Privacy Policy

Effective: October 3, 2026

This policy describes what the Xrateo app (“the Application”) collects, why, and who processes it. The Application is provided by Badas Software (“the Service Provider”).

Your account

There is no registration. On first launch the Application signs you in anonymously with Firebase Authentication, which creates a random user ID. The ID is not linked to your name, email address or phone number.

What the Application stores

Your settings. Your favourite currencies, the selected currency and the last amount you entered, theme, language, onboarding and What’s New progress, and the start date of the widget trial. They are stored in Firebase Realtime Database under your anonymous ID, so they survive an app restart.

Feedback you send. “Send feedback” opens an email to [email protected] in your mail app, with the app version, your plan (Free or Premium) and your anonymous ID filled in below your message. You can edit or remove them before sending. Versions before 2.5.0 stored the message in Firebase Realtime Database instead, with your anonymous ID, the app version and the time it was sent.

Purchases. Purchases are made through the App Store or Google Play; the Service Provider never sees your payment details. RevenueCat receives your anonymous ID and the store’s purchase records so that Premium can be unlocked and restored.

On your device only. The rates and currencies shown in home-screen widgets, and the counters that decide when to ask for an App Store or Google Play rating, are kept on the device and are not sent anywhere.

Usage analytics

The Application uses Google Analytics for Firebase to see which features are used and where people run into problems. This includes:

  • features used, such as adding a currency, copying, sharing or opening a widget
  • currency codes, never the amounts you convert: amounts are reported as ranges such as 10–100
  • search terms in the currency picker, with emails, phone numbers and card numbers removed before sending
  • the onboarding, paywall, purchase and widget-trial steps
  • error categories, never raw error messages
  • device type, operating system, app version, country and language

Firebase assigns an app-instance identifier to report these events. The Application does not send your name, email address, phone number, precise location or the amounts you convert.

Turning analytics off. Settings → Preferences → “Share usage statistics” stops analytics collection on that device. The choice is kept across launches.

Advertising

Free users see banner ads from Google AdMob. AdMob may use your device’s advertising identifier and IP address to show and measure ads. Premium users see no ads. You can reset or limit the advertising identifier in your device settings:

  • iOS: Settings → Privacy & Security → Tracking
  • Android: Settings → Google → Ads (or Settings → Privacy → Ads)

The Application does not ask iOS for tracking permission, so on iOS it does not receive your advertising identifier.

Users in the EEA, the UK and Switzerland. Before the first ad, the Application shows Google’s consent message. Ads are personalised only if you agree; if you decline, AdMob shows non-personalised or limited ads. You can change your answer at any time in Settings → Help & Support → Ad privacy choices.

Crash reports

When the Application crashes or hits an error, Sentry receives a report with the error, the app version, the device model and the operating system. Reports do not include your name or email address.

Location

The Application does not collect precise location. Google Analytics and AdMob derive your country from your IP address.

Third parties

These services process data on the Service Provider’s behalf, each under its own privacy policy:

The Service Provider does not sell your data.

Retention and deletion

Analytics event data is kept for no more than 14 months. Settings and feedback are kept while you use the Application and for a reasonable time afterwards. Uninstalling the Application removes everything stored on the device.

To have your stored settings and feedback deleted, email [email protected] with your User ID: it is shown at the bottom of Settings (version 2.5.0 and later), and a tap copies it. Feedback sent from the app already includes it. Without a User ID, the Service Provider will ask for details that identify your installation, such as roughly when you installed the app and on which device. The data is then deleted.

Children

The Application is not directed at children under 13, and the Service Provider does not knowingly collect data from them. If you believe a child under 13 has provided personal information, contact [email protected] and it will be deleted.

Security

Data travels over encrypted connections, and database access rules let each anonymous ID read and write only its own settings and feedback. No system can prevent every breach.

Changes

This policy may be updated from time to time. Changes are published on this page with a new date at the top.

Contact

Questions about privacy: [email protected].