people aged 16 and over. It is not directed at anyone younger and we do not knowingly collect their data. If you believe someone under 16 has used Primo Worth, write to us and we will help delete the data.

10. Security

Data travels encrypted between your device, our servers and our providers. Our servers keep no photos or scan history, and access to production systems is limited to the people who run the service. No system is perfectly secure, so if we learn of a breach that affects you, we will notify you as the law requires.

11. Your Rights

Under the GDPR you have the right to:

  • access the personal data we hold about you and get a copy;
  • have inaccurate data corrected;
  • have your data deleted, as described in section 8;
  • restrict our processing;
  • receive the data you gave us in a portable format;
  • object to processing based on our legitimate interests, including analytics;
  • withdraw a consent you gave at any time, without affecting processing that happened before.

To use a right, write to us at the address under Contact. We answer within one month. Because the app has no accounts, we may need an identifier from the app or your store receipt to find the data that belongs to your installation. If you live outside the EU, for example in the United States, you can make the same requests and we will honour them.

12. Changes to This Policy

When we change how we process data, we update this policy and the date at the top. If a change materially affects you, we also tell you in the app before it applies.

13. Contact

Primo Technology Ltd. Email: info@techprimo.ai.