Privacy policy

1. Who is responsible

ExchangeApp is made and published by DevCraft Solutions S.R.L., which is responsible for this policy and is the controller, under the GDPR, of the personal data it receives itself: what you send us when you write or call (section 6), the technical data of visits to our website (section 4), and the reviews and the crash and usage reports Apple passes on to us (section 5). Frankfurter, the ECB and Apple handle the data they receive under their own policies (sections 4 and 5).

DevCraft Solutions S.R.L.
VAT ID RO49799513 · Trade Register J40/5988/2024
Registered office: B-dul Ficusului nr. 10B, cam. 1, Sector 1, Bucharest, Romania
Phone +40 748 989 573 · Email contact@devcraftsolutions.net

For any question about your privacy, write to us at the email address above.

3. What stays on your iPhone

So that it opens where you left off and works without internet, the app keeps on your iPhone:

• your settings: the base currency, your list of currencies and their order, the last amount you typed, the language and the theme;
• the last rates it downloaded (with their date, when they were downloaded and from which service) and the names of the currencies.

We never receive this data and cannot see it. It stays on your iPhone, and in your iPhone’s own backups (in iCloud or on a computer) if you make them. Deleting the app deletes it from your iPhone.

4. Where the rates come from

The app downloads the exchange rates from the internet:

• from the Frankfurter API (api.frankfurter.dev), a free service run independently of DevCraft, which republishes the European Central Bank’s reference rates;
• if Frankfurter does not answer, from the European Central Bank (www.ecb.europa.eu), which publishes the same rates.

As with any website you open, these services receive your device’s IP address and the request itself: which rates, and for a chart, which two currencies and which period. The requests carry no name, account or device identifier. Each service handles them under its own rules: Frankfurter in its FAQ (“What is the privacy policy of the API?”), the ECB in its privacy statement for its websites.

The privacy policy and help links in the app’s Settings open our website, devcraftsolutions.net, in your browser. That is an ordinary visit to our website. It reaches our server through Cloudflare, which carries and protects the connection, under the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission. Our server keeps a technical log of each request (IP address, browser and its version, page, time) for security and troubleshooting, based on our legitimate interest (Art. 6(1)(f) GDPR); the log is kept only as long as needed for that, then overwritten. The site sets no cookies.

5. The App Store

You download ExchangeApp from Apple’s App Store, under Apple’s terms and its privacy policy. Apple shows us overall figures, such as the number of downloads per country, and the ratings and reviews you choose to publish on the App Store, under the nickname you publish them with; we may reply to a review there. If you have chosen in your iPhone’s settings to share analytics with app developers, Apple may also give us crash reports and usage statistics, which do not tell us who you are.

6. When you write to us

If you write to us or call us, we receive your email address or phone number and what you tell us. We use them only to answer you, and keep them only as long as we need them for that. The emails are stored by our email hosting provider for devcraftsolutions.net. The legal basis is our legitimate interest in answering you (Art. 6(1)(f) GDPR).

7. Children

ExchangeApp is suitable for all ages. It collects no personal data from anyone, children included.

8. Your rights

Under the GDPR, you have the right to know what data we hold about you and get a copy, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format.

The app gives us no data about you: what it keeps stays on your iPhone, and you delete it by deleting the app. These rights apply to the messages you sent us, which we delete if you ask, and to our website’s technical log.

To use your rights, write to us at contact@devcraftsolutions.net. We answer within one month.

If you are not satisfied with our answer, you can complain to the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), www.dataprotection.ro, or to the authority of the EU country where you live.

9. Changes to this policy

If we change this policy, we update the version and the date at the top. A new version of the app that handled data differently would come with a new version of this policy.