汇率换算隐私政策

On-device data

No account is required. Favorites, alerts, travel payment records, payment profiles, trip context, offline rate packs, and preferences stay on the device or in the local iOS App Group container.

Rate requests

The app requests public current and historical rates over HTTPS from open.er-api.com and api.frankfurter.dev. We do not add an account, user input, advertising identifier, precise location, or personal behavior history. Providers may process IP addresses and ordinary request logs.

Ads and privacy choices

The free iOS and Android versions may use Google Mobile Ads for one cold-launch ad and an in-app banner, with Google UMP for applicable consent or privacy choices. The SDK may process IP-derived approximate location, device identifiers, product and ad interaction, advertising data, crash data, performance data, and other diagnostics for advertising, analytics, fraud prevention, security, and compliance. Data is encrypted in transit. Google ads are not requested in mainland China or while VIP is active. The app does not request precise location or cross-app tracking permission.

Company-app recommendations on iOS in mainland China

Starting with iOS 1.0.2 (Build 12), free users in mainland China may see a clearly labelled company-app cold-launch promotion and lightweight banner. Overseas Google advertising is unchanged. The app retrieves only JSON copy, images and App Store links from the unified company HTTPS endpoint and caches the last valid configuration. It does not download or execute code. Requests do not add an account, entered amounts, device identifiers, precise location or personal behavior history; the client sends no impression, click or attribution events. The launch promotion can be closed after two seconds and ends after five seconds, without repeating on foreground return. Only an explicit View tap opens the App Store. Active VIP hides the recommendations.

The company web server retains ordinary access logs for security and troubleshooting. These may contain IP addresses, request times, paths, status codes and client-software information. They are not used for advertising profiles or attribution, or associated with your amounts, records or personal profile. Logs currently rotate daily with up to 14 historical files retained and are then removed by rotation, except where retention is legally required to address a security incident. Deleting the app clears its local promotion cache. Use the contact details on this page for questions about logs. Disabled or unavailable recommendations do not restrict the core tools.

VIP subscription

VIP only removes the app-open and banner ads; core tools remain available without it. iOS purchases use Apple StoreKit and App Store, while Android purchases use Google Play Billing. The store collects complete payment details directly. The app reads product and purchase status to verify entitlement and restore purchases, and does not upload complete payment information to a developer server.

Notifications

Notification permission is requested only when you create or enable a rate, volatility, scheduled digest, or departure-date alert. Declining notifications does not affect the other tools. Notifications are generated locally without a developer push server.

Permissions and deletion

The app does not request location, contacts, camera, microphone, photos, or external-storage permissions. You can remove favorites, alerts, records, and profiles in the app. Deleting the app removes its private local data. There is no user account or server-side account profile.