Privacy Policy

Effective October 19, 2026. Version 2026-10-19.1.

Crystal Ledger is made by Clattershop LLC, a Wisconsin company ("we", "us"). This policy explains what we collect when you use the Crystal Ledger app, why, who else handles it, how long we keep it and the choices you have. Questions or requests: crystal-ledger-support@clattershop.com.

The short version:

• Your Reflections, your Ledger and your stone photos are private to you. We do not show them to other people, sell them, use them for advertising or use them to train AI.
• There are no ads and no third-party analytics or advertising tools in the app. We do not track you across other apps or websites. Usage analytics stay on our own servers, and you can turn them off in Account.
• Location data is removed from your photos on your phone, before they are uploaded. Your location never leaves your device.
• To identify a stone, we send its photo to an image-identification AI service that works for us.
• You can delete your account, and everything in it, from the app.

This is a test build

You are using a pre-release test version of Crystal Ledger, shared with friends and family. It runs on our test servers. Purchases are made in Apple's and Google's test modes and do not charge you. Because this is a test environment, we may need to reset it, and anything you keep in the app (your Ledger, Reflections and photos) may be erased when we do. We will try to tell you first. Please export anything you want to keep.

Who can use Crystal Ledger

Crystal Ledger is offered in the United States. You can browse the free Encounters without an account. To create an account you must be 13 or older. We do not ask for your birth date or verify your age, and we do not offer children's accounts. The app is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, tell us at crystal-ledger-support@clattershop.com and we will delete it.

What we collect and why

Your account

• Phone number. You sign in with your phone number and a one-time code sent by text message. We use your number only to sign you in and keep your account secure. We do not use it for marketing and we do not show it to anyone. Sign-in is provided by Amazon Cognito, part of Amazon Web Services (AWS); AWS sends the text message. Your carrier's message and data rates may apply.
• Account identifiers and sign-in records. An internal account ID, the devices and sessions you are signed in on, and the time of sign-in, so we can keep you signed in and stop misuse.
• Your policy choices. Which version of these Terms and this Privacy Policy you were shown, what you chose and when, so we have a record of your choices.
• Your settings, such as your content setting (Both, Science only or Meaning first) and your usage analytics setting, so the app works the way you chose.

Your Ledger and Reflections

• Reflections. What you write about an Encounter or a stone. Reflections are private: only you can see them in the app. We do not use them for analytics or advertising, and we do not send them to any AI service.
• Ledger entries. The stones you keep: stones you bought or own, stones you want (your wish list), your own stones, the identification you confirmed, and any details you add — where and when you acquired a stone, the price you paid, its size and your notes.
• Stone photos. Photos you take in the Snap tab or choose from your library. You can take them anywhere, including in a shop. If you have no connection, photos wait on your phone and upload when a connection returns. We store them privately on our servers so you do not lose your collection if you lose your phone. Free accounts keep photos for up to 25 stones, stored as a reduced copy (about 2048 pixels on the long side). Crystal Ledger Plus keeps photos for unlimited stones at full resolution.
• No location. Phone photos often record the place they were taken. Crystal Ledger removes that location data on your phone before a photo is uploaded, so your location never reaches us or anyone we work with.
• Photo fingerprints. We keep a fingerprint (a hash) of each photo so the same photo always gets the same identification. A fingerprint cannot be turned back into the photo.

People who can access our systems to run the service (currently the owner of Clattershop LLC) can technically reach stored data. We look at your private content only when you ask us to (for example in a support request), when it is needed to keep the service secure, or when the law requires it.

Photo identification

When you ask Crystal Ledger to identify a stone, we send that stone's photo or photos to an image-identification AI service that processes them on our behalf and returns possible matches. We will name that service in this policy before identification is available to you, and update this policy if we change services. We use only a provider that may use your photos solely to return results to us, keeps them no longer than needed to do that, and does not use them to train its models. We do not send your phone number, Reflections or notes with the photo.

Encounter transformations

The Time inside matter film in this build is a pre-made film. Watching it sends nothing about you to any AI service. If we later add transformations made from your own photos, we will update this policy and tell you before you use it.

Purchases

Purchases are made through the App Store or Google Play. Apple or Google handles your payment; we never see your card or bank details. Apple or Google sends us a record of the purchase (such as a transaction ID, the product, the date, whether a free trial or subscription is active, renews, was refunded or ended). We use it to give you what you bought, to restore purchases, to apply the free allowances and the Plus lapse rule below, to prevent fraud, and for our accounting.

Operational records

To run the app safely we always keep some records. They are necessary for the service and are not affected by the usage analytics setting:

• Error reports — what went wrong, where in the app or our servers, app version and device type, so we can fix problems.
• Security and sign-in records — to detect and stop misuse.
• Purchase verification records — described above.
• Records of what you did, such as keeping a stone or saving a Reflection, as part of running the feature itself.
• Server logs — technical records of requests to our servers.

