This Privacy Policy explains what data The Horology Vault ("the app," "we," "us") collects, how we use it, and who we share it with. The app is published by Collection Vault Co.
We believe collectors should own their data. We keep what we need to make the app work, nothing more.
WHAT WE COLLECT
Account information
- Email address (when you sign in via email) or an Apple ID identifier (when you use Sign in with Apple).
- Apple Sign in with Apple users can choose to hide their real email via Apple's Private Relay. We never see the original address in that case.
Collection data
- Information you enter about your watches: brand, model, reference, dial, case material, purchase price, purchase date, condition, notes, and any photos you upload.
- Wear log entries (which watch you wore, when, in what context).
- Service log entries and receipts you attach.
- Insurance details and any documents you upload.
- Purchase documents you attach to a watch.
- Vault Candidates (hunted watches) and the research items you attach (URLs, articles, images, notes).
- Strap and accessory inventory.
- Condition events you log.
Photos and documents
- Any images or PDFs you upload via the app (watch photos, receipts, insurance documents, etc.).
Subscription information
- Subscription tier (free, paid, or pro) and the date your subscription started and renews.
- The actual payment method is handled by Apple, we never see your card number, billing address, or App Store credentials.
App usage
- Limited diagnostic information used to keep the app stable. We do not track you across other apps or websites.
AI watch recognition
- When you scan a watch, the photo you take is sent to our backend to be analyzed. The backend forwards the image to Anthropic's Claude Vision API for identification. The image is not stored on Anthropic's servers per their API terms.
- A record of the scan (timestamp, your user ID, and the result) is stored so we can enforce the free-tier quota.
HOW WE USE YOUR DATA
- To run the app: storing your collection, showing your data on your devices, generating Provenance Package PDFs you request, and supporting features you opt into.
- To enforce subscription tier limits (e.g., free-tier watch count, AI scan quota).
- To process subscription purchases and renewals via Apple and RevenueCat.
- To send transactional emails like sign-in codes.
- To debug, diagnose, and improve the app.
We do not sell your data. We do not use your data for advertising. We do not build profiles of you.
WHO WE SHARE DATA WITH
We use the following service providers ("sub-processors") to operate the app. Each only receives what they need to provide their service.
- Supabase, database, authentication, file storage. All collection data and uploaded files are stored here. Access is gated by Row-Level Security, so only your own user can read or write your data.
- Anthropic, receives the image when you scan a watch, to run AI identification. Per Anthropic's API terms, the image is not retained.
- Apple, handles authentication if you use Sign in with Apple, and processes in-app purchases.
- RevenueCat, manages subscription state. Receives an anonymous user identifier and your purchase events.
- Resend, sends transactional emails such as sign-in codes.
We do not share your data with any other third parties. We do not share your data with advertisers, data brokers, or analytics platforms.
If we are ever legally required to disclose your data (e.g., a valid subpoena), we will do so only to the extent required.
DATA RETENTION
- Your account and collection data are kept for as long as your account exists.
- AI scan records (used for quota) are kept indefinitely so the quota stays accurate.
- Sign-in codes expire and are deleted shortly after issuance.
- If you delete your account, all your data is deleted within 30 days, except where retention is required by law.
YOUR RIGHTS
You can:
- Export your data at any time, in either JSON or CSV format, from Profile → Your Data.
- Delete individual entries (watches, wears, service entries, etc.) directly in the app.
- Delete your entire account, including all data, from Profile → Delete Account.
If you are in the EU/UK, you also have rights under GDPR (access, rectification, erasure, restriction, portability, objection). Contact us to exercise any of these.
If you are in California, you have rights under the CCPA. We do not sell or share your data for cross-context behavioral advertising.
CHILDREN
The Horology Vault is rated 4+, but it is intended for adult collectors. We do not knowingly collect data from anyone under 13. If you believe a child has provided us data, contact us and we will delete it.
SECURITY
Your data is encrypted in transit and at rest. Authentication uses Apple's standard mechanisms or one-time email codes. We never store passwords.
No system is perfectly secure. If we ever experience a breach affecting your data, we will notify you within the timeframe required by applicable law.
CHANGES TO THIS POLICY
If we materially change this policy, we will update the "Last updated" date above and, where reasonably possible, notify you in the app. Continued use after the change means you accept the updated policy.
CONTACT
Email: info@horologyvault.com
Mailing: 500 Congressional Blvd, Suite 390 #1125, Carmel IN 40632 United States
Horology Vault Group LLC