Privacy Policy

Overview

FXAlways builds the FXAlways mobile app and the fxalways.app website. This Privacy Policy explains what information we collect, why we collect it, and how you can manage it.

We are designed to be a thin client over public reference data. We do not hold your money, execute transfers, or sell your personal information.

Information we collect

Account data

If you create an account, we store your email address and a hashed password. If you sign in with Apple or Google, we store the opaque token they give us, never the underlying credential.

Usage data

We collect aggregated, non-identifying usage data such as opened screens, button taps, app version, and crash diagnostics. We use this to fix bugs and prioritize features.

Subscription data

If you subscribe to Pro, the App Store or Google Play tells us your subscription status and renewal date through their official APIs. We never see your payment details, card, or bank.

Watchlist and portfolio

Currencies you track and portfolio entries you add are stored on your device by default. If you opt into backup and sync, they are encrypted and synced through our backend so they survive a device swap.

What we do not collect

• We do not collect or process bank account numbers, card numbers, or routing information.
• We do not log your contacts, photos, calendar, files, or browsing history.
• We do not sell user data to advertisers or data brokers.
• We do not run third-party advertising SDKs inside the app.

How we use information

• To deliver the core product: live rates, alerts, converter, and offline cache.
• To synchronize your watchlist, portfolio, and settings across devices if you enable backup and sync.
• To send alerts you configured through Apple Push Notification service or Firebase Cloud Messaging.
• To detect and respond to abuse, fraud, and outages.
• To honor App Store and Google Play subscription rights such as entitlement, restore, and refund state.

Data storage and location

Account data and backed-up watchlist data are stored on Google Cloud Firestore, hosted in multi-region eur3 by default. Backup data is encrypted at rest and in transit. Diagnostic data is processed through Apple Crash Reporting and Firebase Crashlytics.

Your rights

You can access the data we hold on you, correct inaccurate data in Settings, delete your account, export your portfolio as CSV with Pro, and object to or restrict processing under GDPR, UK GDPR, or CCPA.

Account deletion is immediate and irreversible on our end. Backups are purged within 30 days.

Children

FXAlways is not directed at children under 13. If we learn we collected data from a child under 13, we will delete it.

Changes to this policy

When this policy changes materially, we will surface a notice inside the app and update the last updated date at the top of this page.

Contact

Privacy questions and data-access requests: privacy@fxalways.app.