Privacy Policy.

We collect only what we need to run NoteID. Each item is explained in more detail in the sections that follow.

Information you provide

• Photos you take or choose to identify.
• Scans and organization: your scan results, the notes you add, and the collections you create and save scans to.
• Account details, only if you create an email account: your email address and password (stored only as a secure hash).
• Messages to support, including the technical details the app adds to the email (see Device and Technical Information).

Information collected automatically

• A random account identifier created for your guest or email account.
• Usage information, such as the screens and features you use.
• Device and technical information, such as your device model, operating system, app version, IP address and device identifiers.

Information from partners

• Purchase information from Apple through our subscription provider RevenueCat, such as which subscription you have and whether it’s active. We never receive your payment card details.
• AI results generated from your photo by our AI providers (see AI Banknote Identification).

Information we don’t collect

We don’t ask for your name, phone number or contacts, we don’t request access to your location, microphone or whole photo library, and we don’t use facial recognition.

NoteID asks for camera permission so you can photograph a banknote. You can also select a photo using the system photo picker; NoteID receives only the photo you choose. You can change camera permission in your device settings and continue to use gallery photos without it.

What happens to a photo

• You can submit the front of a banknote and optionally its back.
• Photos may be resized, compressed and normalized before processing.
• Photos are sent over an encrypted connection to our server and to our AI providers for identification and analysis.
• We store submitted scan photos and their results in your history so you can return to them. Deleting a scan removes its stored photos and previews.

Photograph only what you intend to share

Photos can include personal information in the image itself or in embedded metadata. Keep documents, screens, people and other sensitive details out of the frame. NoteID identifies banknotes and does not use facial recognition.

NoteID uses third-party AI services to identify banknotes, analyze visible details and generate explanatory information. When you submit photos for identification, you ask us to share them with these providers for that purpose.

How identification works

• Our server sends your banknote photos, identification instructions and chosen language to OpenRouter, which routes the request to an AI model provider.
• The primary model is Google Gemini, with fallback models including OpenAI. OpenRouter may route requests among companies hosting these models.
• We do not include your email address or account identifier in the AI request.
• Results may include the note’s country, denomination, series, visible serial number, condition observations and other banknote details. These are saved with your scan.

Provider processing

AI providers process request data under their own terms and privacy policies, including their retention and abuse-prevention practices. Requests may be processed in the United States and other countries. Provider policies are linked in Who We Share Information With.

Banknote guides and reference images

General banknote guides are generated from a banknote’s name and language and stored in a shared library. They describe the type of note, not your personal copy, photos, notes or account. To find reference images, our server may send the banknote’s general name to an image-search provider, Serper. This search does not include your uploaded photos or account details.

Training and review

We do not use your banknote photos or scan results to train AI models. Results are generated automatically. We may review a specific scan if you ask us for help or where necessary to investigate abuse or fix a problem.

You don’t need to sign up to use NoteID, and we never ask for your name.

• Guest account. The first time you open the app, our server creates a guest account with a random identifier so your scans can be saved. The credentials for it are kept in your device’s secure storage (the iOS Keychain), which may keep them even if you delete and reinstall the app.
• Email account (optional). If you create an account, we add your email address and a hashed password to the same account, so your existing scans stay with you and you can sign in on another device. We use your email to sign you in, to send password-reset links and to send security messages about your account. We don’t send marketing emails.
• Signing out starts a new guest account on your device. Your previous account and its scans stay available when you sign in again.

Without an email account, your scans are tied to your guest account on this device and may not be recoverable if you lose access to it.

We use Google Analytics for Firebase, provided by Google, to understand how NoteID is used and to improve it. It records:

• screens viewed, and actions such as opening the subscription screen, starting or completing a purchase, sharing a scan, signing in, creating an account and signing out;
• app opens, sessions, engagement and app updates, which Firebase collects automatically.

If you have an email account, your account identifier is attached to analytics data so we can count usage by account. Analytics data is never linked to your name, and we don’t use it for advertising. To learn how Google uses this information, see How Google uses information from sites or apps that use its services.

NoteID doesn’t currently offer a setting to turn off analytics.

When you use NoteID, we and our service providers receive technical information such as:

• your device model, operating system and version, the app version, and your language and region settings;
• your IP address, which our servers and providers receive when your device connects to them. Firebase uses it to estimate your general location, such as your country or city;
• identifiers such as the Firebase app-instance ID and your device’s identifier for apps from the same developer (IDFV). RevenueCat also receives device identifiers to manage purchases.

Our server keeps technical logs of requests (such as the time, the address requested, the result and your IP address) to operate and secure the Service.

NoteID doesn’t show ads and doesn’t ask for permission to track you, so your device’s advertising identifier isn’t available to the app or its providers.

Notifications

If you allow notifications, NoteID schedules reminders on your device, for example a weekly reminder to explore a banknote, while you don’t have NoteID Pro. They’re created on your device, not sent from our servers, and you can turn them off at any time in your device settings.

Contacting support

When you contact us from Profile › Help & Support, the app prepares an email that includes your account email (or your guest account identifier), the account type, the platform, the app version and the time. These details help us find your data and assist you. You can review or remove them before sending.

We use information only for these purposes, each with a legal basis where the law requires one:

Identifying banknotes and showing results Contract

Processing your banknote photos with our AI providers and saving your scans, notes and collections, because you asked us to.

Accounts and subscriptions Contract

Creating and securing your guest or email account and checking your NoteID Pro subscription.

Support Contract · Legitimate interests

Answering your messages and handling your requests.

