1. Introduction
This Privacy Policy explains how Kimiexchange ("we", "us", or "our") collects, uses, shares, and protects your information when you use our currency exchange rate mobile application (the "App"). We are committed to protecting your privacy and ensuring that your personal information is handled in a transparent and secure manner.
This App does not require user registration or collect personal identification information. We respect your privacy and have designed our App to minimize data collection. The App provides real-time exchange rates for 165+ fiat currencies.
2. Information We Collect
2.1 Automatically Collected Information
- Device Information: We collect non-personal device identifiers (Android ID, device model, OS version, screen size, locale) for ad serving (AdMob), analytics (Firebase), and crash reporting (Crashlytics). This is standard information used by third-party SDKs.
- Network Information: Network connectivity status (Wi-Fi/Cellular) is checked via
connectivity_plus to determine online/offline state. No network metadata beyond connectivity is stored.
2.2 User-Provided Information & Local Storage
This App stores the following data locally on your device using SharedPreferences. This data never leaves your device unless explicitly transmitted to third-party services:
- Currency Preferences: Selected base and target currencies (persisted between sessions).
- Theme Preference: Dark/light mode selection.
- Recent Currencies: Up to 10 recently selected currencies for quick access.
- Exchange Rate Cache: Cached exchange rate data per base currency to enable offline viewing of the most recently fetched rates (stored for up to 60 minutes).
- Ad Frequency Control: Interstitial ad display timestamp (10-minute cooldown) stored locally to limit ad frequency.
- Offline Mode Status: User's offline mode preference (toggled manually by user).
AdMob Advertising ID
Google AdMob collects the Advertising ID (AAID/GAID) for personalized advertising. This is managed by Google's privacy policy and is not directly accessible to us.
2.3 Third-Party Data Collection
Our App integrates the following third-party services that may collect information:
Google AdMob
- Purpose: Display banner and interstitial advertisements.
- Data Collected: Advertising ID (AAID/GAID), device information (model, OS version), IP address, approximate location (derived from IP).
- Privacy Policy: policies.google.com/privacy
- Opt-out: Users can opt out of personalized ads via Android's "Ads Personalization" settings or Google's Ads Settings.
Firebase Analytics (Google)
- Purpose: Understand app usage patterns, track user interactions (currency swaps, screen views, ad engagements), and improve app performance.
- Data Collected: Anonymous event data (app opens, currency conversions, swaps, ad impressions/clicks), device information, regional settings (language/country), app version. No personally identifiable information is collected.
- Privacy Policy: firebase.google.com/support/privacy
- Opt-out: Analytics collection can be disabled via device-level Google Play services settings or by contacting us. Analytics is enabled by default but collects only aggregated, non-personal data.
Firebase Crashlytics (Google)
- Purpose: Collect crash reports and non-fatal error data to identify and fix app stability issues.
- Data Collected: Crash stack traces, device model, OS version, app version, memory state at crash time. No personal data or user content is collected.
- Privacy Policy: firebase.google.com/support/privacy
- Opt-out: Crash reporting cannot be disabled by users as it is essential for app maintenance, but data is anonymized and does not include personal identifiers.
ExchangeRate-API (fawazahmed0)
- Purpose: Fetch real-time currency exchange rates (165+ fiat currencies) via API endpoints at
api.exchangerate-api.com (primary) and latest.currency-api.pages.dev (fallback).
- Data Collected: None. API requests contain only the base currency code (e.g., "USD") and do not transmit user identifiers, IP addresses, or device information. The API provider may temporarily log IP addresses for rate limiting and security, as is standard for web APIs.
- Privacy Policy: github.com/fawazahmed0/exchange-api
3. How We Use Your Information
- Ad Serving: To display relevant advertisements using AdMob.
- Analytics: To understand app usage patterns (currency conversions, swaps, screen views) and improve user experience via Firebase Analytics.
- Crash Reporting: To collect anonymized crash data for debugging and app stability via Firebase Crashlytics.
- App Functionality: To maintain ad frequency limits, cache exchange rates locally, persist user preferences (theme, recent currencies), and ensure optimal user experience.
- Legal Compliance: To comply with legal obligations (e.g., GDPR consent management) and protect our rights.
