StoneSnap Privacy Policy

Last modified: August 2026

Interest-based advertising: to learn more about data disclosure, see Sections IV and VIII.

Opt-out options: DO NOT USE MY DATA. To opt out of tracking, interest-based advertising, or certain data sharing, use the controls described in Section VIII or contact us at [email protected].

PLEASE READ THIS PRIVACY POLICY CAREFULLY. IT EXPLAINS HOW YOUR PERSONAL DATA MAY BE COLLECTED, USED, DISCLOSED, AND PROCESSED WHEN YOU USE STONESNAP. WHEN YOU USE THE APP, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.

By scanning, uploading, importing, saving, or submitting any User Content or Input Content in StoneSnap, including photos, images, notes, metadata, specimen information, or support messages, you acknowledge and consent that such data may be transferred to StoneSnap systems and the third-party service providers listed in Section IV, including third-party AI service providers, for the purposes described in this Privacy Policy.

If you do not want your photos, images, or other User Content processed by AI service providers, do not scan, upload, import, or submit that content in the App.

I. Introduction

Lightning Deals LLC ("we," "us," or "our") takes privacy seriously. This Privacy Policy explains the types of information we may process when you install or use StoneSnap, including the StoneSnap mobile application, related websites, artificial intelligence features, subscriptions, support services, and any other products or services that link to this Privacy Policy (the "App" or "Service").

When we refer to "personal data" or "personal information," we mean information that identifies, relates to, describes, can reasonably be linked to, or could reasonably identify a natural person, directly or indirectly.

This Privacy Policy applies to users of the App. The U.S. Multistate Privacy Notice in Section XIII supplements this Privacy Policy for residents of U.S. states with applicable comprehensive privacy laws.

II. Information We Process

There are several categories of information that may be processed.

Functional Information

We ask for and process information that is necessary to provide the App and requested features. Without some of this information, the App may not be able to provide complete functionality.

User Content and Input Content

"User Content" and "Input Content" includes photos, images, videos, files, notes, specimen names, collection entries, feedback, support messages, and other content you submit, upload, import, scan, save, or create in the App. It also includes AI-generated outputs, scan results, likely matches, descriptions, confidence scores, rarity or collector scores, value estimates, specimen profiles, and related derived data.

StoneSnap may process User Content to identify rocks, minerals, crystals, gemstones, and related specimens; generate AI-powered results; create profiles; estimate value; maintain scan history; build your collection; improve product quality; test, train, evaluate, tune, and secure AI systems; and provide related App functionality.

Third-party AI service provider data transfer: when you voluntarily scan, upload, import, save, or submit User Content in the App, photos, image data, prompts, scan metadata, and related content may be sent to StoneSnap systems and to third-party AI service providers listed in Section IV. The data sent may include the content you provide, technical request identifiers, subscription or entitlement signals, install identifiers, and information needed to process the request and return a result.

If you do not wish to share User Content with AI services, do not input, scan, upload, import, or submit content in the App.

Camera, Photo Library, and Location Information

With your permission, the App may access your camera or photo library so you can scan or import images. With your permission or based on content metadata, the App may process location information to support scan, collection, specimen, or App functionality.

You can change camera, photo library, and location permissions in iOS Settings.

Purchase and Subscription Information

When you purchase a subscription, trial, or premium feature through Apple, we may receive product identifiers, subscription status, purchase history, trial eligibility or promotional offer status, transaction identifiers, receipt or transaction validation information, entitlement status, renewal status, and related subscription events.

Apple is responsible for billing, payment processing, refunds, and management of App Store purchases. We do not receive your full credit or debit card number from Apple.

Refund requests: if you ask Apple for a refund on a purchase made in the App, Apple notifies us and invites us to provide information about that purchase. Where we respond, we share with Apple whether the purchase was delivered to your device, whether free access was available to you before the purchase (StoneSnap includes a limited number of free scans each day), and whether we recommend that Apple grant or decline the refund. Apple already holds your payment and transaction details, and Apple — not StoneSnap — decides the outcome of your request. We do not send Apple your photos, scan images, or saved collection content.

Device, App, and Usage Information

We may process information about your device and your use of the App, including:

Device type, operating system version, app version, language, region, settings, time zone, carrier or network information, IP address, and timestamps.
Device identifiers, vendor identifiers, install identifiers, advertising identifiers where permitted, and similar technical identifiers.
Onboarding progress, paywall views, plan selections, purchase starts, restores, subscription events, scans, feature usage, screens viewed, buttons tapped, errors, diagnostics, performance data, crash-related data, and logs.
General location derived from IP address, device settings, or permitted metadata.
Campaign, attribution, deep link, and advertising measurement data, such as UTM parameters, ad click identifiers, campaign IDs, install source, and conversion events.

Information Processed Automatically

On the basis of your permission where required, and otherwise where permitted by law, we may use third-party automatic data processing technologies, analytics tools, attribution tools, advertising measurement tools, cookies, pixels, software development kits, device identifiers, and similar technologies.

These technologies may process device details, app details, log information, product interactions, subscription events, ad-related information, campaign data, and in-app events. Some third-party services may engage in profiling or automated processing to measure advertising performance, detect fraud, analyze behavior, or understand app usage.

