Bullion Keeper

Privacy Policy

Bullion Keeper is designed to keep your portfolio private. This page explains exactly what data lives where and who can see it — the short answer is you.

Last updated · 12 October 2026

The short version

Bullion Keeper is a single-developer indie iOS and macOS app made by Michael Blach trading as Code 1 Studios. Your portfolio data is stored on your device. It syncs through your own private iCloud database, and Code 1 Studios cannot see it. Photo editing and AI features run on your device. We do not sell, share, or transmit your data to any third party for advertising, analytics, or profiling.

1. Who we are

Code 1 Studios is the trading name of Michael Blach, a sole trader based in Queensland, Australia. Contact: support [at] code1studios [dot] com.

2. What data Bullion Keeper stores

Bullion Keeper stores the following on your device (and in your own private iCloud):

  • Your holdings: metal, type, quantity and weight unit, serial number, mint, Country of Origin, purchase price and date, current value, coin shape and notes.
  • Your photos and holding icons, including any edited copies you make. Originals are always kept.
  • Your preferences: currencies, weight unit, refresh schedule, display, App Lock and metal settings, and your optional metalpriceapi.com API key.
  • Cached prices and a local usage/error log, used to show your portfolio and to help with bug reports.

Bullion Keeper does not collect: your name, your email address (unless you email us for support), your location, your device identifiers for tracking, or any personally-identifying information.

3. Where your data lives

On-device

By default, all data is written to the app’s private container on your iPhone, iPad or Mac. iOS and macOS sandbox these containers — no other app can read them without your explicit permission.

iCloud

If you’re signed in to iCloud, Bullion Keeper automatically syncs your holdings and photos through a CloudKit private database in your own Apple Account, so they appear on your other devices. This data is encrypted in transit and at rest. Code 1 Studios has no access to this database.

4. What we do NOT do

  • No third-party analytics. No Firebase, no Mixpanel, no Amplitude, no Sentry.
  • No advertising SDKs.
  • No account creation. There is no username, no password, no email required.
  • No sharing of any data with any third party for any purpose.
  • No AI/ML training on your data, and no cloud AI services.

5. Prices and outside websites

To show prices, Bullion Keeper requests rates from free public price sources or, if you add an API key, from metalpriceapi.com, an independent service. These requests contain no personal information, only the metals and currencies requested and your key, if you’ve added one. If you sign up with metalpriceapi.com, that account is created and managed on their website under their own privacy policy; the sign-up page opens inside the app.

When you tap Get Value for a coin, Bullion Keeper opens an eBay sold-listings search and a Numista catalogue search built from the coin’s details. Those sites are run by their owners under their own privacy policies. Bullion Keeper doesn’t send them anything else.

On-device processing

These features run entirely on your iPhone, iPad or Mac. Nothing is uploaded to Code 1 Studios or any other server:

  • Coin identification (Get Value) and AI-Assisted Import use Apple’s on-device Foundation Models (Apple Intelligence). Get Value uses only text details, never your photos or serial numbers.
  • Background removal, outline tracing, automatic coin alignment and photo enhancement use Apple’s Vision and Core Image frameworks.

Permissions

  • Camera: only when you choose to take a photo of a holding.
  • Add to Photos: only when you choose Save Image to save a photo to your library.
  • Face ID, Touch ID or Optic ID: only if you turn on App Lock. Apple handles it; Bullion Keeper never sees your biometric data or passcode.

6. If you contact support

If you email support [at] code1studios [dot] com, your email address and message are stored in Michael’s email inbox for the purpose of replying to you and improving the app. Emails are retained for as long as they remain useful for support. You can request deletion at any time.

7. Children

Bullion Keeper is not directed to children under 13. It contains no advertising and collects no personal information from any user.

8. Data deletion

To delete your Bullion Keeper data:

  • Use Settings › Danger Zone › Erase All Data to permanently delete every holding and photo on all devices that share your iCloud account.
  • Or delete the app, and remove its iCloud data in Settings › [your name] › iCloud › Manage Storage.
  • To remove your metalpriceapi.com key, clear it in Settings › Live Price Data.
  • To request deletion of any support emails, write to support [at] code1studios [dot] com.

9. Your rights

Because Bullion Keeper stores your data on your own devices, you already control it. You have the right to access it (Settings › Backup or Export & Print), correct it (edit any holding), and delete it (Settings › Danger Zone › Erase All Data, or delete the app). If you have any concerns, reach out.

10. Changes to this policy

If we update this policy, the “Last updated” date at the top will change. Material changes will be flagged in-app.

11. Contact

support [at] code1studios [dot] com

© 2026 Michael Blach · Code 1 Studios. All rights reserved.