Privacy Policy

1 Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources.

                                
                                Personal Information You Provide
                            
Account Information: Email address, username, and password when you create an account
Profile Information: Preferred currencies, favorite currency pairs, and app settings
Communication Data: Messages you send to us, feedback, and support requests
Payment Information: If you purchase premium features, payment details processed securely by our payment processors

Information We Collect Automatically

Usage Data: Currency conversion history, app interactions, and feature usage patterns
Device Information: Device type, operating system, unique device identifiers, and mobile network information
Location Data: Approximate location based on IP address to provide relevant currency information
Technical Data: App crashes, performance metrics, and debugging information

Information from Third Parties

We receive exchange rate data from financial data providers and may collect information from analytics services to improve our app performance.

2 How We Use Your Information

We use your personal information for the following specific purposes:

Core Service Functionality

Provide real-time currency conversion and exchange rate information
Display interactive charts and historical currency data
Maintain your favorite currencies and conversion history
Sync your preferences across devices

Service Improvement & Personalization

Analyze usage patterns to improve app performance and user experience
Personalize currency recommendations based on your usage
Develop new features and functionalities
Optimize app performance and fix technical issues

No AI Training Without Consent

We do not use your personal data to train AI models or machine learning algorithms without your explicit consent. Your currency conversion history and usage patterns remain private and are not used for automated decision-making that affects you.

Communication & Support

Respond to your inquiries and provide customer support
Send important updates about our services
Notify you about new features (only with your consent)

3 Information Sharing

We do not sell your personal information. We may share your information only in the following limited circumstances:

Service Providers & Partners

Financial Data Providers: We share minimal technical data with currency exchange rate providers (no personal information)
Cloud Infrastructure: AWS and Google Cloud for secure data storage and app performance
Analytics Services: Anonymized usage data with analytics providers to improve our services
Payment Processors: Stripe and Apple/Google for processing premium subscriptions

Third-Party Safeguards

All third-party service providers are contractually required to protect your data and use it only for the specific services they provide to us. They operate under strict data processing agreements and are located in jurisdictions with adequate data protection laws.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or government request, or to protect the rights, property, or safety of CurrEx, our users, or others.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.

4 Data Security

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Technical Safeguards

Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption
Access Controls: Role-based access controls ensure only authorized personnel can access your data
Secure Infrastructure: We use enterprise-grade cloud infrastructure with 24/7 monitoring
Regular Audits: We conduct quarterly security assessments and vulnerability testing

Organizational Safeguards

Employee background checks and security training
Strict data access policies and monitoring
Incident response procedures for potential security breaches
Regular security awareness training for all team members

Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours via email and provide clear information about what happened, what information was involved, and what steps we're taking to resolve the issue.

5 Data Retention

We retain your personal information only as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy.

Retention Periods by Data Type

Account Information: Retained while your account is active and for 30 days after account deletion
Conversion History: Stored for 2 years to provide historical tracking and analytics
Usage Analytics: Aggregated data retained for 3 years; individual usage data for 1 year
Support Communications: Kept for 3 years to provide ongoing support and improve services
Financial Records: Retained for 7 years as required by financial regulations

Data Deletion

When data reaches the end of its retention period, it is securely deleted or anonymized. You can request early deletion of your personal data at any time by contacting us.

6 Your Rights

You have several rights regarding your personal information, regardless of where you're located. We respect these rights and provide easy ways to exercise them.

                                
                                Your Privacy Rights
                            
Access: Request a copy of the personal information we hold about you
Correction: Ask us to correct inaccurate or incomplete information
Deletion: Request deletion of your personal information
Portability: Receive your data in a structured, machine-readable format
Objection: Object to our processing of your personal information
Restriction: Request that we limit how we use your information

How to Exercise Your Rights

In-App Settings: Access, modify, or delete much of your information directly in the app
Email Request: Contact us at contact@youssef.tn for more complex requests
Response Time: We respond to all requests within 30 days

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is sold or disclosed and to opt-out of the sale of personal information. We do not sell personal information.

European Residents (GDPR)

If you're in the European Economic Area, you have additional rights under GDPR, including the right to lodge a complaint with your local data protection authority.

7 Cookies & Tracking

We use cookies and similar technologies to improve your experience and understand how our services are used.

Types of Cookies We Use

Essential Cookies: Required for the app to function properly (cannot be disabled)
Performance Cookies: Help us understand how users interact with our app
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Provide insights into app usage and performance

Cookie Control

You can control cookie preferences through your browser settings or our in-app privacy controls. Note that disabling certain cookies may limit some functionality of our app.

Third-Party Analytics

We use Google Analytics and other analytics services to understand app usage. These services may use cookies and collect information about your usage patterns. You can opt-out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

8 International Transfers

CurrEx operates globally, and your information may be transferred to and processed in countries other than your own.

Cross-Border Data Protection

We transfer data only to countries with adequate data protection laws or under appropriate safeguards
All international transfers comply with GDPR Standard Contractual Clauses
We maintain the same level of data protection regardless of where data is processed

Data Processing Locations

Your data may be processed in the United States, European Union, and other countries where our service providers operate. We ensure all locations meet strict data protection standards.

9 Children's Privacy

CurrEx is designed for general audiences and not specifically directed to children under 13. We do not knowingly collect personal information from children under 13.

Parental Notice

If we discover that we have collected personal information from a child under 13, we will promptly delete that information. If you believe your child has provided us with personal information, please contact us immediately.

Teen Users (13-17)

For users between 13-17, we encourage parental involvement in reviewing this privacy policy and discussing online privacy practices.

10 Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You

Significant Changes: We'll email you and display a prominent notice in the app
Minor Updates: We'll update the "Last Updated" date and notify you through the app
Advance Notice: For material changes, we provide at least 30 days' notice

Your Options

If you disagree with changes to our privacy policy, you can delete your account before the changes take effect. Continued use of our services after changes become effective means you accept the updated policy.