Legal
Gold Vantage privacy policy
Effective date: To be confirmed before public launch
Gold Vantage can be used without an account. This policy explains what happens to information in the Android app and its supporting services.
Who we are
Gold Vantage is provided by [Controller legal name — to be confirmed], [Controller postal address — to be confirmed]. The public privacy and support email address will be added before launch.
Information we use
Information on your device. Vault records, jewellery details, photos, receipts, negotiations and settings are stored in Android’s private app storage. They are used only to provide the features you choose and are not uploaded to Gold Vantage, Supabase, Railway or Firebase. Our lawful basis is to provide the service you request. Gold Vantage does not back up or sync this information and cannot view or recover it. It remains until you delete it, clear the app’s storage or uninstall the app.
If you enable app lock, Android checks your fingerprint, face or device credential. Gold Vantage receives only the result of that check; it does not receive or store biometric data.
Optional account. If you create an account, Supabase processes your email address, user ID, password-derived credentials, session tokens and related security information. Plain-text passwords are not retained. Gold Vantage and Railway process your user ID and entitlement state to provide and protect account access. The lawful bases are performance of our service agreement and our legitimate interest in preventing misuse.
Prices and service security. When the app requests gold prices, the price service receives the requested currency or chart range, IP address, request time and ordinary network metadata. We use this to return prices, keep the service reliable and investigate abuse. The lawful bases are performance of our service agreement and our legitimate interest in operating a secure service. Vault information is never included in these requests.
Optional analytics. If you choose Allow, Firebase Analytics receives limited app-use and lifecycle events, a random app-instance identifier, basic app and device information, and an approximate country or region derived from a masked IP address. Completed negotiations may include rounded maker-fee percentages and percentage differences from the seller’s first price. Gold Vantage does not send account identity, jewellery records, weights, quote or payment amounts, merchant details, photos, receipts, sign-in details, URLs or free text. The lawful basis is your consent. You can withdraw it at any time in Settings. This stops future collection and resets the local analytics identifier, but does not delete events already uploaded.
Messages to us. If you contact support or make a privacy request, we use your contact details and message to respond, resolve the issue and meet legal obligations.
Service providers and international transfers
We use Supabase for accounts and account data, Railway for service hosting and technical logs, and Google Firebase for analytics you allow. They process information for us under contract. We do not sell personal information, use it for advertising or allow these providers to use Gold Vantage data for advertising.
These providers may process information outside the UK. Where required, we rely on UK adequacy regulations or approved contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum. Contact us to request information about the relevant safeguard.
How long we keep information
- Account and entitlement data: while the account is open; deleted from live systems when the account is deleted. Encrypted Supabase backups expire within 7 days.
- Firebase event-level data: 2 months. Anonymous aggregated reports may remain longer.
- Railway technical logs: no more than 30 days.
- Support and privacy correspondence: only as long as needed to resolve the matter and meet legal obligations.
Your choices and rights
Accounts and analytics are optional. Signing out does not delete device information. You can delete your account in Settings or request deletion at our account-deletion page. You may separately erase all information stored by Gold Vantage on your device.
Subject to legal conditions, you have rights to access, correct, erase, restrict or receive your personal information and to withdraw consent.
Your right to object. You may object to processing based on legitimate interests. Contact us to exercise a right or complain. We will investigate and explain the outcome.
If you remain dissatisfied, you can complain to the Information Commissioner’s Office.
Security and changes
Gold Vantage uses app-private storage, device encryption where available, encrypted local session storage and HTTPS for network traffic. No security measure can remove every risk.
We will update this policy and its effective date when our practices change. We will ask again before materially expanding consent-based analytics.