Xchanger - Privacy Policy

1. Introduction

Mango Labs ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Xchanger mobile application ("App").

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

2.1 Information You Provide

• Your consent status for data processing
• This information is stored locally on your device in encrypted storage

• Subscription status and preferences
• Customer identifier (anonymized customer ID through RevenueCat)
• Payment information is processed by Apple App Store or Google Play Store (we do not store your payment details)

2.2 Information Collected Automatically

• Recently used currencies and their timestamps
• Last selected currency pairs (from/to currencies)
• Subscription status cache (stored locally)

• Device type, operating system, and app version (collected only with your consent through error tracking)
• Crash reports and error logs (only if you have consented to data collection)
• IP addresses are explicitly removed from error reports

• Exchange rate data (downloaded and stored locally for offline use)
• Currency information (downloaded and stored locally)

2.3 Information We Do NOT Collect

We do NOT collect:

• Personal identification information (names, email addresses, phone numbers)
• Location data
• Contact lists or device contacts
• Photos, videos, or other media files
• Browsing history or web activity outside the App
• IP addresses (these are explicitly removed from any data we might receive)

3. How We Use Your Information

We use the information we collect to:

• Provide and Maintain the App: Deliver currency conversion services, exchange rate information, and App functionality
• Improve User Experience: Remember your currency preferences and recently used currencies to provide personalized features
• Support Premium Features: Manage subscription status and provide premium functionality
• Error Tracking and Debugging: Identify and fix technical issues (only with your explicit consent)
• Comply with Legal Obligations: Meet legal requirements and respond to lawful requests

4. Data Storage and Security

4.1 Local Storage

The majority of your data is stored locally on your device in encrypted storage:

• Secure Storage: We use Expo SecureStore, which provides encrypted local storage on your device
• SQLite Database: Exchange rates and currency data are stored in a local SQLite database on your device
• No Cloud Sync: We do not synchronize your data to cloud servers

• Recently used currencies and timestamps
• Last selected currency pairs
• Your consent preferences
• Subscription status cache
• Exchange rate data (for offline functionality)
• Currency information

4.2 Encryption

• All locally stored preferences and settings are encrypted using your device's secure storage capabilities
• Exchange rate data stored in SQLite is accessible only within the App
• We use industry-standard encryption methods provided by your device's operating system

4.3 Data Retention

• Local Data: Data stored on your device remains there until you uninstall the App or manually clear the App's data
• Error Tracking Data: If you have consented to error tracking, crash reports are retained by Sentry according to their data retention policies (typically 90 days)
• Subscription Data: Subscription information is managed through RevenueCat and App Store/Google Play, subject to their respective retention policies

5. Third-Party Services

We use the following third-party services to support App functionality:

5.1 Error Tracking (Sentry)

To identify and fix technical issues and improve App stability

• Crash reports and error logs
• Device type, operating system, and app version
• Stack traces and error context

• Only enabled with your explicit consent
• Personal Identifiable Information (PII) collection is disabled
• IP addresses are explicitly removed from all data
• No user identifiers or personal information is collected

Service Provider: Sentry, Inc. (https://sentry.io/)
Privacy Policy: https://sentry.io/privacy/

5.2 Subscription Management (RevenueCat)

To manage subscriptions and premium features

• Anonymous customer identifier (device-specific, not personally identifiable)
• Subscription status and entitlement information
• Transaction history (managed by App Store/Google Play)

Service Provider: RevenueCat, Inc. (https://www.revenuecat.com/)
Privacy Policy: https://www.revenuecat.com/privacy

5.3 Payment Processing (App Store / Google Play)

To process subscription payments

• Payment information (handled entirely by Apple or Google)
• Purchase history and receipts

• Apple Inc. (for iOS): https://www.apple.com/privacy/
• Google LLC (for Android): https://policies.google.com/privacy

Note: We do not have access to your payment details. All payment information is processed directly by Apple or Google.

5.4 Exchange Rate Data

To provide current and historical exchange rate information

Exchange rate data is obtained from third-party financial data providers

Note: We are not responsible for the accuracy, timeliness, or privacy practices of these third-party data providers.

6. Your Privacy Rights and Choices

6.1 Consent Management

You have full control over data collection:

• Accept Consent: Enables error tracking (with privacy protections as described above)
• Reject Consent: Disables all optional data collection; App continues to function with full features

You can change your consent preference at any time through the App settings.

6.2 Access to Your Data

Since most data is stored locally on your device:

• You can access your locally stored preferences through the App
• You can clear App data at any time through your device settings
• For error tracking data (if consented), you may request information by contacting us

6.3 Data Deletion

• Uninstalling the App will delete all locally stored data
• You can also clear App data through your device settings without uninstalling

• If you have consented to error tracking and wish to have your data deleted from Sentry, please contact us

• Subscription information is managed through App Store or Google Play
• Canceling your subscription does not delete historical transaction records maintained by Apple or Google

6.4 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to Access: Request information about your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us using the information provided in Section 10.

6.5 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

7. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected information from a child under 13, we will delete that information promptly.

8. International Data Transfers

Your data is primarily stored locally on your device. However, some third-party services we use (such as Sentry and RevenueCat) may process data outside your country of residence. These services have implemented appropriate safeguards to protect your data in accordance with applicable data protection laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice in the App (for significant changes)
• In some cases, providing additional notice through the App

Your continued use of the App after changes become effective constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Mango Labs
Email: hello@mangolabs.com.br
Website: https://mangolabs.com.br

We will respond to your inquiry as soon as possible, typically within 30 days.

11. Data Controller

Data Controller: Mango Labs

For questions about data processing or to exercise your privacy rights, please contact us using the information provided in Section 10.

12. Additional Information

12.1 Offline Functionality

When using the App in offline mode (Premium feature), the App uses previously downloaded exchange rate data stored locally on your device. This data may become outdated when used offline.

12.2 Data Minimization

We collect and process only the minimum amount of data necessary to provide App functionality and improve user experience.

12.3 No Data Sharing

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We only share data with service providers necessary for App functionality (as described in Section 5), and only with appropriate privacy protections in place.

12.4 App Permissions

The App may request the following permissions:

• Internet Access: Required to download exchange rate data and manage subscriptions
• Network State: Required to determine online/offline status
• Billing (Android): Required for in-app purchases and subscriptions

The App does not request access to:

• Location services
• Contacts
• Camera or microphone
• Photo library
• Calendar
• Other sensitive permissions