Privacy Policy
Simena Digital LLC · privacy@getunearth.app
Last updated: October 28, 2026
Unearth is an antiques identifier and collection ledger app made by Simena Digital LLC ("we," "us," or "our"), a Wyoming limited liability company based in the United States. Unearth is not a marketplace: it does not sell, buy or broker antiques or any other product, and does not connect you to anyone who does — this policy explains what data the app itself collects, why, and how we protect it.
1. Information You Provide
When you use Unearth, you may provide the following information:
- Account information: the user identifier Apple assigns to your Apple ID, which identifies your account, and the name and email address Apple shares when you first sign in (the email may be an Apple private relay address). We also store an encrypted Apple sign-in token so we can revoke Sign in with Apple when you delete your account.
- Collection data: the collections, items, journal entries, photo moments, and wishlist items you create — names, makers, dates, quantities, prices paid and sold for, ratings, notes, the estimates you keep on items, and any other details you choose to record.
- Photos: photos you attach to an item, journal entry, or moment, and the profile photo you choose. These are uploaded to and stored on our servers, each behind its own account-scoped, hard-to-guess web address. Anyone who has that address can open the photo, so we never index, publish, or share those addresses.
- Places: a place you choose for a moment. If you tap Use current location, Unearth asks for location permission, reads your device's location once, and looks up the nearest town through Apple's location services; we store the place name and its map coordinates with the moment. Unearth never tracks your location in the background.
- AI recognition choice: whether you have turned AI recognition on or off, stored with your account so the same choice applies on every device you sign in on.
- Profile settings: your display name and app language, stored with your account. Your currency choice stays on your device.
- Support messages: emails you send us, including any photos you attach.
2. Information Collected Automatically
When you access Unearth, we automatically receive:
- IP address and user agent (standard HTTP request data)
- Session tokens for authentication
- Your subscription status (plan tier, renewal or expiry date, and whether you have used an introductory offer), which RevenueCat sends us
Unearth uses Sentry for crash and error reporting. When the app crashes or hits an error, a technical report (device model, OS version, app version, stack trace and a short trail of recent app events) is sent to Sentry so we can fix the bug. For a small share of errors, the report includes a screen recording of the moments before the error, with all text and images masked, and for a small share of sessions Sentry also receives performance timings. Our server reports its own errors to Sentry too. Reports are scrubbed of email addresses, IP addresses and sign-in tokens before sending, and we design them not to include your collection or journal content.
We do not run ads in the app and we do not sell your personal data. With your permission, we measure our own advertising across apps and websites. Unearth uses AppsFlyer to measure installs, onboarding progress and subscription activation. When you first open the app, iOS asks whether you allow tracking (Apple's App Tracking Transparency prompt). If you allow it, device identifiers (including the advertising identifier, IDFA), subscription events and advertising interactions may be shared with AppsFlyer and the advertising partners we use to measure our campaigns. If you decline, or tracking is restricted on your device, Unearth does not collect the IDFA and blocks AppsFlyer from sharing your data with advertising partners; limited install and event measurement and Apple’s privacy-preserving attribution may continue. You can change your choice at any time in iOS Settings › Privacy & Security › Tracking. Besides installs and app opens, AppsFlyer receives a few setup and subscription milestones: that you created an account, reached certain setup steps, finished setup, saw the subscription screen and tapped to subscribe, and, after a purchase, which plan you bought (its product ID only, never the price or payment details). We never send your name, email, collection, journal, photos or scans to AppsFlyer.
Our website loads its fonts from Google Fonts, so your browser sends your IP address to Google when you view it.
3. AI Recognition and Your Data
AI recognition is optional. Unearth asks before the first scan, you can add items manually without it, and you can turn it on or off at any time in Settings.
When AI recognition is on and you scan a piece, the photo is sent to our server and on to OpenAI's GPT models, which suggest what the piece is, who may have made it and when, and a rough estimate range. The full photo is sent, including whatever is around the piece (a table, a room, anyone standing nearby), so frame the piece closely before you scan. We ask OpenAI not to store the photo (our request sets store to false), and OpenAI processes it under its own API data policies; see OpenAI's API data controls for details. Our server does not save the scan photo; it is used only to process that request. If you then save the item with the scan photo still attached, that photo is uploaded and stored with the item like any other photo you attach (see §1); you can remove it before saving.