Information processed automatically by third-party tools may be processed according to those providers' privacy policies. We do not control every independent processing activity of third-party platforms. Privacy requests about data collected by third parties through their own systems should be directed to those third parties where applicable.

Contact and Support Information

If you contact us, request support, submit feedback, or otherwise communicate with us, we may process your name, email address, message content, attachments, screenshots, device/app details, and other information you choose to provide.

III. Purposes of Processing Personal Data

We process information for the following purposes:

To make the App and requested services available.
To enable camera scanning, photo import, AI identification, scan history, collection features, value estimates, rarity or collector scores, specimen profiles, and related functionality.
To process uploaded content and generate AI-powered results.
To validate purchases, manage subscriptions, unlock premium features, restore purchases, and prevent subscription abuse.
To improve, test, train, monitor, secure, and evaluate the App, our systems, and AI-related features.
To analyze performance, usage, conversion, retention, product quality, and App reliability.
To measure advertising performance, attribute installs or purchases, optimize campaigns, and understand how users discover StoneSnap.
To communicate with you, respond to support requests, and provide administrative messages.
To prevent fraud, spam, abuse, security incidents, prohibited activity, or illegal activity.
To enforce our Terms of Use, protect rights and safety, comply with law, and respond to lawful requests.
To create aggregated, anonymized, de-identified, or derived data.

If we begin processing personal data for a materially different purpose, we will update this Privacy Policy or provide notice where required.

IV. Sharing of Your Information

We share information with third parties only in the ways described in this Privacy Policy.

We may disclose information to vendors, contractors, processors, and service providers that help us operate the App. We require service providers that process personal information for us to protect it and use it only for permitted purposes.

We do not sell personal information for money. However, some privacy laws define "sell," "share," "targeted advertising," or "cross-context behavioral advertising" broadly. Disclosing device identifiers, advertising data, app events, purchase-related events, or usage information to advertising, attribution, or analytics partners may be considered a "sale," "sharing," or targeted advertising under some laws. You can opt out as described in Section VIII.

We may engage the following service providers and partners:

Apple Inc. Service performed: App Store distribution, StoreKit purchases, subscriptions, trials, transaction validation, refunds and refund requests, subscription management, App Store services, and Apple advertising/privacy controls. Data shared or processed may include Apple account data, device information, storefront, product identifiers, purchase history, subscription status, transaction identifiers, entitlement status, diagnostics, and related App Store information. When you request a refund, we may also share purchase delivery status and our refund recommendation, as described in Section II. Entity location: U.S.A. Privacy policy: https://www.apple.com/legal/privacy/
OpenAI, L.L.C. Service performed: third-party AI service provider for image analysis and AI-generated identification results. Data shared may include Input Content, photos, image data, prompts, scan metadata, technical request identifiers, and generated outputs. Entity location: U.S.A. Privacy policy: https://openai.com/privacy/
Railway Corp. or similar cloud hosting providers. Service performed: cloud hosting, networking, API delivery, logging, uptime, security, diagnostics, and operation of the StoneSnap API. Data processed may include request content, uploaded images, IP addresses, headers, logs, diagnostics, timestamps, and technical information needed to operate the Service. Entity location: U.S.A. Privacy policy: https://railway.com/legal/privacy
AppsFlyer Ltd. Service performed: mobile attribution, campaign measurement, install attribution, deep linking, fraud prevention, and advertising performance analytics. Data shared may include app events, install information, device identifiers, advertising identifiers where permitted, campaign data, purchase-related events, subscription events, and related usage information. Entity location: U.S.A. / international. Privacy policy: https://www.appsflyer.com/legal/services-privacy-policy/
Amplitude, Inc. Service performed: product analytics and app performance measurement. Data shared may include app events, product interactions, install identifiers, device/app information, session information, purchase-related events, subscription events, and related usage information. Entity location: U.S.A. Privacy policy: https://amplitude.com/privacy
Google LLC / Firebase. Service performed: crash reporting, diagnostics, stability monitoring, app health measurement, and related debugging. Data shared may include crash logs, stack traces, device and operating system information, app version, install identifiers, session information, non-fatal error reports, and diagnostic metadata needed to detect and fix app issues. Entity location: U.S.A. / international. Privacy policy: https://policies.google.com/privacy
Qonversion Inc. Service performed: in-app subscription implementation support, revenue analytics, StoreKit synchronization, subscription analytics, entitlement-related analytics, and remote configuration. Data shared may include install or user identifiers, product identifiers, purchase and subscription events, transaction-related information, entitlement status, paywall or experiment events, and related app usage information. Entity location: U.S.A. Privacy policy: https://qonversion.io/privacy-policy
Meta Platforms, Inc. / Facebook. Service performed: advertising measurement, campaign performance, app event measurement, and attribution where Meta services are configured and permitted. Data shared may include app events, device identifiers, advertising identifiers where permitted, purchase-related events, subscription events, campaign information, and related usage information. Entity location: U.S.A. Privacy policy: https://www.facebook.com/privacy/policy/

We may also disclose information:

As required by law, legal process, or government request.
When we believe disclosure is necessary to protect our rights, your safety, the safety of others, security, or fraud prevention.
In connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or transfer of all or part of our business.
When you direct us to do so or consent, such as when you export data, share content, or contact support with attachments.

