Aevumex
Privacy policy
Aevumex is built on one principle: what you own is none of our business. Your portfolio is encrypted on your device with a key only you hold. This policy explains which data we do process, why, and your rights under the General Data Protection Regulation (GDPR).
1. Controller
Aevumex is a trade name of Glennski, a sole proprietorship registered with the Dutch Chamber of Commerce (KVK) under number 42093846 (establishment number 000065978579), VAT number NL050855827B02, Gravin Juliana van Stolberglaan 31, 2263 AB Leidschendam, the Netherlands. Glennski is the controller for the data described in this policy. Privacy contact: privacy@aevumex.com; other questions: support@aevumex.com.
2. What we can never read: your portfolio
All data about your metal (type, quantity, weight, purchase date, purchase price, storage location, notes, receipt photos) is encrypted on your device with AES-256-GCM before it is stored or synchronised. The key is generated on your device, kept in the secure keychain of iOS or Android and derived from your 12-word recovery phrase. Our servers receive and store only encrypted blobs without the key. We cannot view, recover or share this data. If you lose both your device and your recovery phrase, the portfolio is permanently unreadable, also for us.
What the server does see: the number of encrypted items, timestamps and blob sizes. The encrypted blobs remain personal data, because they are tied to your user id — which is why they appear in this policy.
3. Data we do process
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| E-mail address | Sign-in (e-mail and password), confirmation and reset codes, account management, changing your address | Performance of the contract | While your account exists |
| Name and date of birth (optional) | Your profile; the name may come from Google if you allow it | Consent; you may leave them empty or delete them | Until you delete them or close your account |
| Pseudonym | Shown on the marketplace and in chats instead of your name | Performance of the contract | While your account exists |
| Listings, photos, chat messages, reviews, reports | Running the marketplace, moderation, legal obligations (Digital Services Act) | Performance of the contract; legitimate interest (safety) | Listings 30 days after expiry; chats and reports up to 12 months after account closure for abuse investigations |
| Price alerts (metal and threshold) | Push notification when a price crosses your threshold | Performance of the contract | Until you delete the alert |
| Device push token and the app language you set | Delivering notifications in your language; the notification itself never contains amounts or holdings | Consent (notifications) | Until you disable notifications or sign out |
| Subscription status, app user id, purchase receipts | Activating and restoring Aevumex Pro | Performance of the contract | Statutory retention period for transaction data |
| Title of a listing for which you request an AI illustration | Generating the image; marketplace only, never for a vault item | Performance of the contract | Not kept; the generated image belongs to the listing |
| Technical logs (IP address, error reports) | Security and stability | Legitimate interest | At most 30 days |
We process no location data (the region in a listing is free text you choose), show no advertising and do not track you across apps or websites. No tracking means, concretely: no analytics SDK, no advertising SDK, no crash-reporting SDK — the app contains none of them, and this website sets no cookies and loads no tracking pixels. Photos attached to a listing are uploaded without location metadata (EXIF).
4. Processors and transfers
| Party | Role | Location |
|---|---|---|
| Supabase (Supabase Pte. Ltd.) | Database, authentication, storage of encrypted blobs and marketplace data | EU (Ireland); SOC 2 Type II, ISO 27001 |
| Resend | Sending confirmation and reset codes and account e-mails | EU/US; data processing agreement with standard contractual clauses |
| RevenueCat | Subscription management (only a random user id and purchase receipts, never your e-mail) | US; standard contractual clauses |
| Expo (push service), Apple (APNs), Google (FCM) | Delivering content-free notifications | US; standard contractual clauses |
| Google (Gemini) | Generating an AI illustration from the title of a marketplace listing; vault items are never sent | US; standard contractual clauses |
| Google and Apple | Sign in with Google or Apple (only if you choose it), payments through the stores | Independent controllers for their own processing |
| metals.dev, European Central Bank | Prices and exchange rates; receive no data about you | — |
5. Your rights
You can view and change your data in the app under Settings → Profile, delete your account and all associated data under Settings → Delete account, and withdraw consent for notifications in your device settings. You also have the rights of access (art. 15), rectification (art. 16), erasure (art. 17), restriction (art. 18), portability (art. 20) and objection (art. 21), and the right to withdraw a consent at any time with effect for the future; e-mail privacy@aevumex.com. We respond within one month.
If our answer does not satisfy you, you may lodge a complaint with a supervisory authority under art. 77 GDPR: the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), which is the authority competent for us, or the authority of the country where you live.
6. Security
Beyond on-device encryption: TLS connections, database access enforced strictly per user (row level security), PIN and biometric lock in the app, and no passwords that could leak from our side. Exactly how the keys work, what the server sees and where the limits of the zero-knowledge promise lie is set out in full in the security model.
7. Children
Aevumex is not intended for persons under 16; we do not knowingly collect data from children.
8. Changes
For material changes we notify you in the app and on this page, with a new version date at the top.