Privacy Policy

Last updated: August 1, 2026

1. Scope and who we are

This policy explains how ChartAIScan, operated by Hilvy Ltd ("ChartAIScan", "we", "us"), handles information through the ChartAIScan mobile app and this website. The mobile app does not require an account and does not ask for your name, email address, phone number, contacts or precise location.

2. Information handled by the mobile app

Chart images. When you choose or take a chart screenshot and request an analysis, the image and the analysis settings you selected are sent over an encrypted connection to our processing service and then to OpenAI to generate the result. Our server does not save the image or the generated analysis.

App and device identifiers. The app sends an installation identifier (the iOS identifier for vendor, Android ID, or a randomly generated fallback) so that we can enforce scan allowances and prevent abuse. Before storage, our service converts it into a keyed, non-reversible hash. RevenueCat also assigns an anonymous app user identifier for subscription entitlement management.

Scan activity. We store hashed identifiers, subscription tier, scan mode, request state and timestamps needed to count free and Premium scans, prevent duplicate requests, operate the service and investigate abuse. We do not store your chart image or analysis output in this database.

Purchases. Apple App Store or Google Play processes payment details. RevenueCat and the applicable store provide us with limited product, purchase and subscription-status information so that we can unlock Premium features and support purchase restoration. We do not receive or store your full payment-card details.

Local app data. Preferences, saved analyses and their chart images are stored in the app's private storage on your device. They are not synchronised to a ChartAIScan account. You can delete individual scans, use Clear History in Settings, or remove the app to erase this local data.

3. Website usage data

This website uses privacy-focused Plausible analytics to understand page views, downloads and outbound-link use. Our hosting and security providers may also process standard request data such as IP address, browser type, requested page and timestamp to deliver and protect the site. We do not use third-party advertising cookies.

4. Why we use this information

We use the information above to provide chart analysis, maintain local history, manage subscriptions and restore purchases, apply scan limits, secure and troubleshoot the service, understand aggregate website use, comply with law and respond to support requests. We do not sell personal information or use chart images for advertising.

5. Service providers

We use Cloudflare for the app API and hashed usage database, OpenAI for AI image analysis, RevenueCat for subscription entitlement management, Apple and Google for in-app billing, Vercel for website hosting, and Plausible for website analytics. These companies process data for the purposes described above under their own terms and privacy commitments. They may process information outside the United Kingdom or European Economic Area using appropriate transfer safeguards.

6. AI processing

Chart images are sent to OpenAI only when you request an analysis. We disable OpenAI application-state storage for these requests. OpenAI may retain limited data temporarily where required for abuse monitoring and service security under its applicable data controls. Do not upload images containing personal, confidential or account information.

7. Retention

Local scan history remains on your device until you delete it. Our service does not retain chart images. Failed or released scan reservations are removed after approximately 7 days, completed Premium quota records after approximately 90 days, and cached subscription checks after approximately 24 hours. Hashed free-tier quota records may be retained for the lifetime of the installation or service because the free allowance is lifetime-based. Apple, Google, RevenueCat, OpenAI, Vercel and Plausible retain information according to their own policies and legal obligations.

8. Your choices and rights

You control whether to submit a chart image and can clear locally saved history at any time. Depending on where you live, you may have rights to access, correct, object to, restrict or erase personal data and to complain to a data-protection authority. Because server-side quota identifiers are deliberately hashed and the app has no account, we may be unable to link a particular hash to you. Contact us and we will explain and action any request we can verify.

9. Security and children

We use HTTPS, access controls and keyed hashing to protect data in transit and at rest. No system is completely secure. ChartAIScan is not intended for children under 18, and we do not knowingly collect their personal information.

10. Changes and contact

We may update this policy when the app, providers or legal requirements change. The date above shows the latest revision. For privacy questions or rights requests, email hi@chartaiscan.com.