StackWiseInformation on your device
StackWise saves deal names and item descriptions, metal/currency/unit choices, prices, percentages, purity, weight, quantity, totals, and dates on your device. It also remembers calculator prices, appearance and other preferences, deal-rating and gold-to-silver ratio (GSR) thresholds, cached market data, and its security-registration state. If you customize Deal PDF Branding, your logo, business name, contact details, footer, and disclaimer are saved locally too.
Your saved deals and branding are not sent to our pricing backend. Optional app-managed iCloud backups are described below. StackWise does not provide live synchronization of deals between devices. Depending on your Apple settings, ordinary app data may also be included in Apple's device backups. Backups and printed or exported PDFs are separate copies.
You do not need a StackWise account. An Apple Account is needed for App Store purchases and optional iCloud features. The optional PCGS connection uses your own PCGS API access token.
Slab photos and recognition
Slab Scanner uses the camera with your permission, or a photo you select through Apple's system photo picker. The picker lets you share selected images without giving StackWise access to your entire photo library. The logo picker works the same way.
StackWise processes slab images on your device using Apple's Vision framework to read text and barcodes and identify a possible coin name, grading service, grade, and certification number. StackWise does not upload these images to its servers, grading services, or an external AI service for recognition. The photo and recognized details are held for the current app session; the scanner does not maintain a saved scan history or automatically save camera captures to your photo library.
A recognized certification number may be sent automatically to ICG, or to PCGS when Pro and your PCGS connection are available, as explained below. Slab photos are not included in StackWise's app-managed iCloud backups. A logo you choose for PDF branding is included when you back up that branding.
Grading-service lookups and PCGS credentials
ICG lookups send the certification number directly from your device to ICG's public lookup service to retrieve coin details. The app can make this request automatically after recognizing an ICG slab, or when you tap Retrieve Data from ICG. The photo, your saved deals, and your pricing-registration identifiers are not part of that request.
PCGS coin-data lookup is an optional Pro feature that requires your own PCGS API access token. When you test the connection or retrieve details, StackWise sends that token in an authorization header and the requested certification number directly to PCGS over HTTPS. Test Connection uses a fixed example certification number. Lookups can run automatically after a PCGS scan when the connection is configured and Pro is available, or when you request them manually.
Your PCGS token is stored in Apple's Keychain with access restricted to this device while it is unlocked. It is not configured to synchronize through iCloud Keychain, is not included in StackWise backup files, and is not sent to our pricing backend. Remove it in Settings → Connected Services → PCGS → Remove Token. Removing it stops further authenticated lookups until a token is saved again; it does not revoke the credential at PCGS. Use PCGS's account or support options if you need to revoke or replace the token itself.
Lookup results are displayed in the app. PCGS results may be reused from an in-memory cache for five minutes to avoid repeated requests. These lookup clients do not use your browser cookies. Like other network services, PCGS and ICG also receive connection information such as your IP address and request metadata. PCGS may associate requests with the account represented by your token. Their own privacy practices apply to their handling and retention of these requests.
View Certification and CoinFacts links open provider websites. A certification URL can include a certification number and, for NGC, a grade. Those values are sent to the website when you open the link.
Optional iCloud backup and restore
StackWise Pro can create backups in your personal iCloud Drive when you choose Back Up Now or enable Automatic Backups. Automatic backups are off until you enable them for the installation and iCloud account. They save changed data, may finish a pending save when you leave the app, and can retry in the background when iOS allows or when you next open StackWise.
Backup files contain saved deals and items, supported settings such as currency, weight units, appearance, calculator preferences, rating and GSR thresholds, and PDF branding including the selected logo and any contact details you entered. They also include backup dates, format information, random backup/source identifiers, and a checksum used to detect corruption.
Backup files exclude PCGS tokens, pricing-security credentials, subscription access, privacy-mode state, cached market prices, and slab photos. Restoring a backup does not restore credentials or grant Pro. The backup is a dated snapshot; changing a deal on one device does not automatically change the deals on another.
These files go to Apple's iCloud Drive, not StackWise's pricing servers. We do not receive a copy through our services. iCloud requires your Apple Account, iCloud Drive, and available storage. Apple's terms, privacy practices, and your account settings apply. StackWise does not add a separate password or additional encryption layer to its backup files.
You can turn off Automatic Backups and manage saved copies in Settings → Backups → iCloud Backups or Files → iCloud Drive → StackWise → Backups. Turning off automatic backups or losing Pro does not delete existing copies. An upload already handed to iCloud may finish. See Retention and deletion for backup limits and the local Undo Last Restore copy.
