DKSpoonVault — Privacy Policy

Effective date: July 1, 2026 Developer: DKSpoonVault Contact: dkmagnetvault@gmail.com

DKSpoonVault ("the app", "we") is an Android app for cataloging souvenir spoons. This policy explains what data the app handles and your choices. We designed the app to keep your data on your device.

1. Summary (the short version)

No account. No ads. No analytics or tracking SDKs. We do not sell or share your data for advertising.
Your catalog (spoons, places, tags, trips) and photos are stored only on your device.
Photos leave your device only if you turn on the optional cloud AI feature (off by default). While cloud AI is on, each spoon photo you capture or import is sent automatically (downscaled) to Anthropic (the Claude API) using your own Anthropic API key to suggest a place and tags; a multi-spoon group photo may also be sent so Claude can find the individual spoons (see §3). With cloud AI off, no photo ever leaves your device.
Maps are drawn using OpenStreetMap tiles; on-device text/label reading uses Google ML Kit. With cloud AI on, the Map screen may look up place-name coordinates via the device's geocoding service (Google) — see §3.

2. What data the app processes, and why

Data	Where	Why	Leaves device?
Spoon photos (camera or gallery)	On device	Catalog images; optional AI classification; on-device background removal & text reading	Only to Anthropic, and only while cloud AI is on — sent automatically when you capture or import a photo (see §3)
Catalog content (titles, places, tags, trips, dates, notes)	On device (local database)	Your collection	No
App settings, incl. your Anthropic API key	On device, encrypted (Android Keystore)	Run the app / enable cloud AI	No
Map tile requests	Network	Display the map	Sent to the map tile provider (see §3)
Place names (for map pins)	Network — only while cloud AI is on	Look up coordinates to draw map pins	Sent to the device's geocoding service (Google) (see §3)

You add spoon photos using your device's camera app (via the system camera) or the Android photo picker — the app does not request the camera, storage/photos, location, or contacts permissions. It requests only two network permissions: Internet access (for optional cloud AI and map tiles) and network state (ACCESS_NETWORK_STATE, used by Android's WorkManager to schedule the optional cloud requests). It does not collect device identifiers, contacts, or advertising IDs.

3. Third parties

Anthropic, PBC (Claude API) — only if you enable cloud AI. While cloud AI is on, the app automatically sends each newly captured or imported spoon photo (downscaled) and a short text prompt to Anthropic to return a suggested place and tags, authenticated with your own Anthropic API key — no extra tap is required per photo. When you photograph several spoons at once, the group photo may also be sent (downscaled to at most 1024 px on its long edge) so Claude can locate each spoon's position in the frame; this happens only when on-device detection cannot confidently split the spoons itself. Your use of Anthropic is governed by Anthropic's terms and privacy policy: https://www.anthropic.com/legal/privacy and https://www.anthropic.com/legal/aup . Anthropic's API does not train on your inputs by default; retention follows Anthropic's policy. The Anthropic API is intended for adults (18+).
Device geocoding service (Google) — only if cloud AI is on. To position pins on the map, the Map screen may look up the coordinates of place names in your catalog (e.g. "Paris, France") using the device's geocoding service, provided by Google Play services. Only the place name text is sent; the returned coordinates are stored locally. With cloud AI off, no geocoding lookups are made.
OpenStreetMap — the map screen requests map image tiles from OpenStreetMap (https://operations.osmfoundation.org/policies/tiles/). Your approximate viewport and IP are visible to OpenStreetMap as part of a normal web request. Map data © OpenStreetMap contributors.
Google ML Kit — on-device text recognition and image labeling run locally; no image is uploaded for these. Google may receive limited ML Kit operational metrics per Google's terms (https://developers.google.com/ml-kit/terms).

We do not use any advertising, analytics, or crash-reporting SDK. Crash signals, if any, come only from Google Play's built-in Android vitals (OS-level; no data added by us).

4. International transfers

If you enable cloud AI, photos are sent to Anthropic, which processes data in the United States. Where required (e.g., for EEA/UK users), such transfers rely on appropriate safeguards under Anthropic's terms.

5. Legal bases (EEA/UK, GDPR)

Consent — for sending photos to Anthropic for cloud classification and for geocoding place names, both active only while cloud AI is on (you opt in with an explicit in-app acknowledgement, and can turn it off anytime).
Performance of the app you requested / legitimate interests — for on-device storage and map display. You may withdraw consent at any time by switching off cloud AI in Settings.

6. Data retention

On-device data stays until you delete it in the app or uninstall.
Anthropic retains API data per its own policy (linked in §3); we keep no server copy (we have no server).

7. Your choices and rights

Edit or delete any spoon and its photo in the app; delete multiple at once.
Export your full catalog (Settings → Back up) and restore it (also for moving to a new phone).
Turn cloud AI on/off anytime (Settings); the app is fully usable offline.
Uninstalling removes all on-device data.
EEA/UK and California residents have rights to access, correct, delete, and port personal data; because data is stored locally and we hold no server copy, you exercise most of these directly in the app. For requests, contact dkmagnetvault@gmail.com.

8. Security

Network requests use HTTPS. Catalog data is in app-private storage. Your Anthropic API key is stored using Android Keystore–backed encryption and is excluded from cloud backup and device transfer.

9. Children

The app is not directed to children and is intended for users 18 and older. The cloud AI feature requires users to be 18+ (per Anthropic's terms). We do not knowingly collect data from children.

10. California (CCPA/CPRA)

We do not sell or share personal information (as those terms are defined under California law).

11. Changes

We may update this policy; the "Effective date" will change and material updates will be noted in the app or listing.

12. Contact

Questions or requests: dkmagnetvault@gmail.com.