Artoma

Privacy Policy

Last Updated: September 18, 2026

This Privacy Policy explains how Artoma collects, uses, stores, shares, and protects information in connection with the Artoma mobile application for artwork scanning, valuation, shopping, and collection management.

This Privacy Policy explains how Artoma (“Artoma,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information in connection with the Artoma mobile application (the “App” or “Service”).

Artoma helps users scan and identify paintings and other artworks, view market reference values, browse shop listings, and manage a personal collection. Please read this Privacy Policy carefully before using the App. By using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the App.

This Privacy Policy should be read together with our Terms of Use and Subscription Terms. The disclosures in our Google Play listing, in-app privacy notices, and Data Safety section should be consistent with this Privacy Policy.

1. Who We Are

The App is provided by Artoma. Where required by applicable data protection laws, we may act as the data controller of the relevant personal data.

2. Information We Collect

You do not need to create a traditional username and password account to use the core features of the App. The App may create an anonymous app identity so that scans, collections, and subscription status can work across sessions. We collect information only as necessary to provide, maintain, improve, and protect the Service.

2.1 Information You Provide

Please do not upload or submit sensitive personal information through the App, such as government ID information, financial account numbers, health information, passwords, precise home addresses, children’s information, or any other content you do not want processed.

2.2 Information Collected Automatically

2.3 Camera and Photo Library Permissions

With your permission, the App may access your camera to scan artworks and your photo library to select existing images. Images are processed to provide recognition, valuation, and collection features. You can revoke these permissions at any time in your device settings. Doing so may limit related features.

3. How We Use Information

4. Artwork Scans, AI Processing, and Market Data

When you scan or upload an artwork image, the image and related request data may be transmitted to our cloud infrastructure and AI service providers so we can return artist, title, medium, style, year/period, confidence, and other recognition fields.

Recognition results and market values are estimates or references only. They may be inaccurate, incomplete, or outdated. Artoma does not provide formal appraisals, authentication certificates, insurance valuations, or investment advice.

Where market comps are shown, the App may retrieve publicly available marketplace listing data (for example eBay listings) based on image search or text queries derived from recognition results. Third-party listing pages you open remain governed by those third parties’ terms and privacy policies.

Unless necessary to provide the Service, maintain security, troubleshoot issues, or comply with legal obligations, we do not intentionally retain your scan images or AI outputs on a long-term basis beyond what is needed for your collection features and service operation. Third-party AI or marketplace providers may retain certain request and response content for a limited period under their own policies.

5. In-App Purchases

The App offers subscriptions and related purchases through Google Play. Payments are securely processed by Google Play. We do not collect or process your card number, full payment credentials, or other sensitive payment information.

We may receive purchase tokens, subscription status, product IDs, transaction times, and receipt validation results from Google Play and related services to confirm your purchase status and provide access to paid features.

6. Third-Party Services and SDKs

We may share necessary data with third-party service providers to operate, analyze, maintain, promote, and improve the App. These providers should process such data only as needed to provide their services, perform contractual obligations, comply with law, or as otherwise permitted by their published policies.

6.1 Hosting, Infrastructure, and App Backend

Google Firebase / Google Cloud / Google LLC

Services: authentication (including anonymous auth), cloud storage, database, cloud functions, remote configuration, crash diagnostics, analytics, and backend operation.

Data that may be shared: device information, app identifiers, usage data, crash logs, scan images or storage paths, collection metadata, subscription metadata, and technical logs.

Purpose: hosting and operating the Service, securing requests, storing collection data you save, and supporting recognition workflows.

6.2 AI Recognition Providers

Google Gemini / Vertex AI or other AI API providers

Services: artwork image recognition and structured result generation.

Data that may be shared: artwork images, prompts, request metadata, and related technical data.

Purpose: generating recognition results, providing App functionality, safety and abuse monitoring, and service operation.

6.3 Marketplace and Listing Data

eBay and similar marketplace providers

Services: marketplace search, comparable listing retrieval, and links to third-party product pages.

Data that may be shared: image-derived search inputs, text queries, and technical request metadata.