Websites opened inside the app
Market Resources, certification pages, and CoinFacts links can open third-party websites in Apple's in-app Safari browser. Opening a page makes a network request to that website and can disclose its URL, your IP address, and browser/device information. Websites may use cookies, analytics, advertising, or account sign-in and may receive information you choose to enter there.
The website operator's terms and privacy policy apply even though the page appears inside StackWise. StackWise does not copy the pages' cookies, passwords, or browsing history into its pricing service, and the in-app browser is not a StackWise account or a guarantee of anonymous browsing. You can close the browser to return to the app.
Pricing requests and app security
Online prices and charts require requests for the selected metal, currency and, for charts, date range. Our Cloudflare-hosted service obtains market data from GoldAPI.io and briefly caches responses.
We use Apple’s App Attest service to help authenticate the app and prevent abuse. Our backend retains a randomly generated installation identifier, an App Attest key identifier and public verification key, registration information, a replay-prevention counter, and the time of successful authenticated use. It processes short-lived challenges and verification messages. It does not receive the private App Attest key.
These identifiers distinguish an installation over time; they are not completely anonymous. Requests also expose network information, including IP addresses and request metadata, to services handling them. Operational records can include request times, routes, results, performance information and errors. Pricing-error records may contain the metal, currency, date range and error category.
Pricing and charts do not require camera or photo access. StackWise does not request device GPS location or contacts. Camera access and selected photos are used for the optional features described above. An IP address may nevertheless indicate an approximate location.
Purchases and subscriptions
Apple handles App Store payments. StackWise checks Apple-verified transaction and subscription information on your device to provide Pro access and restore purchases. That information can include product and transaction identifiers, purchase and expiration information, and refund or revocation status.
We do not receive your payment-card number through the app, and the app does not send StoreKit transactions to our pricing backend. Apple may separately provide developer sales and subscription reports, including subscription activity, country or region, and an Apple-generated subscriber identifier. We currently keep these reports only in App Store Connect, without downloading or separately storing copies. Apple’s App Store privacy information explains Apple’s practices.
Support messages and this website
If you email support, we receive your email address and the information you choose to include, such as your name, message, screenshots or diagnostic information. We use it to answer your request and troubleshoot problems. Our mailbox uses Gmail, so Google processes these messages too. Please do not send passwords, payment-card details or unnecessary sensitive information.
These pages have no account system, contact form, advertising or analytics scripts. Our page code does not set cookies or use browser storage. Cloudflare hosts and protects the pages and processes connection and request information; its network and security processing is separate from our page code. Following an external link or emailing us uses the destination service’s privacy practices.
How information is used and disclosed
We use information to provide app functionality and prices, verify Pro access, secure the service, diagnose problems and respond to support or privacy requests. We do not sell personal information, use it for targeted advertising, or use support emails for marketing. The app has no advertising or third-party behavioral analytics SDK and does not track you across other companies’ apps or websites for advertising.
Brandon Clark is the only StackWise operator with access to support and backend data. Service providers may separately access information to provide their services:
- Apple: distribution, payments, App Attest, on-device image processing, Keychain, iCloud Drive, in-app browsing, and system features such as device backup and printing.
- Cloudflare: hosting, security, registration storage, delivery and operational logging.
- GoldAPI.io: market data. Our code sends the requested metal/currency and date range, not your saved deals or App Attest identifiers. Network metadata may accompany those requests; the provider may retain operational and security records.
- Google/Gmail: support correspondence.
- PCGS and ICG: optional coin-detail requests, as described above. PCGS receives your PCGS token when authenticating a request.
- Grading-service and Market Resources website operators: page requests and any information you provide while using their websites.
We may disclose limited information when required by law or reasonably necessary to address a security incident or legal claim. When you print or save a deal PDF through the system print interface, the selected summary and any included branding or contact details pass to Apple’s system interface and the destination you choose. We do not store those PDFs in the pricing backend.
Retention and deletion
Local data
Deals and preferences have no automatic expiration. Use the app’s controls to delete deals or items. Deleting the app, rather than offloading it, removes ordinary local app storage; backups, printouts and separately saved files may remain.
PCGS credentials and scan results
Remove a saved PCGS token using Remove Token in the app. Do not rely on deleting the app to remove a Keychain entry. Removing or replacing a token also clears the in-memory PCGS lookup cache and cancels pending app lookups. Deletion from the app does not erase provider-side request records. Scan photos and recognized results are not kept as a persistent scan history.
