Privacy Policy

Effective Date: March 2026

This Privacy Policy applies to the XchangeTR app (hereby referred to as "Application") for mobile devices created by AHT Apps (hereby referred to as "XchangeTR" or "We"), with basic features offered free of charge and additional features available through in-app purchases.

Information Collection and Use

When you download and use the Application, we collect various information to provide you with a better service. This information may include:

• Device and Usage Data: Your device's Internet Protocol (IP) address, device ID (UID), operating system version, pages you visit within the Application, the time and date of your visit, and time spent in the Application.
• Personal and Contact Information: First and last name, email address, phone number.
• Business Information (For Shop Owners): Business name, address, tax identification number, business verification documents.
• Photo and Visual Data: Business photos are collected exclusively for the shop storefront profile. These images are displayed to other users as a shop profile; personal face photos are not requested from users.

Special Data Processing Details

Third Party Access and Service Providers

To analyze the performance of our Application and to deliver our services, we use the following third-party services, each of which has their own Privacy Policy regarding data handling:

• Google Play Services
• Firebase Analytics (Google)
• Firebase Crashlytics
• NosyAPI (Market data provider)

XchangeTR may disclose collected information in the following mandatory circumstances:

• As required by law, such as to comply with a subpoena or similar legal process;
• When we believe disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to an official request;
• With our trusted infrastructure service providers who work on our behalf and have agreed to adhere to the rules set forth in this privacy statement.

Data Retention and Account Deletion

XchangeTR retains your personal data only for the duration required by legal obligations or necessary for providing the service:

• Price, Location and Profile Data: Retained as long as your account is active. Price data entered by Business users is processed daily to generate anonymous market statistics and provide Business-specific performance analytics.
• Contract and Log Records: Retained for 2 to 10 years as required by applicable laws for legal audit and dispute resolution purposes.
• Account Deletion Request: If you wish to delete your account and data, you can do so directly from the in-app settings (My Account → Delete My Account) menu or by sending an email to [email protected]. Deletion requests are processed within a maximum of 30 days (typically within 24 hours), after which your data is permanently deleted or anonymized from our systems.

Age Restriction

You must be at least 18 years old to use this application. XchangeTR does not knowingly collect personal information from or provide services to individuals under 18. If we discover that an individual under 18 has provided personal information, it will be immediately deleted from our servers.

Publicly Available Business Information

To help users find nearby currency exchange offices and jewelers, XchangeTR may list business information obtained from publicly available sources (trade registry, municipal license records, field research, etc.). This information consists solely of non-copyrightable public facts such as business name, address and coordinates.

• No third-party database references (e.g. Google Place ID) are stored.
• These business listings can be claimed by their owners to update and manage their profiles.
• Business owners may request removal of their listing from the platform by submitting a written request to [email protected]. Removal requests are processed within 72 hours.

Opt-Out Rights

You can easily stop all information collection by uninstalling the Application from your device. You can also revoke location or notification permissions at any time through your device's operating system settings.

Security

Safeguarding the confidentiality of your information is important to us. We employ physical, electronic, and procedural security measures to protect the information we process against unauthorized access. Additionally, to ensure the security of our systems and prevent spam and malicious bot activities, we use Google reCAPTCHA. Certain data such as device/hardware information and IP address are processed for bot control purposes.

Changes

This Privacy Policy may be updated from time to time. In the event of any changes, we will inform you by publishing the new policy within the Application.