How we handle your data

CameoScope is an AI-assisted grading and valuation companion for hand-carved cameos and intaglios, operated by X WING (昔羽堂). This page explains what data we collect, how we use it, and the choices you have. If anything is unclear, email us at admin@x-wing.one.

Data we collect

• Apple ID identifier when you sign in to the iOS app. If you share your email during Sign in with Apple, we store it so we can contact you about your account; otherwise we store an opaque Apple identifier only.
• Photos you choose for an appraisal, and the automatic photo check. As soon as you confirm the photos for an appraisal, the app sends them to our server, and our server sends them to a third-party AI vision model (Anthropic Claude) to check whether they show something the app can assess and to pre-fill the form. The app tells you this once before the first check and will not run it until you acknowledge it. The same photos are used again for the appraisal itself. Photos and the check result are kept on our server for 30 minutes after the appraisal is delivered (or the check expires), then deleted. We keep a fingerprint (cryptographic hash) of each photo, not the photo, for a further short period only to tie your appraisal to the check you saw. We do not use your photos to train models, and we do not sell them.
• Appraisal content you submit: title, description, material, subject, size and similar fields, plus the photos above. We use it to produce your grade and price estimate, to show comparable sold lots, and to keep your appraisal history in the app. Some of these details (for example period, size, signature, condition and provenance) are sent to the AI model together with the photos so that it can price your item.
• Appraisal results and billing records. For each appraisal we keep the result you received (grade, estimate, the reasons when a grade or price could not be given, and whether you chose to continue after a photo-check warning) and a billing record: whether a credit or subscription allowance was used and why. These records are what your in-app history and your credit balance are built from.
• Purchase, subscription and refund events. When you buy credits or a subscription, Apple validates the receipt and RevenueCat sends us the event. We keep these event records, including the raw event payload, so we can credit your account, honour restores, and process refunds. If Apple refunds a purchase whose credits were already used, we deduct those credits from your balance, which can go below zero until you top up; no appraisal is ever charged twice. We never see your card details.
• Sign-up bonus record. To grant the free welcome credits only once per Apple account, we keep a keyed one-way digest of your Apple identifier and the date the bonus was granted. This record contains no name, email or usable identifier, and it is kept after you delete your account so the bonus cannot be claimed again.
• Server logs: each request records an IP address and a coarse timestamp for security and rate limiting; logs are retained for 30 days.
• Performance telemetry from the iOS app: anonymous event names and durations with no user identifier, used only to diagnose slow flows.

Data we do not collect

• Location data of any kind.
• Device advertising identifiers (IDFA).
• Third-party marketing trackers.
• Contacts, photo-library scans, or anything outside what you actively choose for an appraisal.

How we use AI, and what it does not do

CameoScope uses AI models to describe what the photos show, to compare carving quality against reference panels, and to estimate a price from sold comparables. The photo check may warn you that the photos may not show a hand-carved cameo, that the subject is unclear, or that the relief may be moulded or machine-cut. These are statements of doubt about the photos, not findings about your object: CameoScope does not authenticate objects and never states that an item is genuine, fake or a reproduction. If you choose to continue after a warning, the appraisal runs as far as it can and is charged as stated beforehand, even when no grade or price can be given; only service failures are free.

How to delete your data

Delete your account in the iOS app under Account → Delete account, or email admin@x-wing.one from the address you registered with (or quote your Apple identifier). We respond within 7 days and delete your account, appraisal history and billing records, except: records we must keep for legal, accounting or fraud-prevention reasons (including purchase and refund events, for the period required by law), and the sign-up bonus digest described above, which identifies no one.

Third-party services

• Anthropic Claude — vision and language models (photo check, grading, pricing).
• RevenueCat — purchase receipt validation and purchase / refund events.
• Apple App Store — payments and Sign in with Apple.
• Fly.io — application hosting.

Contact

Questions, corrections or deletion requests: admin@x-wing.one. See also the Terms of Service and Support pages.