MohurPrivacy policy
For the Mohur mobile app, published by Devian Labs. Last updated 16 August 2026.
Mohur is a coin collecting app. It holds a record of your collection, and part of that record — what you paid for a coin and what you think it is worth — is nobody else's business. This page says exactly what is stored, who can read it, and how to get rid of it.
The short version. We hold your Google account name, email and photograph, the coins you catalogue, what you post in the community, and your progress through the app. Your purchase prices and valuations are stored where only your own account can read them. We do not sell anything to anybody. You can delete the whole account from inside the app, and everything personal goes with it.
Who is responsible
Devian Labs is responsible for the data described here. Write to support@devianlabs.com about anything on this page, including access, correction and deletion requests.
What is collected, and why
| What | Where it comes from | Why |
|---|---|---|
| Name, email address and profile photograph | Your Google account, when you sign in | To have an account at all, and to attribute your coins and posts to you |
| Profile details you write — a short biography, a replacement photograph | You | Shown on your public profile |
| Coin records: title, description, period, ruler, denomination, metal, weight, diameter, claimed grade, grading service and serial, tags, photographs | You | The catalogue and album the app exists to be |
| Acquisition records: purchase date, price paid, estimated value, dealer or source, currency, private notes | You, optionally | Your own portfolio figures. See "Money", below |
| Verification votes — your verdict and grade on other collectors' coins, and the accuracy record built from them | You | The community verification the app runs on, and the weight your vote carries |
| Messages, photographs and reactions you post in spaces, and which spaces you have joined | You | The community |
| XP, level, achievements, sets completed and Knowledge Base reading progress | Your use of the app | Progress, and the leaderboards |
| Reports you file about a coin or a message | You | Moderation |
| Crash diagnostics: the error, where in the app it happened, device model and operating system version | Automatic, when the app fails | Fixing it. Collected through Firebase Crashlytics, and switched off in development builds |
| Basic app usage and device identifiers, which may include the advertising identifier | Automatic, through the Google Firebase SDKs included in the app | Understanding whether the app works and is used. See "Third parties" |
The app does not ask for your location, does not read your contacts, and does not access your photo library except at the moment you pick a photograph to attach to a coin, a profile or a message.
Money
What you paid for a coin, what you value it at, who you bought it from and the notes you keep about it are stored separately from the coin itself, in a record that only your own account is permitted to read. That is enforced by the database's own access rules, not only by what the app chooses to display.
If you turn on "show financials" for a coin, the figures you have chosen to publish are copied onto the public record of that coin, and other collectors can then see them. That is the only way they leave your account, and it happens because you asked for it.
What other people can see
- Your public profile — name, photograph, biography, level, XP, achievements and verification track record. Signed-in collectors can see this, and the leaderboards rank you on it.
- Coins you publish to the museum — the record and its photographs, without your acquisition figures unless you switched them on. You can keep a coin private, and you can hide your identity on a published coin.
- What you post in a space — visible to anyone who can see that space. The country and topic rooms are readable by any signed-in collector.
- Your votes — verification is a public record. A coin's verdict is evidence, and evidence nobody can inspect is not evidence.
Third parties
The app runs on services provided by two companies, and no others:
- Google — Firebase Authentication for sign-in, Cloud Firestore for the database, and Crashlytics for crash reports. Google's handling of that data is governed by the Firebase privacy documentation and Google's own privacy policy.
- Cloudflare — object storage for photographs, and the service that delivers them to the app.
Advertisements shown in the app are currently our own, served by us, with no third-party advertising network involved and no profile built about you for them. If that changes, this page will change with it before the network is switched on.
We do not sell personal data, and we do not share it for advertising.
Where it is stored
On Google and Cloudflare infrastructure, which means it may be processed on servers outside your country. Transfers between your device and those services are encrypted.
How long it is kept
Until you delete it. Deleting a coin removes its record and its acquisition figures. Deleting your account removes your profile, your entire collection and your reading progress. Two things survive that deletion, without your name attached to them:
- Verification votes you cast. Other collectors' coins carry a verdict that your vote helped decide; removing it would silently change the standing of every coin you ever judged.
- The text of messages you posted. They are re-attributed to "Deleted collector" — your name and photograph are removed, and what remains is an account identifier that no longer belongs to anybody.
Photographs you uploaded may remain in backup storage for a period after deletion before they are removed.
Your rights
You can, at any time:
- See what is held — most of it is on your own screens; write to us for the rest.
- Correct it — edit your profile and your coins in the app.
- Delete it — Profile → Leaving → Delete account, or see how to delete your account. You can also ask us to do it by email.
Depending on where you live, you may have further rights under the Digital Personal Data Protection Act, 2023 (India), the GDPR or comparable law, including the right to object to processing and to complain to a regulator. Email us and we will act on any such request.
Children
Mohur is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has an account, write to us and we will remove it.
Changes
If this policy changes materially we will update this page and change the date at the top. The app links to this page rather than carrying a copy, so what you read here is always the current version.
Contact
Devian Labs — support@devianlabs.com