Purpose: providing market reference values and shop/browse experiences. Opening a third-party listing page may cause that third party to collect data under its own policy.

6.4 Analytics and Attribution

AppsFlyer, Inc. and similar attribution partners

Services: marketing analytics, install attribution, conversion measurement, and fraud detection.

Data that may be shared: advertising identifiers, device identifiers, IP address or approximate location derived from IP address, in-app events, and attribution data.

Purpose: measuring installs and conversions, detecting fraud, and evaluating marketing performance.

6.5 Advertising and Marketing Partners

Google Ads, Meta, TikTok, or similar partners (if enabled)

Services: advertising management, ad delivery, attribution, and performance measurement.

Data that may be shared: IP address, advertising identifiers, in-app events, purchase events, and technical identifiers.

Purpose: promoting the App, measuring ad performance, and optimizing campaigns.

If a particular version of the App does not integrate or enable one of the advertising or marketing services listed above, data will not be collected or shared through that service. You may reset or limit your advertising identifier or turn off personalized ads through your Android system settings.

6.6 Subscription and Payment Management

Google Play Billing and related subscription tools

Services: purchase processing, subscription management, receipt validation, and paid entitlement management.

Data that may be shared: subscription and transaction metadata, Google Play purchase token, device information, App usage timestamps, internal identifiers, and technical data.

Purpose: validating in-app purchases, managing subscriptions, confirming subscription status, and enabling paid features.

7. Sale of Personal Data

We do not sell your personal data. We also do not sell personal and sensitive user data, as defined by Google Play, to third parties for monetary consideration.

In regions where applicable law may define certain advertising, attribution, or cross-app tracking activities as a “sale” or “sharing,” you may exercise applicable opt-out rights through system privacy settings, advertising identifier settings, or by contacting us.

8. Data Retention and Deletion

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

You may request access to, correction of, or deletion of personal data related to you by contacting andygo6632@gmail.com. Please also see our Data Deletion Request page. We will process your request within the period required by applicable law. If certain data must be retained for security, fraud prevention, financial, legal, or compliance reasons, we will restrict further processing where legally appropriate.

9. Your Rights and Choices

Depending on the laws applicable in your region, you may have the following rights:

You may also manage App permissions, reset or limit your advertising identifier, turn off personalized ads, clear App data, or uninstall the App through your Android system settings.

10. Security

We use reasonable technical and organizational measures to protect personal data, including encrypted transmission, access controls, logging and monitoring, permission management, and security reviews.

Although we work to protect your information, no internet or electronic storage system can be guaranteed to be completely secure. If a security incident occurs, we will take reasonable steps to investigate, mitigate its impact, and notify affected users and regulators where required by applicable law.

Please download the App only from the official Google Play Store. If you obtain the App from any unofficial source, we cannot guarantee its security, integrity, availability, or proper operation.

11. International Data Transfers

We and our service providers may process and store your information outside your country or region, including in the United States, Singapore, the European Economic Area, or other locations where servers are located. Data protection laws may differ from one jurisdiction to another.

Where required by applicable law, we will take appropriate measures to protect data transferred across borders, such as using contractual terms, data processing agreements, or other lawful transfer mechanisms.

12. Children’s Privacy

The App is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. If you are located in the European Economic Area or the United Kingdom, you must be at least 16 years old, or the lower age permitted by local law, to use the App without parental or guardian consent.

If we become aware that we have collected personal data from a child without the required consent, we will take reasonable steps to delete such information as soon as possible. If you believe that a child has provided personal data to us, please contact us at andygo6632@gmail.com.

13. Third-Party Links and Services

The App may contain links to third-party websites, services, shop listings, or platforms, including marketplace product pages opened inside the App. The privacy practices of third-party services are not governed by this Privacy Policy. Please review their privacy policies before using those services.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the “Last Updated” date. If changes materially affect your rights or our data processing practices, we will notify you where appropriate through in-app notice, email, or other reasonable means.

15. Contact Us

Artoma

Email: andygo6632@gmail.com