Privacy Policy

Last updated: July 2026  |  App: Lithos – Rock Identifier

1. Overview

Lithos ("we", "our", "the app") helps you identify rocks, minerals, and fossils using AI vision. This Privacy Policy explains what data we collect, why, and how we protect it.

2. Data We Collect

• Account data: We use anonymous Firebase Authentication (no email or password required).
• Photos: Images you submit for rock identification are uploaded to Firebase Storage and used solely to process your identification request. They are stored under your anonymous user ID and are not shared.
• Identification results: Rock name, category, formation details, and rarity are stored in Firestore under your anonymous user ID.
• Usage data: Daily scan count and premium status are stored to enforce free-tier limits.
• AI Consent flag: Whether you have consented to AI-powered analysis (stored as a boolean in Firestore).
• Purchase data: Handled entirely by Apple App Store and RevenueCat. We do not store payment card details.

3. AI-Powered Analysis

When you opt in to AI analysis, your photo is sent to OpenAI's GPT-4o Vision API (server-side only) to identify the rock. OpenAI processes the image according to their privacy policy. We do not send any personally identifiable information along with the image. You can revoke AI consent at any time in Settings.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for advertising purposes. Data is shared only with:

• Firebase / Google Cloud – hosting, database, and storage
• OpenAI – image analysis (when AI consent is granted)
• RevenueCat – subscription management
• Apple App Store – payment processing

5. Data Retention

Your data is retained until you delete your account. You can delete your account and all associated data from Settings → Delete Account. Deletion is permanent and irreversible.

6. Children

Lithos is not directed to children under 13. We do not knowingly collect data from children.

7. Security

Data is protected using Firebase Security Rules. Photos are stored with access restricted to your anonymous user ID. All communications use HTTPS/TLS.

8. Your Rights

You may request deletion of your data at any time via Settings → Delete Account or by contacting us at sancaktutanyasin@gmail.com.

9. Changes

We may update this policy and will post the new version at this URL with an updated "Last updated" date.

10. Contact

Questions? Email sancaktutanyasin@gmail.com.