App-managed backups and restore recovery
StackWise keeps the 10 most recent completed automatic backups from each installation. Cleanup removes only older completed automatic copies from that installation; manual copies, another installation's copies, and pending uploads are not automatically pruned. Manual backups remain until deleted. iCloud copies can remain after you delete the app, delete a local deal, remove your PCGS token, pause pricing, or lose Pro.
Deleting a backup through the app or iCloud Drive removes that cloud file, subject to Apple's synchronization and recovery behavior. It does not erase your current local deals. Disable Automatic Backups as well if you do not want the app to create replacement copies of current data.
Before applying a restore, StackWise saves the current deals and supported settings in a local recovery file for Undo Last Restore. That file remains until replaced by a later restore or undo operation, or removed with ordinary app storage when you delete the app. Deleting a deal or cloud backup does not separately erase this local recovery copy.
Security registrations
We remove active pricing-registration records after 180 days without successful authenticated use. Successful registration or a verified request renews that period; invalid requests do not. Returning users can register again without deleting local deals or changing their Apple subscription. Deleting the app does not immediately notify the backend. Security challenges are short-lived and are consumed or cleaned up by the service.
In-app registration deletion
In Settings → Privacy & Data, you can request deletion of this installation’s active pricing registration. The app uses its existing device-held key to verify the request and pauses online pricing. If deletion is not confirmed, pricing stays paused and you can retry. After confirmed deletion, you can explicitly reconnect to create a new registration.
This preserves local deals, calculator prices, settings and subscription access. Cached market data can remain available but may be outdated. The action does not delete other installations’ registrations or immediately erase logs and recovery copies. It also does not remove your PCGS token, disable grading-service lookups, stop automatic iCloud backups, or delete iCloud copies; those features have separate controls.
Logs and recovery copies
Our pricing backend’s Cloudflare Workers Logs have a seven-day retention period on our Paid plan. We do not configure separate log exports. Registration storage has a Cloudflare recovery window covering the preceding 30 days, so active deletion is not an immediate purge of every recovery copy. Our recovery procedure requires fresh registration rather than restoring old registration records; we do not keep separate downloaded registration backups.
These periods do not cover every provider-managed security, billing or internal record. Providers may retain records under their own policies and legal obligations; we do not promise their immediate deletion.
Support correspondence
We delete ordinary support correspondence and attachments 12 calendar months after the issue is resolved, using manual review of resolution and deletion dates. Reopened issues receive a new date when resolved again. We assess requests for earlier deletion separately. A specific legal requirement or documented legal hold may require limited records for a different period; we limit those records to the purpose and review when they can be deleted. This is not a blanket indefinite exception for all support or privacy requests.
Apple records
Apple controls its purchase and account records. Deleting StackWise or a pricing registration does not cancel a subscription or erase Apple’s records. Manage subscriptions through your Apple Account.
Your choices and privacy requests
You can change preferences, remove deals or items, choose whether to print, pause online pricing through registration deletion, and decide what to include in support messages. You can decline camera access or change it in iPhone Settings, choose which photos to share, remove your PCGS token, turn automatic backups off, delete backup copies, and choose whether to open external websites. ICG lookup requests are automatic after a recognized ICG scan; avoid that scan/lookup feature if you do not want the certification number sent to ICG. Online pricing requires the requests and security checks described here.
Email stackwise.app.support@gmail.com to ask about access, correction, deletion or another privacy concern. Rights and exceptions depend on applicable law. We may need reasonable information to verify a request and locate the right records; we will not ask for your password, PCGS API token, or private App Attest key.
Your email is not automatically linked to a pricing installation. If a phone or its key is lost, we may be unable to identify or verify a particular registration from email alone. We will explain what we can verify and address, including limits involving local data, other installations and provider records.
Security and processing locations
We use HTTPS and App Attest for pricing requests and restrict access to support and backend data. No electronic service can guarantee absolute security. Our providers operate internationally, so information may be processed in the United States and other countries with different privacy laws. StackWise is initially offered in the United States; this is not a promise that all processing stays in the United States.
Children’s privacy
StackWise is a general-audience app for people interested in precious metals, not a service specifically directed to children. It does not ask for age or date of birth. If you are a parent or guardian and believe your child provided personal information to us, contact support so we can review and address the concern as required by applicable law. Please do not send unnecessary sensitive information about your child.
Changes and contact
We may update this policy as the app or its practices change. The published policy will show its effective or updated date. We will provide additional notice or obtain consent for material changes where required.
Operator: Brandon Clark
Privacy and support: stackwise.app.support@gmail.com