Privacy policy

Metal&Gold Detector: Scanner helps you measure your phone’s surrounding magnetic field and keep a field journal. You can use the scanner, compass, guides and local journal without creating an AI account.

Measurements and your journal

Magnetic readings, baselines, recordings, surveys, notes, tags and journal photos are stored on your device. The compass uses your device’s available heading sensors. We do not upload your continuous sensor stream or automatically upload your journal.

Camera, photo-library and location access are optional. You choose a photo or take a picture to attach it to a record. Location is requested only when you choose to save a location. The app does not track your background location. A maps app receives the selected coordinates only when you choose to open a saved location.

You can edit or delete records in Journal, or delete the whole journal and its recovery drafts in Settings. Deletion removes the app’s copies; it does not delete originals in your photo library. If you share a report or export, the file can contain your notes, measurements and saved location. The destination you choose receives that file under its own privacy rules. Device-level backups are controlled by your operating system and account settings.

Optional AI observations

An anonymous Firebase Authentication account is created when you first request an AI observation. Each request asks for your consent. You choose a saved photo or a recorded session’s summary statistics and may add short context. Other journal records and saved location coordinates are excluded.

Before upload, selected photos are resized and their embedded metadata is removed. Our service receives the selected evidence and context, an anonymous account reference, app-verification information, an installation public key and signed request information. Network infrastructure also processes the connection’s IP address. Private signing keys remain in the device’s protected storage.

Our service sends the selected evidence to an AI model through OpenRouter. It restricts model routing to processors supporting zero data retention. Our service does not retain the submitted photo or context after processing. Generated observations are retained on the server for up to 32 days and may also be saved in your local journal. Reports about an observation are retained for up to 30 days. Avoid including personal or sensitive information in optional context or photos.

AI observations may be inaccurate. A phone’s magnetic sensor cannot identify gold, determine buried-object depth or establish electrical or excavation safety. AI does not change those limits.

Account deletion and access

Settings → AI privacy provides account deletion and an export of server observations. Deletion removes the anonymous Firebase account, server observations and reports, installation signing identity, and saved AI observations on this device. Your own journal and photos remain unless you delete them separately.

A small set of security and usage records may remain for up to 32 days to prevent replay, abuse and quota evasion. Deletion starts immediately when requested; a network or provider interruption is shown in the app with a retry action. The app retains unfinished deletion steps and pauses further AI requests until they finish.

You can also request access or deletion without reinstalling the app through the support form. Choose a deletion-related subject and describe the account or records involved. We may need information that establishes your ownership before acting on a request. Do not send passwords, payment details or private signing keys.

Purchases

Apple or Google processes subscriptions and payments. We receive product and purchase-status information needed to unlock features and restore access; we do not receive your payment-card details. Pending purchase information is retained locally to help avoid duplicate payment attempts. Deleting the app or its AI account does not cancel a subscription. Use Manage subscription in Settings or your store account to manage billing.

Optional usage and crash reports

Optional usage and crash reports are off by default in the rebuilt app. You can change the choice in Settings. When enabled, Firebase Analytics and Crashlytics process app interactions, device and app information, diagnostic identifiers, errors and crash details to help us understand reliability and feature use. App-authored events exclude journal text, photos, locations, AI prompts and purchase receipts.

When enabled, Firebase’s automatic analytics can also include approximate geography derived from network information and subscription or purchase events, including the product and price. This does not send your saved journal coordinates or payment-card information. Advertising-identifier collection and advertising personalization are disabled in the rebuilt app.

Turning the choice off disables further optional collection. A failure to save or apply the choice is shown with a retry message. Previously collected diagnostics remain subject to the service’s retention and deletion controls. We do not sell your information or use journal content for advertising.

Support and service providers

Messages you submit through the support form are processed to answer the request. Service providers handle hosting, database storage, secure delivery, authentication, app verification, optional diagnostics, store payments and consented AI processing. They may process information outside your country under their applicable protections.

Questions and changes

Use the support page for privacy questions, correction or deletion requests. We update this policy when the app’s data practices change. The terms explain use of the app and subscriptions.