Last updated: July 2026 · Effective immediately
Your privacy matters. This policy explains what data BullionKeeper collects, why we collect it, and how we protect it.
We collect only what is necessary to operate the service: • Account information: email address or phone number used to sign up. • Profile data: display name, country, and account preferences you provide. • Holdings data: the precious metals transactions you enter — metal type, weight, purchase price, photos, and invoices. This data is stored locally on your device and, if you enable cloud backup (Vault Elite), encrypted in your private cloud storage. • Device data: push notification token (if you opt in), and device type for rendering purposes. • Usage analytics: anonymised product analytics via PostHog and crash reports via Sentry. No personally identifiable information is included beyond what's needed to fix bugs.
• We do not track your location. • We do not collect browsing history outside the app. • We do not sell, rent, or trade your personal data to third parties. • We do not use your holdings data for advertising.
• To provide and operate BullionKeeper's features. • To send you price alerts and app notifications you explicitly opt into. • To respond to support requests. • To detect and fix bugs via anonymised crash reports and product analytics. We do not use your data for any purpose not listed here.
Holdings data is stored locally on your device by default. If you enable cloud backup, it is stored in Supabase (hosted in the US) using industry-standard AES-256 encryption at rest and TLS in transit. Your account credentials are managed by Supabase Auth. Passwords are never stored in plaintext. We enforce Row Level Security (RLS) so no user can access another user's data — ever.
BullionKeeper integrates with the following third-party services: • Supabase — database, auth, and storage (supabase.com/privacy) • MetalPriceAPI — live precious metals spot prices (no personal data shared) • Sentry — anonymised crash reporting (sentry.io/privacy) • PostHog — anonymised product analytics (posthog.com/privacy) • RevenueCat — subscription management for native app purchases (revenuecat.com/privacy) • LemonSqueezy — payment processing for web checkout (lemonsqueezy.com/privacy) We do not share your personal data with these services beyond what is necessary for them to function.
You have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your account and all associated data. • Export your holdings data at any time via the app. To exercise these rights, contact us at support@bullionkeeper.com.
We retain your account data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days. Holdings data stored locally on your device is not affected by account deletion — you control that data.
BullionKeeper is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
We may update this policy from time to time. Material changes will be notified via in-app notification. Continued use of the service after notification constitutes acceptance of the updated policy.
For privacy-related enquiries: support@bullionkeeper.com