Photos and identification
When you submit a photograph, Archove extracts any embedded GPS coordinates, removes EXIF and other metadata from the uploaded image, and sends the sanitized image with the extracted coordinates to its identification service. For a new building that may need a portrait, a sanitized copy is temporarily stored in private storage. Photos used only to identify an existing catalog building are processed in memory.
Generated portraits
If Archove identifies an eligible building outside the catalog, it may create a shared building record and portrait. A suitable submitted photo may be sent to the portrait provider as an architectural reference. When more detail is needed, Archove looks for reference photographs on Wikimedia. Your submitted photo stays private; the generated portrait and building record become part of the shared catalog.
Collector and collection data
Archove does not require registration or social sign-in. It stores a private service identifier, collected building IDs, collection dates, encounter counts, and favorites. A verified purchase or restore can reconnect that collection on another device using the same platform store account.
Experience and purchase data
Archove records screen visits, actions, and purchase outcomes using installation and session identifiers to improve the experience. These events do not contain your photos or precise location. After a verified purchase or restore, those identifiers may be linked to your private collector identifier. Billing events are provided by RevenueCat.
Location
Location access is optional. When permission is granted, Archove may send the device’s current coordinates at submission separately from coordinates embedded in the selected photo. These coordinates support identification and are not used to build a history of your movements. The collection map uses each building’s canonical location.
Service providers
Archove uses Supabase for authentication and collection storage, Vercel for application hosting and AI routing, Google models for identification and research, OpenAI for portrait generation, and the platform store for subscription billing.
Your choices
You can submit a photo without granting device location access. A selected photo may still contain embedded GPS coordinates, which Archove uses as described above. You can delete your Archove profile and collection data from Settings. Store subscriptions must be canceled separately through the store that manages them.
Security and retention
Archove limits private identifiers to what the service needs and restricts collection records to their owner. A photo staged for a possible portrait expires after 10 minutes unless you begin generation. Once generation begins, access for processing lasts at most 24 hours, including retries. The private copy is queued for deletion when processing finishes, the deadline expires, or you delete your Archove data. Deletion runs automatically and is retried if storage is temporarily unavailable. These limits describe Archove’s own storage; photos sent for identification or generation are also processed by the service providers listed above.
Public building records and portraits are shared across the catalog. After deletion, Archove retains minimal verified billing lineage without collection content so a later restore cannot attach a store purchase to the wrong collection. Data may also be retained when required for security, fraud prevention, or legal obligations.
Contact
For privacy questions or requests, email hello@archove.app.