Privacy Policy

Account information — When you register, we collect your name, email address, and password. Passwords are stored by our backend in hashed form; we never store your password in plain text.

Verification data — We send a one-time passcode (OTP) to your email to verify your identity during sign-up and for certain security-sensitive actions. We retain a record of verification attempts for a limited period for security and abuse-prevention purposes.

Purchase and subscription information — When you subscribe to CryptoScanner Pro, we store your subscription status, plan, renewal or expiry date, and the transaction identifier provided by Apple (for in-app purchases) or Stripe (for purchases made on our website). Payments are processed by Apple or Stripe; we never receive or store your card or payment details.

App usage data — The price alerts you create (coin, target price, and condition), stored with your account so we can check prices and email you when an alert triggers.

Technical data — When the App connects to our servers, they receive standard technical information such as your IP address, which we use only for security, rate limiting, and troubleshooting. The App does not include any third-party analytics, advertising, or crash-reporting tools, and does not collect device identifiers.

We do not collect: your device's camera, photo library, microphone, precise location, health data, or contacts. The App does not request these permissions. We do not collect cryptocurrency wallet addresses, private keys, seed phrases, or exchange API keys, and you should never send them to us.

We use the information we collect to:

• Create and manage your account.
• Authenticate you and keep your account secure.
• Deliver core features, including price tracking, market comparisons, historical charts, and price alerts.
• Verify and manage your subscription and restore purchases across devices.
• Email you when a price alert you created is triggered.
• Send transactional emails (for example, OTP codes or account notices).
• Monitor, maintain, and improve the App's performance and reliability.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not use your data to make automated decisions that produce legal or similarly significant effects.

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

We rely on the following categories of third-party service providers, each of which processes data under its own privacy policy:

• Cryptocurrency exchange and market-data providers — supply the public price, market, and historical data displayed in the App. We do not share your personal account information with these providers; we query public market data on your behalf, and these queries do not carry identifiers that link them to you.
• Apple (App Store / StoreKit) — processes in-app subscription payments and provides us with subscription status.
• Stripe — processes subscription payments made on our website and provides us with subscription status.
• Backend hosting provider — operates the servers that store your account data.
• Email delivery provider — delivers transactional email such as OTP codes and price alert notifications.

• Your account data is stored on our backend servers and protected using industry-standard security measures, including encrypted (HTTPS/TLS) communication between the App and our servers.
• Your authentication session token is stored locally and securely on your device to keep you signed in; it is removed when you sign out or when your session expires.
• Access to production data is limited to personnel who need it to operate the service.
• While we take reasonable steps to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as required by applicable law.

We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain certain data to comply with legal or accounting obligations, or to resolve disputes and enforce our agreements. Backup copies are purged on our regular backup rotation cycle.

Deleting your account. You can delete your account and all associated personal data directly in the App at any time: open Settings → Account → Delete Account. You do not need to contact us or reinstall the App to do this. Deletion is permanent and cannot be undone.

Depending on your jurisdiction, you may also have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated personal data.
• Object to or restrict certain processing of your data.
• Withdraw consent where processing is based on consent (this does not affect processing carried out before withdrawal).
• Request a copy of your data in a portable, machine-readable format.
• Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at the address in Section 11. We will respond within the timeframe required by applicable law, and we will not discriminate against you for exercising them.

The App is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

Your information may be processed and stored in countries other than your own, including countries that may not provide the same level of data protection as your jurisdiction. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and we take steps to ensure your data receives an adequate level of protection regardless of where it is processed.

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by email, and will update the "Last Updated" date above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how your data is handled, contact us at: