Last updated: 2026-08-02
Honest Vinyl Scanner is anonymous. No accounts. No location, ever. We don't sell your data.
What leaves your phone
| What | Why | Who gets it |
|---|---|---|
| The photo you scan | To read the record | OpenRouter, which passes it to Google (Gemini) to read |
| The text read off it (artist, title, catalogue number…) | To find the release and its price | Discogs |
| A random device id | To count scans for fair-usage limits | Our own server only |
| Whether you bought Pro | To unlock Pro features | Google Play, RevenueCat |
| A message you send us — and for a Bug report, your app version, platform, and the last error the app recorded | To answer you or reproduce the bug | Our own support inbox |
What we never take
| What | Why not |
|---|---|
| ✕ Your location / GPS | Never asked for. The app has no location permission at all. |
| ✕ Your name or email | There is no account to make. |
| ✕ Your contacts or photo library | We only ever see the one photo you scan. |
| ✕ Advertising & tracking ids | No ad SDKs, no analytics SDKs, no session replay. |
| ✕ Your collection & scan history | Stays on your phone. If you have Android Backup on, your own Google account keeps a private copy (we never see it). Export a CSV anytime from Collection. |
Honest Vinyl Scanner is operated by Ing. Dmytro Trofymchuk, an independent sole trader (OSVČ) registered in the Czech Republic under IČO 87837072. This is the data controller for the purposes of the EU General Data Protection Regulation (GDPR). Contact: [email protected].
We do not collect: your name, email, contacts, precise or coarse location (GPS is never requested — the app has no location permission), or any advertising identifier.
We do collect, only to make the app work:
device and used solely to apply fair usage limits on the identification service. It is not tied to your name, email, or any account, because there is no account.
identification providers below to look up the release. We do not keep a copy on our servers.
image to complete the lookup.
When you scan a record, the photo and read text are sent to one or more of the following services to identify the release and its market value. Each is a data processor acting on our instruction, not an independent user of your data.
shipped app that model is Google's Gemini. We instruct OpenRouter to forbid the model provider from retaining your image for training (`data_collection: deny`). If a provider is unavailable, OpenRouter may route the read to an alternate provider so the scan doesn't fail.
active. They see a purchase, not your scans.
We do not send your scans to Anthropic (an earlier version of this policy said we did — that was wrong; the app ships with the Gemini model). We do not contact MusicBrainz from a published build.
All requests to these providers are routed through our own proxy (Cloudflare Workers) so that API keys never live on your device. The proxy strips your device id before forwarding — the providers above never receive it. What the proxy does keep, against that anonymous device id, is a plain operational record of each request: which service was called, the response status, whether it was served from cache, and how long it took. We use it to enforce fair-usage limits and to see when something is broken. There is no advertising or analytics SDK anywhere in the app, and none of this is linked to a person — there is no account to link it to.
Your scan history, identified records, and saved collection are stored locally on your device (`expo-sqlite`) and are never uploaded to us. Nothing leaves your device except the single scan image/text sent for identification, as described above. If Android Backup is enabled on your device, Android keeps a private copy of this local data under your own Google account as part of your device backup — we have no access to it.
You can permanently delete everything Honest Vinyl Scanner has stored on your device at any time from Settings → Clear local data. This removes your saved collection and scan history immediately and cannot be undone. Because we don't hold a server-side copy, this is a complete deletion.
The app's Help & Contact screen sends whatever message you type to our own support inbox, routed through our proxy (Cloudflare Workers) so it never touches a third party. If you use Bug report mode, we also attach a small diagnostics block: your app version and platform, and the last error the app recorded (an event name and error message only) — not your scan history, not the photo you scanned, and not what you searched for. This is separate from, and does not change, the "your collection & scan history stays on your phone" promise below.
Honest Vinyl Scanner is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Because the app requires no account and never collects location, contacts, or other personal identifiers, there is no personal information to collect from any user regardless of age beyond the anonymous device id described above.
If you are in the EU/EEA, you have the right to access, correct, or delete your personal data, to restrict or object to its processing, and to lodge a complaint with a supervisory authority (in the Czech Republic, the Úřad pro ochranu osobních údajů, uoou.gov.cz). Because Honest Vinyl Scanner keeps no server-side copy of your data and stores everything locally on your device, you can exercise deletion yourself at any time via Settings → Clear local data. For any other request, email [email protected].
We may update this policy as the app changes. Material changes will be reflected in the app's release notes and this file's "Last updated" date.
Questions about this policy: [email protected]