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to others. We may share data with:
- Service Providers: Google (AdMob) and API providers (ExchangeRate-API) as necessary for app functionality.
- Legal Authorities: If required by law or to protect our rights, property, or safety.
- Business Transfers: In the event of a merger, acquisition, or asset sale.
5. Data Retention
- Local Storage: All locally stored data (currency preferences, theme setting, recent currencies list, cached exchange rates, ad cooldown timestamp, offline mode flag) persists until you clear app data or uninstall the App. Cached exchange rates are automatically purged after 60 minutes; other data remains until manually cleared or app removal.
- Third-Party Data: AdMob, Firebase Analytics, and Crashlytics data are retained according to Google's data retention policies (typically 26 months for analytics, up to 26 months for advertising identifiers, indefinite for aggregated metrics). See Google's Privacy Policy for details. ExchangeRate-API does not store user data.
6. Your Rights and Choices
Depending on your jurisdiction (GDPR, CCPA, etc.), you may have the following rights:
- Access: Request a copy of your personal data.
- Deletion: Request deletion of your personal data.
- Opt-out: Opt out of personalized advertising via device settings.
- Data Portability: Receive your data in a portable format.
To exercise these rights, contact us at alexadrianmantalea@gmail.com. Note that much of the data we handle is controlled by Google (AdMob, Firebase); you may need to contact Google directly for certain requests via their privacy portals.
7. Children's Privacy
Our App is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with data, please contact us immediately.
8. Data Security
We implement reasonable security measures to protect your information:
- Local Storage: Preferences and cached data are stored using Android's SharedPreferences (unencrypted, but sandboxed per-app). No sensitive data (passwords, payment info) is stored.
- Encryption: All data transmissions to third parties use HTTPS/TLS encryption.
- Access Control: We limit code access to personal data on a need-to-know basis.
- Obfuscation: Release builds use code obfuscation to protect against reverse engineering.
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
9. International Data Transfers
Our service providers (Google, ExchangeRate-API) may process data in countries outside your own. By using the App, you consent to such transfers. Google and other providers adhere to standard contractual clauses and adequacy decisions (e.g., EU-US Data Privacy Framework) to ensure adequate protection.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact:
12. Additional Disclosures for Specific Jurisdictions
12.1 California (CCPA/CPRA)
California residents have the right to:
- Know what personal information is collected, used, shared, or sold.
- Request deletion of personal information.
- Opt out of the sale or sharing of personal information.
- Non-discrimination for exercising privacy rights.
We do not sell personal information. To make a request, contact us at alexadrianmantalea@gmail.com.
12.2 European Union (GDPR)
If you are in the EU, you have rights to access, rectification, erasure, restriction, data portability, and objection. Our legal basis for processing is legitimate interest (app functionality) and consent (for personalized ads, obtained via AdMob SDK).
12.3 Other Jurisdictions
Please check your local laws for additional rights that may apply.
13. Third-Party Links
Our App may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party services you interact with.
14. Consent
By using our App, you consent to the collection, use, and sharing of information as described in this Privacy Policy. If you do not agree, please uninstall the App.
Appendix: Permissions Used
The App requests the following Android permissions:
- INTERNET: Required to fetch exchange rates and load ads.
- ACCESS_NETWORK_STATE: Required to check network connectivity for API calls and ads.
- VIBRATE: Used for haptic feedback on button taps (optional – can be disabled via OS settings).
No sensitive permissions (location, contacts, camera, storage, microphone, etc.) are requested.
Appendix: Data Processing Summary
| Data Type | Purpose | Retention | Shared With | Opt-out |
|---|
| Device Info | Ad serving, functionality | As per Google | Google (AdMob) | Yes (device settings) |
| Advertising ID | Personalized ads | As per Google | Google (AdMob) | Yes (Google Ads Settings) |
| Analytics Events | Usage insights | 26 months (Google) | Google (Firebase) | Limited (UMP consent) |
| Crash Reports | App stability | As needed | Google (Firebase) | No (essential) |
| Ad Timestamp | Ad frequency | Until uninstall | None (local only) | N/A |
| Exchange Rate Requests | Currency data | Not stored | ExchangeRate-API | N/A |
| User Preferences | App personalization | Until uninstall | None (local only) | N/A |
This Privacy Policy is compliant with Google Play's Data Safety and User Data requirements.