The App may contain links to third-party websites or services. We are not responsible for the privacy practices or content of third-party sites or services.

V. International Data Transfers

We and our service providers may process information in the United States and other countries. These countries may have privacy laws that differ from the laws where you live.

By using the App, you understand that your information may be transferred to, stored in, or processed in countries outside your country of residence. Where required, we use appropriate safeguards for international transfers.

VI. How Long We Use Your Personal Data

We retain personal information for as long as reasonably necessary to provide the App, perform requested services, maintain business records, improve and secure the Service, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, support our legitimate business purposes, and create or maintain aggregated, anonymized, de-identified, or derived data.

Retention periods vary depending on the type of information and context. Uploaded content, scan data, derived data, analytics data, logs, purchase records, and support records may be retained for different periods.

If you request deletion, we will process the request as required by applicable law. Some information may remain in backups, logs, legal records, security records, aggregated or de-identified datasets, or data already used to train, test, evaluate, secure, or improve systems where deletion is not technically feasible or legally required.

VII. User Privacy Rights

Depending on where you live, applicable privacy laws may give you rights regarding your personal information, including:

The right to know or access personal information we process about you.
The right to receive a copy of certain personal information in a portable format.
The right to correct inaccurate personal information.
The right to request deletion of certain personal information.
The right to restrict or object to certain processing.
The right to opt out of certain targeted advertising, sale, sharing, or profiling activities.
The right to withdraw consent where processing is based on consent.
The right to appeal a privacy request decision where applicable.
The right not to receive discriminatory treatment for exercising privacy rights.

To exercise a right, contact us at [email protected]. We may need to verify your identity, ask for information needed to process the request, or deny requests where permitted by law.

VIII. How to Opt Out

Opt Out of Marketing Tracking and Interest-Based Advertising

You can manage App Tracking Transparency permissions in iOS:

Go to Settings > Privacy & Security > Tracking, then turn tracking permission on or off for StoneSnap.

You can also disable the ability for apps to request tracking permission:

Go to Settings > Privacy & Security > Tracking, then turn off "Allow Apps to Request to Track."

You can manage Apple personalized advertising:

Go to Settings > Privacy & Security > Apple Advertising, then turn off "Personalized Ads."

You may also use advertising industry opt-out tools:

Digital Advertising Alliance for Mobile Apps: https://youradchoices.com/appchoices
Digital Advertising Alliance: https://optout.aboutads.info/
European Interactive Digital Advertising Alliance: https://youronlinechoices.eu/
Network Advertising Initiative: https://optout.networkadvertising.org/

You may still receive contextual ads or measurement that does not rely on personal tracking.

Opt Out of Location Data Processing

You can manage location permission in iOS:

Go to Settings > Privacy & Security > Location Services, select StoneSnap, and choose your preferred setting.

Do Not Use My Data Requests

To request that we delete, restrict, or stop using certain personal data where applicable, email [email protected] with the subject line "DO NOT USE MY DATA" and describe the request you want to make.

If you do not want photos or User Content processed by AI services, do not scan, upload, import, or submit that content in the App.

IX. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

If we learn of a security incident that requires notice under applicable law, we will provide notice as required.

X. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13.

If you are under the age of majority where you live, you should use the App only with permission and supervision from a parent or legal guardian.

If you believe a child provided personal information to us without appropriate consent, contact us and we will take appropriate steps.

XI. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last modified" date above. Additional notice may be provided where required by law or appropriate under the circumstances.

XII. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us at:

Lightning Deals LLC

Website: https://stonesnapai.com

Email: [email protected]

XIII. U.S. Multistate Privacy Notice

This U.S. Multistate Privacy Notice supplements the Privacy Policy for residents of U.S. states with comprehensive privacy laws, including California and other states where applicable. This Notice applies only where the applicable law covers our processing of your personal data.

The categories of personal data we may process are described in Section II. The purposes of processing are described in Section III. The categories of service providers and partners with whom we may disclose personal data are described in Section IV.

We disclose personal information to service providers or processors for business purposes such as providing the App, customer support, analytics, advertising measurement, subscription management, fraud prevention, debugging, security, and improving the App.

We do not sell personal information for money. However, certain disclosures for interest-based advertising, targeted advertising, cross-context behavioral advertising, attribution, or analytics may be considered a "sale," "sharing," or "targeted advertising" under some U.S. State Privacy Laws. You can opt out using the controls described in Section VIII or by contacting us.

Covered users may have the rights listed in Section VII, including the right to access, correct, delete, port, restrict, object, opt out, appeal, and avoid discrimination for exercising privacy rights, subject to applicable law and verification.

To submit a privacy request, email [email protected]. Please include enough information for us to understand, evaluate, verify, and respond to your request. We will use verification information only to verify and process your request.

If we decline to take action on a request and applicable law gives you appeal rights, you may appeal by replying to our decision email and explaining why you believe the request should be reconsidered.