Bezeler Privacy Policy

Last updated: September 1, 2026

This policy covers the Bezeler iOS app published by Zoink Studio L.L.C. ("Zoink Studio", "we", "us"). It is specific to Bezeler. Our other apps handle different things and have their own policies.

The short version

Your watch collection never leaves your phone. Bezeler has no accounts and no sign-in, and we have no way to look at what you own. The single thing that is ever sent to us is a photo you deliberately take on the Scan tab, and it is used to identify the watch and then thrown away.

1. What stays on your device

Everything you enter: your watches and their specifications, your own photos, purchase prices, current values, notes, wear log, wishlist, service reminders, and whether you hold a Bezeler Pro subscription. All of it is written to your device's own storage and nowhere else. It is included in your device backup if you back your device up, and it is deleted when you delete the app. Export to CSV or JSON puts a copy wherever you choose to send it, which is then yours to look after.

2. The Scan feature, in detail

When you tap the capture button on the Scan tab, Bezeler takes one photo and sends it over an encrypted connection to our identification server, which is operated by us and hosted on Railway. That server holds the photo in memory, forwards it once to Anthropic's Claude API to read what is in the picture, and discards it as soon as it has answered. The photo is not written to a disk, a database, a file store or a log file on our side, and we keep no copy of it after the response.

The photo is not saved to your photo library either. Bezeler opens the camera only while you are on the Scan tab, and never records audio.

The request contains the photo and a single access key that is identical in every copy of Bezeler. It carries no account, no user name, no device identifier and no advertising identifier, and nothing about your existing collection is included. Our server has no user accounts at all, so it is structurally unable to attribute a scan to a particular person.

To estimate what a watch is worth, our server then queries marketplace and price sources such as eBay using only the brand, model and reference number read from the photo. Those queries say nothing about you.

3. Technical data we do touch

Our server keeps a short-lived rate limiter, to stop one source flooding it. That counter holds the calling IP address in memory for under two minutes and is used only to protect the service from abuse. It is never written to a database, never written to a log, never sent anywhere and never linked to you or to anything you scan.

Separately, and like any website or API, our hosting provider keeps its own short-term server access logs, which record technical details such as an IP address and the address requested. We use those only for security and reliability.

Our server also keeps a cache of the prices it has looked up. It is keyed by the item, never by a person or a device, so it cannot be traced to you.

4. What we do not do

• No analytics, telemetry or crash-reporting SDK. There is none in the app and none in the server.
• No advertising and no advertising identifiers.
• No tracking of you across other companies' apps or websites.
• No selling or sharing of personal information.
• No account, no email address, no password, no profile.

5. Service providers

• Anthropic receives a scanned photo so that the watch in it can be identified, as described above.
• Railway hosts our identification server and this website.
• Apple processes subscription payments and distributes the app. We never see your payment details. Apple's handling is covered by Apple's Privacy Policy.
• Marketplace and price sources such as eBay are queried for current prices. Those queries contain the watch being looked up and nothing about you.

6. Subscriptions

Bezeler Pro is an auto-renewable subscription sold through the App Store. Apple handles the payment and the billing relationship, and you can view, change or cancel it in your App Store account settings. Bezeler stores only a flag on your own device recording that the subscription unlocked the paid features. We are never told who subscribed.

7. Children

Bezeler is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us something, write to us and we will delete it.

8. Your rights

Laws such as the GDPR and the CCPA give you rights to access, correct, delete and export the personal information a company holds about you. Because your collection lives only on your device and our server keeps no record tied to you, we hold nothing about you to hand over or erase. To remove everything Bezeler has stored, delete the app. For questions, write to hi@zoinkstudio.com, and we will not treat you differently for asking.

9. Security and international transfer

Everything sent between the app and our server is encrypted in transit. Our server and our providers operate in the United States and elsewhere, so a scanned photo may be processed outside your own country during the few seconds it takes to identify it. No method of transmission is completely secure and we cannot promise absolute security.

10. Changes

If Bezeler starts handling something differently, we will update this page and change the date at the top before the version that does so is released.

11. Contact

Zoink Studio L.L.C.: hi@zoinkstudio.com