Privacy Policy

When you identify a stone from a photo, that photo is uploaded to our server, which forwards it to Anthropic's Claude API for analysis and gets back a list of candidate rock and mineral names.

• We run no database, no account system, and keep no logs of image content. The request is processed, the response is returned, and the image is not written to disk.
• The upload carries no name, no email address, no account, and no device identifier — nothing that ties it to you personally.
• Anthropic processes the image as our AI model provider. Their handling of it is governed by their own policy, not ours: Anthropic Privacy Policy.

• Mineral library. All 201 mineral records ship inside the app and are searched entirely offline.
• Physical-test identification. The dichotomous key — identifying a mineral from hardness, streak, cleavage and similar tests — runs entirely on your device. No photo, no network request.
• Your collection. Finds you save are stored in a local database on your phone. We don't upload it and we don't back it up.
• Free-tier counter. Stoneye includes a limited number of cloud (photo-based) identifications per month; the count is stored on your device.
• Preferences. Your theme and language choices are stored on your device.

• Stoneye asks for your location only at the moment you choose to save a find to your collection, and only if you allow it.
• If you allow it, the coordinates are stored with that entry in the local database on your phone. They are never uploaded.
• If you deny it, nothing else changes — the saved entry simply has no coordinates.

• Stoneye offers two subscription tiers, Stoneye Pro and Stoneye Studio, each billed monthly or yearly. A subscription only raises how many photo identifications you can run in a month; everything else in the app is free. There is no one-time purchase, no weekly plan and no free trial that converts into a charge.
• Purchases are processed by Apple through the App Store. We use RevenueCat only to check which features you're entitled to — we never see your card details.
• Subscriptions renew automatically until you cancel them, through your App Store account settings.
• Refunds are handled by Apple, under Apple's own policies.

Stoneye contains no analytics SDK, no advertising SDK, and no tracking of any kind. We don't know how many times you opened the app, what you searched for, or how you use it.

stoneye.app serves this page, the Terms of Service, their Turkish equivalents, a landing page, and the identification endpoint the app calls. It sets no cookies of its own. The one exception is Google Analytics: we use it to count visits and see which pages are read, and it loads only if you allow it in the bar at the bottom of the page. If you decline, or never choose, not a single request goes to Google.

If you allow it, Google stores an identifier cookie (_ga) in your browser and processes your visit — the page, where you came from, device type, a city-level location derived from your IP address — on servers that may be outside your country. The legal basis is your consent (GDPR Art. 6(1)(a); under KVKK, explicit consent). Google signals and ad personalisation are turned off; the data is not used for advertising and has no link to the app, which contains no analytics at all. You can change your mind at any time: reopen the cookie bar. Withdrawing deletes the cookie and stops the measurement.

Turkish data-protection law (Law No. 6698, known as KVKK) and the GDPR both call the party responsible for the processing described on this page the data controller. For Stoneye that is Ahmet Karaca, an individual developer based in Türkiye, reachable at support@stoneye.app. There is no support desk in between: that address is read by the person who wrote the app.

Why we are allowed to process your photograph: because you asked us to identify it. It is sent for that one purpose — to get candidate mineral names back and show them to you — and that is the whole of it. We don't train anything on it, we don't build a profile from it, and we don't keep it afterwards. (In GDPR terms, processing necessary to provide the service you requested, Art. 6(1)(b); under KVKK, processing directly related and necessary to performing that service, Art. 5(2)(c).)

• The photograph goes from your phone to our endpoint, and from there to Anthropic, which runs the model that returns the candidate names. Anthropic may process it on servers outside Türkiye and outside the European Economic Area. What Anthropic does with data it processes is set out in their own policy, not ours: Anthropic Privacy Policy.
• That transfer happens for one purpose: getting candidate mineral names back. The photograph isn't sent anywhere else, to anyone else, for anything else.
• We retain nothing. When the answer comes back the request is over and the image is gone — there is no copy on our side to disclose, sell, or lose.
• Photo metadata is stripped on your phone before the upload, including the GPS coordinates a photo from your gallery usually carries. The picture goes; where it was taken doesn't.

KVKK (Art. 11) and the GDPR (Arts. 15–21) give you the right to ask whether your personal data is being processed, to get a copy, to have it corrected or erased, and to object to the processing. Those rights apply to us. The honest part is that there is almost nothing here for us to act on:

• There is no account, no email address, no device identifier and no usage history on our side — nothing to look up, export or correct, and nothing that could identify you if someone asked us for it. The one exception is the website analytics described above, if you allowed them: those visits sit in Google Analytics under a random cookie identifier, not under your name, and withdrawing consent stops them.
• We keep no copy of the photograph. It exists in memory for the few seconds the request takes and is never written down, so there is nothing left to erase afterwards.
• If you'd rather not send a photograph at all, don't: the dichotomous key identifies minerals from physical tests, entirely offline. It's a full feature of the app, not a fallback.

Your data is on your phone. Your collection, any coordinates you attached to a find, the free-tier counter and your preferences all live in the app's local storage. Deleting Stoneye deletes them. We can't delete them for you, and we can't bring them back if you do — there is no copy on our side.

To exercise any of this, or to complain, write to support@stoneye.app. If you're in Türkiye and our answer doesn't satisfy you, you can complain to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu). If you're in the EEA or the UK, you can complain to your national data-protection authority.

Stoneye isn't directed at children under 13, and we don't knowingly process personal data from them. There is little to collect knowingly: no accounts, no sign-up, no profile and no tracking, and the only thing that leaves the device is the photograph being identified — which we keep no copy of. If you believe a child has sent us something that identifies them, write to support@stoneye.app and we'll look into it, though in nearly every case there will be nothing left on our side to find.

If this policy changes, we'll update the date at the top of this page. Continuing to use Stoneye after a change means you accept the update.

Questions about this policy or your data: support@stoneye.app