Xchanger - Privacy Policy

1. Introduction

Mango Labs ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Xchanger mobile application ("App").

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

2.1 Information You Provide

• Subscription status and preferences
• Customer identifier (anonymized customer ID through RevenueCat)
• Payment information is processed by Apple App Store or Google Play Store (we do not store your payment details)

2.2 Information Collected Automatically

• Recently used currencies and their timestamps
• Last selected currency pairs (from/to currencies)
• Subscription status cache (stored locally)

• Device type, operating system, and app version (may be included if crash reporting to our error tracking provider is enabled for your build)
• Crash reports and error logs (only if crash reporting to that provider is enabled; in the current App configuration this reporting is off, so routine crashes are not sent to Sentry)
• IP addresses are explicitly removed from any error reports that are sent when reporting is enabled

• Exchange rate data (downloaded and stored locally for offline use)
• Currency information (downloaded and stored locally)

2.3 Information We Do NOT Collect

We do NOT collect:

• Personal identification information (names, email addresses, phone numbers)
• Location data
• Contact lists or device contacts
• Photos, videos, or other media files
• Browsing history or web activity outside the App
• IP addresses (these are explicitly removed from any data we might receive)

3. How We Use Your Information

We use the information we collect to:

• Provide and Maintain the App: Deliver currency conversion services, exchange rate information, and App functionality
• Improve User Experience: Remember your currency preferences and recently used currencies to provide personalized features
• Support Premium Features: Manage subscription status and provide premium functionality
• Error Tracking and Debugging: Identify and fix technical issues when crash reporting to Sentry is enabled for your build (see Section 5.1)
• Comply with Legal Obligations: Meet legal requirements and respond to lawful requests

4. Data Storage and Security

4.1 Local Storage

The majority of your data is stored locally on your device in encrypted storage:

• Secure Storage: We use Expo SecureStore, which provides encrypted local storage on your device
• SQLite Database: Exchange rates and currency data are stored in a local SQLite database on your device
• No Cloud Sync: We do not synchronize your data to cloud servers

• Recently used currencies and timestamps
• Last selected currency pairs
• Subscription status cache
• Exchange rate data (for offline functionality)
• Currency information

4.2 Encryption

• All locally stored preferences and settings are encrypted using your device's secure storage capabilities
• Exchange rate data stored in SQLite is accessible only within the App
• We use industry-standard encryption methods provided by your device's operating system

4.3 Data Retention

• Local Data: Data stored on your device remains there until you uninstall the App or manually clear the App's data
• Error Tracking Data: If crash reporting to Sentry is enabled, crash reports are retained by Sentry according to their data retention policies (typically 90 days). While reporting is disabled in the App as distributed, we do not receive an ongoing stream of crash data from Sentry for ordinary use
• Subscription Data: Subscription information is managed through RevenueCat and App Store/Google Play, subject to their respective retention policies

5. Third-Party Services

We use the following third-party services to support App functionality:

5.1 Error Tracking (Sentry)

To identify and fix technical issues and improve App stability

• Crash reports and error logs
• Device type, operating system, and app version
• Stack traces and error context

• Crash reporting is integrated but not active in the default App configuration (reporting must be enabled in the build)
• Personal Identifiable Information (PII) collection is disabled
• IP addresses are explicitly removed from all data
• No user identifiers or personal information is collected

Service Provider: Sentry, Inc. (https://sentry.io/)
Privacy Policy: https://sentry.io/privacy/

5.2 Subscription Management (RevenueCat)

To manage subscriptions and premium features

• Anonymous customer identifier (device-specific, not personally identifiable)
• Subscription status and entitlement information
• Transaction history (managed by App Store/Google Play)

Service Provider: RevenueCat, Inc. (https://www.revenuecat.com/)
Privacy Policy: https://www.revenuecat.com/privacy

5.3 Payment Processing (App Store / Google Play)

To process subscription payments

• Payment information (handled entirely by Apple or Google)
• Purchase history and receipts

• Apple Inc. (for iOS): https://www.apple.com/privacy/
• Google LLC (for Android): https://policies.google.com/privacy

Note: We do not have access to your payment details. All payment information is processed directly by Apple or Google.

5.4 Exchange Rate Data

To provide current and historical exchange rate information

Exchange rate data is obtained from third-party financial data providers

Note: We are not responsible for the accuracy, timeliness, or privacy practices of these third-party data providers.

6. Your Privacy Rights and Choices

6.1 Your Choices

The App does not present a separate in-app screen to accept or reject "data processing consent" before you use it. You still control important privacy-related choices as follows:

• Subscriptions: Manage or cancel subscriptions through your App Store or Google Play account settings
• Local data: Clear the App's data or uninstall the App from your device to remove locally stored information (see Section 6.3)
• Crash reporting: When disabled (as in the default configuration), diagnostic data is not sent to Sentry as described in Sections 2.2 and 5.1

6.2 Access to Your Data

Since most data is stored locally on your device:

• You can access your locally stored preferences through the App
• You can clear App data at any time through your device settings
• If crash reporting to Sentry is ever enabled and you have questions about data held there, you may request information by contacting us

6.3 Data Deletion

• Uninstalling the App will delete all locally stored data
• You can also clear App data through your device settings without uninstalling

• If crash reporting to Sentry is enabled and you wish to have related data deleted from Sentry, please contact us

• Subscription information is managed through App Store or Google Play
• Canceling your subscription does not delete historical transaction records maintained by Apple or Google

6.4 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to Access: Request information about your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Where we rely on consent as a legal basis, you may withdraw it at any time (the App does not use a dedicated in-app consent toggle for this purpose)

To exercise these rights, please contact us using the information provided in Section 10.

6.5 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

7. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected information from a child under 13, we will delete that information promptly.

8. International Data Transfers

Your data is primarily stored locally on your device. However, some third-party services we use (such as Sentry and RevenueCat) may process data outside your country of residence. These services have implemented appropriate safeguards to protect your data in accordance with applicable data protection laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice in the App (for significant changes)
• In some cases, providing additional notice through the App

Your continued use of the App after changes become effective constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Mango Labs
Email: hello@mangolabs.com.br
Website: https://mangolabs.com.br

We will respond to your inquiry as soon as possible, typically within 30 days.

11. Data Controller

Data Controller: Mango Labs

For questions about data processing or to exercise your privacy rights, please contact us using the information provided in Section 10.

12. Additional Information

12.1 Offline Functionality

When using the App in offline mode (Premium feature), the App uses previously downloaded exchange rate data stored locally on your device. This data may become outdated when used offline.

12.2 Data Minimization

We collect and process only the minimum amount of data necessary to provide App functionality and improve user experience.

12.3 No Data Sharing

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We only share data with service providers necessary for App functionality (as described in Section 5), and only with appropriate privacy protections in place.

12.4 App Permissions

The App may request the following permissions:

• Internet Access: Required to download exchange rate data and manage subscriptions
• Network State: Required to determine online/offline status
• Billing (Android): Required for in-app purchases and subscriptions

The App does not request access to:

• Location services
• Contacts
• Camera or microphone
• Photo library
• Calendar
• Other sensitive permissions