Turning AI recognition off stops new scans from being sent. It cannot recall a scan that was already sent.
We keep a record of each scan attempt (which model was used, the suggestions it returned with their estimate ranges, what you saved from the scan, how long it took, and its cost) so we can operate the feature responsibly, but it does not include the image. A separate count of your scans for the day, kept for 48 hours, enforces the daily scan limit.
Not an appraisal. An estimate is a rough, automated range from a model. It is often wrong and tends to run high, and it is a starting point only: not an appraisal, and not for insurance, tax, legal, lending or sale decisions. Check sold listings or ask a qualified appraiser. For restricted categories (firearms, ivory and other endangered materials, hate memorabilia, and human remains) Unearth gives no estimate and links to no sold listings.
4. How We Use Your Information
We use your information to:
- Provide and sync your collections, items, journal, and wishlist across devices
- Authenticate your account and keep it secure
- Restore your subscription on a new device via your Apple ID
- Run AI recognition, when you have turned it on, and enforce its daily scan limit
- Deliver optional local reminders about a subscription offer, if you allow notifications
- Enforce subscription entitlements and prevent abuse of introductory pricing
- Answer your support requests and, with photos you choose to send us, improve recognition
5. Third-Party Services
| Service | Purpose | Data shared |
|---|---|---|
| Apple | Authentication (Sign in with Apple), and location lookup and maps for places you add | Name, email; for places, the coordinates being looked up or shown |
| OpenAI (GPT models) | AI recognition, only when you have turned it on | The full photo for that single request, including what is around the piece |
| RevenueCat | Subscription management and entitlement enforcement | Our internal account ID, purchase history and the AppsFlyer installation ID (so subscription events can be attributed); the IDFA and other device identifiers only if you allow tracking |
| AppsFlyer | Install, onboarding and subscription attribution | Technical device information, installation identifiers, our internal account ID, onboarding and subscription milestones (account created, setup steps reached, setup finished, subscription screen viewed, subscribe tapped, plan purchased: product ID only), and the IDFA only if you allow tracking. Sharing with advertising partners follows your tracking choice (see §2) |
| Sentry | Crash and error reporting | Technical crash, error and performance reports (device model, OS version, stack trace, masked screen recordings of some errors) — scrubbed of email, IP address and sign-in tokens |
| Photon (komoot GmbH, Germany) | Place search when you add a place to a moment | The text you type in place search and your IP address |
| Expo (EAS Update) | Delivering app updates | Technical request data (IP address, app version, platform) and a random installation identifier |
All third-party service providers listed above are contractually required to protect your data to a standard equivalent to or greater than described in this policy.
We do not sell your personal data, and we do not share your collection, journal, or wishlist content with anyone except as described above.
6. Data Storage and Security
Your account record, collection data, and uploaded photos are stored on secure servers in the European Union (Germany), hosted by Hetzner Online GmbH. Communication between the app and our servers uses HTTPS (TLS 1.2+).
On your device, Unearth stores data using:
- AsyncStorage: preferences, app settings, an offline cache of your collection for fast, offline browsing, and changes waiting to sync
- expo-secure-store: authentication tokens and your basic account details (encrypted by the OS keychain)
7. Data Retention and Deletion
Your data is retained as long as your account is active. You can delete your account at any time from Settings within the app. Deletion is soft-applied immediately — your active session is ended and your Apple refresh token is revoked — and finalized after 30 days. During this 30-day grace window you may restore the account by signing in again with the same Apple ID. After 30 days, your account, collections, items, journal entries, moments, wishlist, and uploaded photos are permanently and irreversibly removed from our servers. We keep only a one-way hash of your Apple ID's user identifier, with the date of deletion and whether that Apple ID already used a trial or introductory offer, so the same Apple ID cannot receive a second one.
Data held by third-party services (e.g. RevenueCat purchase records, Apple account data) is subject to those services' own retention policies.
8. International Data Transfers
Simena Digital LLC is a U.S. (Wyoming) company, but your account data and user content are stored on servers in the European Union (Germany) — see §6 — regardless of where you are. Some processing occurs in the United States by the service providers named in §5: Apple (sign-in and subscriptions), OpenAI (AI recognition), RevenueCat (subscription management), AppsFlyer (install and subscription attribution), Sentry (crash diagnostics), and Expo (app updates). When your data is transferred to these providers, it is protected by Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR and UK GDPR.
