HeyCarat Privacy Policy

Effective November 3, 2026

This policy explains what the HeyCarat iOS app collects, why, and who else sees it. We have tried to keep it short and plain.

Who we are

The HeyCarat app is operated by Brilliancestone LLC, a Texas limited liability company ("HeyCarat", "we", "us"). Questions or requests: contact@heycarat.com.

What we collect and why

• A random app ID. There is no account or sign-up. When you first open the app, it creates a random ID and keeps it on your device. It is sent with your requests so we can keep your checks, orders and purchases together. It is not linked to your name unless you place an order.
• A device check token. On iPhone the app also asks Apple for a DeviceCheck token and sends it to us. We use it to count free checks per device and to limit abuse. It does not identify you to us.
• Photos and links you submit for Value. When you scan a piece of jewelry or paste a product link, the photo or link is sent to our server and on to our analysis service, which works out an estimated price. We store a record of each check (its ID, your app ID, the link if you used one, its status and time). We use the camera and your photo library only for this, and only when you choose to scan. The app never reads your other photos.
• Order details. To buy a stone or ring, we collect your name, phone number and delivery address at checkout, so we can fill and deliver the order. We also keep the order itself (item, price, status).
• Payment information. Payments are handled by Stripe (card, Apple Pay). We do not see or store your full card number. We receive the payment result and order reference from Stripe. Stripe's software inside the app also collects device and interaction data for fraud prevention and analytics, under Stripe's own privacy policy.
• In-app purchases. HeyCarat Plus and check packs are bought through Apple. We receive records of those purchases (what was bought, when, and whether a subscription renews) so we can unlock what you paid for. We do not receive your Apple ID or card details.
• Language, currency and country. The app sends your language, chosen currency and your device's region with requests, so prices and text show correctly.
• Basic server logs. Our servers handle requests and may keep ordinary technical logs, such as time and errors.

We do not use advertising or analytics SDKs, we do not show ads, we do not track you across other companies' apps or websites, and we do not sell your data.

Who we share it with

Only the people who help us run the app:

• Stripe processes payments.
• Apple processes in-app purchases and provides the DeviceCheck service.
• Render hosts our servers and database.
• Our analysis service (InstaJewel) receives the photo or link you submit for Value, in order to price the piece.
• Suppliers and our workshop, where needed to fill an order: they receive the delivery details for your order.
• Authorities, if the law requires it.

How long we keep it

Order and payment records are kept for 7 years for tax and accounting purposes. Other data tied to the app's on-device ID (such as Value checks and purchase records not needed for tax) is deleted within 30 days after you ask us to delete it. Because the app has no accounts, you ask us by emailing contact@heycarat.com.

Photos and links sent for a Value check are used only to run the check and are not kept by us. Our analysis service deletes them within 30 days.

Your choices

• Delete the app to remove the random ID from your device. A new one is made if you reinstall.
• Email contact@heycarat.com to ask for a copy or deletion of the records we hold on the server. Please include the order details or the support code shown in the app so we can find them. We may keep what the law requires us to keep.
• Camera and photo access can be turned off any time in iPhone Settings. Value scans will not work without them, but you can still paste a link.
• Subscriptions are managed in your Apple ID settings (see our Terms of Use).

Children

HeyCarat is not directed to children under 13, and we do not knowingly collect their information. If you think a child has given us data, email contact@heycarat.com and we will delete it.

Changes

If we change this policy we will update this page and the date at the top. For significant changes we will also tell you in the app.

Contact

HeyCarat, operated by Brilliancestone LLC (Texas), contact@heycarat.com