Privacy Policy

This Privacy Policy describes how the VeriBag iOS application and public verification service (together, the “Service”) handle information. We collect the minimum required to provide the Service and we don’t sell user data.

1. What we collect

• Subscription identifier. Apple provides an anonymous App User ID so we can check whether you have an active subscription. We don’t receive your Apple ID email unless you contact support from the same address.
• Scan photographs. Sent to our backend over TLS for analysis. For V1, photos are processed ephemerally and are not persisted on our servers after the report is produced.
• Structured report. The 22-checkpoint output, market comparables, and a tamper-evident hash are stored in order to serve the public verification link.
• Diagnostic events. Anonymous, non-identifying telemetry (crash reports, screen visits) to improve the App.

2. Private Scan Mode

Tapping the “Private” toggle before a scan prevents the report from being saved locally and prevents the public verification link from being created. Private scans are fully local and nothing syncs.

3. Public verification page

When you share a case link (veribag-verify.pages.dev/v/<id>), the public page shows only the structured report — brand/model, generation timestamp, checkpoint table, market comparables, and tamper-evident hash. It never exposes your photographs, your account identifier, your device, or your location.

4. Payment information

Subscriptions are processed by Apple. We never receive your payment card or full Apple ID.

5. Data retention

• Scan photographs: not retained after analysis (V1).
• Structured reports: retained while the case link is intended to remain live. You can request deletion from support.
• Subscription identifiers: retained for the duration of your subscription and up to 90 days after expiration for renewal and reactivation purposes.

6. Children

The Service is not directed at children under 13 and we do not knowingly collect data from them.

7. Your rights

You can request access, correction, or deletion of data tied to your subscription identifier at loveykovl@gmail.com.

8. Contact

loveykovl@gmail.com