Private by default
Artwork records, photos, notes, locations, values, and supporting documents stay on your device unless you choose to send them for support, export, diagnostics, or Archivale research help.
Privacy Policy
Privacy Policy
Archivale is built for private collectors, families, and collection managers who want records they can trust, revisit, and preserve. This policy explains how the website and app handle the information you choose to keep with Archivale.
Last updated: July 9, 2026. Privacy questions, deletion requests, and export requests should be sent through the support page.
User-controlled capture
Camera, photo, file, and document access are used for actions you start, such as taking a photo, importing an image, attaching a PDF, or importing and exporting CSV files.
No sale of data
Archivale does not sell personal or sensitive user data. The app is not an advertising, marketplace, appraisal, or social-network product.
Archivale research help
When you ask for research help, Archivale uses the smallest useful request and keeps the rest of your record private. You stay in control of what gets sent and what gets saved.
Data Categories
| Category | What it can include | How it is used |
|---|---|---|
| Local artwork records | Artwork titles, artist names, dates, medium, dimensions, condition notes, current location, lifecycle status, provenance notes, user-provided purchase, sale, or insurance details, and review status. | To create, edit, review, search, and export your private art records. User-confirmed facts control the record; Archivale does not certify authenticity, attribution, appraisal value, insurance approval, or legal status. |
| Photos and supporting documents | Camera captures, imported artwork photos, supporting photos, receipts, certificates, appraisals, PDFs, and related attachment metadata such as file type, size, checksum, and local storage references. | To attach supporting material to artwork records and keep record context together. Supporting documents enrich a record but do not by themselves establish authenticity or legal conclusions. |
| Import and export files | CSV import files, CSV exports, generated archive files, generated reports, and files you choose to save or share outside the app. | To move your own record data into or out of Archivale. Exported copies are controlled by the destination you choose, such as your device files, cloud storage, or another app. |
| Early access and support | Email address, optional name, platform interest, optional country or time zone, optional notes, consent version, retention version, source route, client submit timestamp, and hidden spam-check fields. | To review early access interest and respond to support questions. A contact record does not create an account and does not automatically add anyone to a mailing list or access group. |
| Support inquiries | Information you choose to submit through the support route, including contact details and the message content you review before sending. | To answer support, privacy, deletion, export, or early access questions. Do not include private artwork, document, price, or collection details unless support specifically asks for the minimum needed to resolve your request. |
| Diagnostics | App version, build number, platform, OS version, device model, exception type, stack trace, crash timestamp, fixed app-area labels, installation or diagnostic identifiers, and non-sensitive app configuration metadata. | To keep the app stable, understand crashes, and improve reliability. Diagnostics are limited to the smallest useful set, and they are not used to profile your collection. |
| Archivale research help | Only after you ask for it: a minimized image derivative, allowed draft hints, app context, request identifiers, validated source metadata, and content-free operational details. | To return source-backed research suggestions for your review. Raw notes, full records, document bodies, filenames, paths, local artwork IDs, and source URLs are not allowed in the request. |
| Website technical behavior | This website does not use analytics cookies, advertising trackers, third-party form tools, or website account login. Archivale records a small aggregate page counter with the page path, date, coarse referrer category, and broad screen-size bucket. It does not store visitor IDs, raw referrers, IP addresses, user agents, artwork details, prompts, or per-visitor event rows in that counter. Hosting and security infrastructure may still process ordinary request metadata needed to serve pages and protect the site. | To understand which public pages are useful, keep the privacy policy, support route, blog, pricing, and early access pages available, and maintain basic site reliability without building visitor profiles. |
When Information Leaves Your Device
Archivale does not sell personal or sensitive user data. Archivale shares or makes data available only in limited situations:
- With service operators that keep the website, support route, diagnostics, hosting, or Archivale research help running.
- With destinations you choose, such as a CSV export, report export, file share sheet, support message, or other user-directed transfer.
- When required to comply with law, security, fraud prevention, abuse handling, or a business transfer with appropriate notice.
Local artwork records, photos, documents, notes, and collection contents are not intentionally sent through diagnostics. Any reported crash or operational detail is limited to fixed, sanitized categories.
How Archivale Protects Records
- Local records and attachments stay on your device by default in app storage.
- Files are not placed into a public gallery or shared folder by default. Exports remain app-private until you choose where to save or share them.
- Support, diagnostics, and research help use secure connections when they connect outside your device.
- Research help requests are only sent when you start the feature, and only with the minimum context needed.
- Crash and operational telemetry must avoid artwork titles, artist names, locations, prices, notes, filenames, paths, prompts, responses, source URLs, contact lists, tokens, and secrets.
Retention, Deletion, And Export
| Area | Retention and control |
|---|---|
| Local app data | Artwork records, photos, documents, reports, and exports remain on your device until you edit records, delete records, delete app data, uninstall the app, or save/share an exported copy elsewhere. Deleting the app or local records does not delete copies you already exported or shared outside Archivale. |
| CSV import and export | CSV files you import are used to create or update local records. CSV exports are created only when you start an export and are controlled by the destination you select. You may use export paths to retrieve your own record data where the shipped release supports them. |
| Accounts | Archivale does not offer Archivale account login for this app or the public website. Your records stay on your device until you choose to export or share them. |
| Early access interest | Pending early access interest records are retained for up to 90 days unless Archivale is actively contacting the person. Rejected records are retained for up to 30 days for audit and abuse review. Deletion requests are routed through support and targeted for manual handling within 30 days. |
| Support inquiries | Support messages are kept as needed to respond, maintain support history, handle safety or abuse issues, and satisfy reasonable operational or legal needs. You can request deletion through the support page, subject to records that must be retained for security, abuse, or legal reasons. |
| Diagnostics | Crash and diagnostic records are kept for stability review according to operational need. Early access removal requests should be sent through support. |
| Archivale research help | When you ask for research help, temporary image copies are deleted after the request finishes or fails. A short request history record may remain for up to 24 hours, and only non-sensitive operational details may remain for up to 30 days. |
Permissions And Local Behavior
Archivale asks for device access only when the app feature needs it. Camera access supports taking artwork photos. Photo and file access supports importing images, documents, and CSV files. Export and share flows use the destination you choose. The app should not use these permissions for background tracking, advertising, or unrelated collection.