9. Legal Basis for Processing (GDPR / UK GDPR)
If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:
- Contract performance: to provide the Unearth service you signed up for, including account management, collection sync, and subscription entitlement.
- Consent: for optional features that require your explicit opt-in, including AI recognition, camera and photo-library access, location access, and local notifications.
- Legitimate interest: for service security and fraud prevention (e.g., preventing abuse of introductory pricing or the daily scan limit).
You may withdraw consent for consent-based processing at any time by turning off the relevant feature (AI recognition can be turned off in Settings) or contacting us at privacy@getunearth.app.
10. Your Rights Under GDPR / UK GDPR
If you are in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:
- Access: request a copy of the data we hold about you
- Rectification: correct inaccurate personal data
- Erasure: delete your account and all associated data
- Portability: receive your data in a machine-readable format
- Restriction: limit how we process your data
- Object: object to processing of your data
- Withdraw consent: withdraw consent at any time where processing is based on consent
- Lodge a complaint: file a complaint with your local data protection authority if you believe your data has been mishandled
To exercise any of these rights, email us at privacy@getunearth.app. You can also delete your account directly in the app under Settings. We will respond to requests within 30 days. You can also export your collection and journal as CSV files at any time from Settings. On request to privacy@getunearth.app we send a full account export, which also includes every estimate the app showed you (your scan history). The CSV export includes the estimates you kept on items.
11. Notifications
Unearth uses local notifications only. If you allow notifications and have never subscribed, Unearth may schedule up to three one-time reminders about a discounted yearly plan, about 5, 30 and 60 minutes after you first leave the subscription screen without subscribing. They are cancelled when you reopen the app and are never scheduled again. No push notification tokens are sent to our servers. All notification scheduling happens on your device.
12. Camera, Photos and Location
Unearth requests camera access to photograph a piece or a maker's mark, and photo library access to add existing photos to your collection or profile. Unearth requests location access only when you tap Use current location on a moment. Photos you attach to an item, journal entry, or moment are uploaded to our servers as described in §1 and §6. While you have an active subscription, you can remove a photo by editing or deleting the entry it belongs to; without one, your collection is read-only, but deleting your account removes every photo (see §7). A profile photo you replace or remove stays on our servers until your account is deleted.
13. Children's Privacy
Unearth is not directed at children. It requires users to be at least 13 years old (16 in the EEA) — see our Terms of Service — even though the App Store rates it 4+. We do not knowingly collect personal information from children under 13 (or 16 in the EEA). If you believe a child has provided us with personal data, please contact us at privacy@getunearth.app and we will delete it promptly.
14. Your Rights by Jurisdiction
In addition to the GDPR and UK GDPR rights described above, the following rights may apply based on your location:
United States (California — CCPA/CPRA): California residents have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell your personal information. To exercise your rights, contact us at privacy@getunearth.app.
Canada (PIPEDA): Canadian users have the right to access, correct, and request deletion of their personal data. We only collect personal information for purposes that a reasonable person would consider appropriate. Contact us at privacy@getunearth.app to exercise your rights.
Australia (Privacy Act 1988): Australian users may access and correct their personal data under the Australian Privacy Principles. If you believe we have breached the APPs, you may lodge a complaint with us at privacy@getunearth.app or with the Office of the Australian Information Commissioner (OAIC).
Japan (APPI): Japanese users have the right to request disclosure, correction, and deletion of their personal data. We handle personal information in accordance with the Act on the Protection of Personal Information. Contact us at privacy@getunearth.app.
South Korea (PIPA): Korean users have the right to access, correct, delete, and suspend processing of their personal data under the Personal Information Protection Act. Contact us at privacy@getunearth.app to exercise your rights.
For all jurisdictions: regardless of where you are located, you can delete your account and all associated data at any time from Settings within the app.
15. Changes to This Policy
We may update this privacy policy from time to time. If we make material changes, we will notify you through the app or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.
16. Contact Us
If you have questions, concerns, or requests regarding this privacy policy or your personal data, contact us at:
Simena Digital LLC
1021 E Lincolnway, Suite 9026
Cheyenne, WY 82001, United States
Email: privacy@getunearth.app