Analytics and improvement Legitimate interests

Understanding how NoteID is used so we can fix problems and improve it.

Security and abuse prevention Legitimate interests · Legal obligation

Protecting the Service and its users, preventing fraud and misuse, and complying with the law.

Camera and notifications Consent

Using features you allowed through your device’s permissions. You can withdraw consent in your device settings at any time.

We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. AI is used to identify and describe banknotes in the photos you choose.

We share information only with the service providers that help us run NoteID, for the purposes described in this policy. We require them to protect your information with safeguards at least as protective as those described here and to use it only to provide their services to us.

Fly.io Hosting and database

Hosts our servers and the database that stores your accounts, scans and photos. Region: Frankfurt, Germany.
Fly.io Privacy Policy

OpenRouter AI request routing

Receives banknote photos and identification instructions and passes them to the AI model provider.
OpenRouter Privacy Policy

Google (Gemini) AI model provider

Analyzes photos and generates scan results, through OpenRouter.
Google Privacy Policy

OpenAI Fallback AI model provider

Used through OpenRouter if the primary model fails, and receives the same request data.
OpenAI Privacy Policy

RevenueCat Subscriptions

Manages subscriptions. Receives your account identifier, your email address if you have an email account, purchase information from Apple, device identifiers and IP address, and an Apple Search Ads attribution token that shows whether you installed the app from an Apple Search Ads campaign.
RevenueCat Privacy Policy

Google Analytics for Firebase App analytics

Receives usage events, device information, identifiers and, for email accounts, your account identifier.
Firebase Privacy and Security

Serper Reference image search

Receives the general name of a banknote to find public reference images. It does not receive your scan photos or account information.
Serper Privacy Policy

Email service provider Account emails

Sends password-reset and account security emails on our behalf.

Apple App distribution and payments

Distributes the app and processes payments under Apple’s own terms.
Apple Privacy Policy

Other disclosures

We may disclose information if we believe the law or a legal process requires it, to protect the rights, safety or property of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.

We don’t sell your personal information, and we don’t share it for targeted or cross-context behavioral advertising.

Your scans, photos, notes, collections and account details are stored on servers operated for us by Fly.io in Frankfurt, Germany. On your device, NoteID stores your preferences (such as language and appearance), your account credentials in secure storage, and cached images.

Scans, photos, notes and collections

Until you delete them or your account, or ask us to delete them.

Account details

Until you delete your account or ask us to delete it. Deleting an email account in the app removes it from our live database right away.

Server backups and logs

Kept for short periods for security and recovery, and overwritten within 30 days.

Analytics data

Kept by Google Analytics for Firebase for up to 14 months, then deleted automatically.

Purchase records

Kept by Apple and RevenueCat as needed to provide your subscription and meet legal and tax requirements. We can ask RevenueCat to delete your data on request.

Support emails

Kept as long as needed to handle your request and any follow-up.

AI providers

As described in AI Banknote Identification.

Shared banknote guides

Kept while they’re useful. They contain no personal information.

• Connections between the app and our servers are encrypted (HTTPS/TLS).
• Access rules on our database prevent other users from listing or viewing your scans and account.
• Passwords are stored only as secure hashes, and app credentials are kept in your device’s secure storage.
• Access to our production systems is limited to authorized Nexdev personnel.

No method of transmitting or storing data is completely secure, so we can’t guarantee absolute security. If we learn of a security breach that affects your personal information, we’ll notify you and the authorities as required by law. If you notice a security problem, contact us right away.

NoteID is intended for people aged 18 and over and isn’t directed to children. We don’t knowingly collect personal information from anyone under 18. The app’s App Store age rating describes its content, not its intended audience. If you believe a child has given us personal information, contact us and we’ll delete it.

Controls in the app

• Delete a scan: swipe it in History and tap Delete, or open it and choose Delete. Its photo is deleted too.
• Delete your account: if you have an email account, go to Profile › Account › Delete Account. This permanently deletes your account, email address, scan results, photos, notes and collections.
• Guest accounts: to delete all data of a guest account, email us from Profile › Help & Support so we can identify it, or follow the steps on our Support page. We complete deletion requests within 30 days.
• Permissions: turn camera and notification access on or off in your device settings.

Deleting your account or data doesn’t cancel a NoteID Pro subscription. Cancel it in your App Store account settings.

Privacy rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw any consent you’ve given. You also have the right to complain to a data protection supervisory authority.

To make a request, email support@nexdev.codes. If you use a guest account, send the request from Profile › Help & Support so we can find your data. We may need to verify your request, and we’ll respond within the time required by applicable law, and in any case within 30 days.

U.S. privacy notice

We don’t sell personal information or share it for cross-context behavioral advertising, and we don’t use or disclose sensitive personal information to infer characteristics about you. We won’t discriminate against you for exercising your privacy rights.

Our servers are in Germany, and several of our service providers, including OpenRouter, Google, OpenAI and RevenueCat, may process your information in the United States or other countries. These countries may have data protection laws that differ from those where you live. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission’s standard contractual clauses and our providers’ data processing terms.

We may update this policy as NoteID changes. When we do, we’ll update the “Last updated” date at the top of this page. If a change materially affects how we use your information, we’ll tell you in the app or on this page before it takes effect and, where the law requires it, notify the app stores and ask for your consent.

If you have questions about this policy or how NoteID handles your information, or want to exercise your privacy rights, contact us.

NoteID Support · Nexdev

Questions about privacy or your data? Email us and we’ll get back to you.

support@nexdev.codesCopy email