DENAROO Privacy Policy ============== Effective 12 August 2026 This policy explains what Denaroo collects, why, and what you can do about it. It is written to be read, not to be skipped. 1. Who we are ------------- Denaroo ("we", "us") is a mobile application that shows currency, gold, oil and cryptocurrency prices, market news, and conversion tools. For any question about this policy, or to exercise any right described in it, write to core.exchange.app@gmail.com. 2. Information you give us -------------------------- If you create an account, we collect your email address and a password. The password is never stored by us in a readable form — authentication is handled by our provider and we only ever see a secure token. If you sign in with Google or Apple instead, we receive your name and, depending on your choices with that provider, an email address. We never receive your Google or Apple password. During setup we ask for: your display name, phone number, date of birth, gender, country and city or province, occupation, the market topics you are interested in, how you found the app, and what you use it for. You may also upload a profile photo. If you contact support, we keep the messages you send and our replies. 3. Information collected automatically -------------------------------------- A device identifier generated on first launch. It is random, specific to this installation, and is not your advertising ID, phone number, or hardware serial. Usage events: which screens you open, which features you use, and when. These are stored with the device identifier and, if you are signed in, your account. Your chosen language, region, city, theme and display preferences. If you enable notifications, a push token issued by the notification service, together with your language and region so that alerts arrive in a language you read. 4. Using the app without an account ----------------------------------- You can browse as a guest. In that case we ask only which country you are in, and we do not collect your name, email, phone number or any profile information. Guest usage is still associated with the device identifier described above, so that we can count how many people use the app and so that a support conversation started without an account can be continued. 5. Why we collect it -------------------- To operate the app: show you the right prices, the right news, in the right language and currency for where you are. To keep your settings and saved items available on every device you sign in on. To send the price alerts and announcements you have asked for. To answer your support messages. To understand, in aggregate, who uses the app and which parts of it are useful — so that we build the right things next. This analysis is done on grouped totals, not on individuals. To detect and prevent abuse, spam and fraud. 6. Where your data is held, and who processes it ------------------------------------------------ Your account, profile, settings and support messages are stored with Supabase, our database and authentication provider. Access is restricted at the database level so that one account cannot read another account's data. Notifications are delivered through the Expo push service, which receives the notification text and your device push token. Market news summaries are generated and translated using Google Gemini. Only market figures and the resulting text are sent — never your name, email, phone number or any other personal information. Sign-in with Google or Apple is handled by those companies under their own privacy policies. These providers may store data on servers outside your country. Where that happens, the transfer is covered by the provider's own safeguards and contractual terms. 7. What we never do ------------------- We do not sell your personal information. Not to advertisers, not to data brokers, not to anyone. We do not share your name, email, phone number or profile with advertisers. Advertising in the app is booked directly and shown to everyone in the same place — it is not targeted using your personal data. We do not ask for, receive, or store your bank details, card numbers, wallet keys, or any means of moving money. The app is informational and cannot execute a transaction. 8. Advertising -------------- Some screens show advertisements from businesses who have booked a placement with us directly. We record that an advertisement was tapped so we can report activity to the advertiser, but that record does not identify you to them. Advertisements are not personalised. Everyone in the app sees the same placement at the same time. 9. Notifications ---------------- Notifications are off until you turn them on, and your device will ask you first. You can turn them off at any time in your device settings, or by removing your price alerts inside the app. 10. How long we keep it ----------------------- Account and profile information: until you delete your account. Support conversations: up to two years after the conversation is closed, so that we can refer back to what was agreed. Usage events: up to twenty-four months, after which they are deleted or aggregated into totals that no longer identify a device. Push tokens: until you disable notifications or uninstall the app. 11. Your rights --------------- You can see and change your profile information at any time inside the app. You can delete your account, permanently, from Settings → Account → Delete account. This removes your profile, your saved items, your alerts and your uploaded photo. It cannot be undone. You can clear the data held on your device from Settings → Data. You may also ask us for a copy of the personal information we hold about you, ask us to correct it, or object to how we use it. Write to core.exchange.app@gmail.com and we will respond within thirty days. If you are in a country with a data protection authority and you believe we have handled your information wrongly, you have the right to complain to it. 12. Children ------------ Denaroo is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us personal information, write to core.exchange.app@gmail.com and we will delete it. 13. Security ------------ Traffic between the app and our servers is encrypted. Access to your data is restricted at the database level, so that being signed in as one person does not grant access to another person's records. No system is perfectly secure. If a breach affects your personal information, we will tell you and the relevant authority as required by law. 14. Changes to this policy -------------------------- If we change this policy in a way that matters, we will show the new version in the app and ask you to accept it before you continue. This version is effective from 12 August 2026. Contact: core.exchange.app@gmail.com