These records never include your Reflections, photos, sign-in codes or the content of your notes. They are kept on our own servers at AWS; we do not use an outside error-monitoring service.

Product usage analytics

The app records how it is used — for example which screens and Encounters you open, whether you finish an Encounter, use identification, view an offer or keep a stone — so we can learn what is working and make the app better. These events carry a random identifier for this installation of the app and, once you sign in, your account. They are stored on our own servers. They never include your Reflections, photos, notes, phone number or sign-in codes.

• In the United States, usage analytics are on unless you turn them off. This applies whether or not you are signed in.
• In the European Union and the United Kingdom, usage analytics are off unless you turn them on.
• You can change this at any time in Account. When usage analytics are off, we stop collecting them from then on, and we never upload events from a time they were off.

We do not use any third-party analytics, advertising or attribution service, and we do not share usage data with anyone for advertising.

Support

If you email crystal-ledger-support@clattershop.com, we receive your email address and whatever you send. We use it to answer you. Support mail is stored in our email storage at AWS, and we may use AI tools that work for us to help read, sort and draft replies to it.

What we do not collect

We do not ask for your name, email (unless you email us), birth date, identity documents, contacts or your device's location. We do not use advertising identifiers.

Who else handles your information

We do not sell your personal information and we do not share it for advertising. We share it only with:

• Amazon Web Services, which hosts our servers, stores your data, photos and support mail, runs sign-in and sends sign-in texts. Our data is stored in the United States (AWS us-east-1).
• The image-identification AI service described above, only for photos you ask us to identify.
• AI tools that help us with support mail, as described above.
• Apple and Google, which handle purchases, subscriptions, refunds and app distribution under their own privacy policies. If you use TestFlight or a Google Play testing track, Apple or Google may also share with us crash reports and any feedback you choose to send through them.
• Authorities or others, when the law requires it, or when needed to protect someone's safety, our rights or the security of the service.
• A buyer or successor, if Clattershop LLC or Crystal Ledger is sold or merged, under this policy's protections.

Sharing a sample Encounter with a friend sends only a public link to that sample. It never includes your Reflections, Ledger or photos. Exports (spreadsheet or PDF) are made on your phone and go only where you send them.

How long we keep it

• Your account, Ledger, Reflections and photos: until you delete them or delete your account, except as described in the Plus lapse rule below. Removing a stone or a Reflection deletes it.
• Photos after a Plus subscription ends: your stone entries stay readable and exportable forever. Photos for 25 stones stay, as they were stored. Photos for any other stones are kept for 30 days so you can download them — the app shows the removal date — and are then removed. If you subscribe again before that date, nothing is removed. You choose which 25 stones keep their photos; if you do not choose, we keep the 25 you added first.
• Usage analytics: 25 months, after which they are deleted or combined so they no longer identify you.
• Error reports and server logs: most server logs for 14 days, database logs for up to 365 days.
• Purchase records: for as long as needed to provide what you bought, and for 7 years for tax and accounting. See "Deleting your account" below for what remains after deletion.
• Support emails: 2 years after the conversation ends.
• Backups: our database backups roll off after 7 days.

Deleting your account

You can delete your account in the app: Account → Delete account. This deletes your account, your phone number from our sign-in system, your Ledger, your Reflections, your stone photos and their fingerprints, the sample links you created, and the usage analytics linked to you, within 30 days. Deletion cannot be undone, so export anything you want to keep first.

Deleting your account does not cancel a subscription. Cancel Crystal Ledger Plus in your App Store or Google Play subscription settings first. After deletion we keep only our purchase records, no longer linked to you, for 7 years; a record that the deletion happened; and support emails for 2 years. The account deletion notice in the app has the details.

You can also ask us to delete your account by emailing crystal-ledger-support@clattershop.com. To confirm the request comes from you, we will send a code by text message to the phone number on the account.

Your choices and rights

Wherever you live in the United States, you can:

• See and take your data — export your Ledger as a spreadsheet or PDF in the app at any time, free, or ask us for a copy of what we hold about you.
• Correct it — edit your Ledger and Reflections in the app, or ask us.
• Delete it — delete individual stones, photos and Reflections, or your whole account.
• Turn usage analytics off or on in Account.
• Not be discriminated against for using these rights.

Send requests to crystal-ledger-support@clattershop.com. We will answer within 45 days. We may need to confirm the request comes from the account holder before acting on it.

We do not sell personal information or share it for cross-context behavioral advertising, and we do not use it for profiling that has legal or similarly significant effects.

Security

Your data travels encrypted between the app and our servers and is encrypted where we store it. Access to our systems is limited and protected. No system is perfectly secure; if a breach affects your personal information, we will tell you as the law requires.

Changes to this policy

When we change this policy we will show you the new version in the app, with its date. If a change materially affects how we use your information, we will ask for your acknowledgment again before it applies to you.

Contact

Clattershop LLC, Wisconsin, United States. Email: crystal-ledger-support@clattershop.com.