This Privacy Policy explains how MARGOAPPS LLC ("Margoapps", "we", "us") handles information when you use the YoRate mobile apps for iOS and Android (the "App") and the website getyorate.com (the "Website"), together the "Service".
Who we are. MARGOAPPS LLC, 8 Yervand Kochar Street, Yerevan 0070, Republic of Armenia. Contact: hello@getyorate.com.
1. The short version
- YoRate has no user accounts. We don't ask for your name, phone number or payment card details.
- Your trips, expenses, cards and fees you enter, and favourite currencies stay on your device.
- Your location is used on your device to pick the local currency. We don't send it to our servers.
- Our server knows a random app identifier, your notification token and your rate alert settings, so it can send you alerts.
- We don't use advertising identifiers and don't track you across other companies' apps or websites.
- We don't sell your personal information.
2. Information we collect
2.1 In the App
Stored only on your device (not sent to us):
- trips, budgets and expenses;
- cards, banks and fee settings you enter;
- favourite currencies and display settings;
- your location, if you allow access. The App uses your device's location services to detect the country you are in and its currency. Location data is processed by the operating system's location services (Apple or Google) under their own privacy policies.
Sent to our server:
- a random identifier created by the App on first launch (not linked to your name, email or phone);
- your push notification token, platform (iOS or Android), app version, time zone, language and home currency;
- your rate alerts: currency pairs, alert type, thresholds, the fee percentage you set to calculate "your rate", and the time for a daily summary;
- the identifier of your subscription profile at Adapty (see section 4), used to check whether you have Premium;
- a log of notifications sent to you (time and result), kept for 30 days;
- the result of an app integrity check (Apple App Attest on iOS, Google Play Integrity on Android), which confirms that requests come from a genuine copy of YoRate. These checks are performed by Apple and Google under their own terms.
Collected by our service providers in the App:
- Analytics (Google Analytics for Firebase): how the App is used (screens opened, features used, purchase steps), device model, operating system, approximate country, and an app instance identifier. We use it to understand which features are useful and to improve the App.
- Crash reports (Firebase Crashlytics): technical information about crashes and errors.
- Purchases (Adapty, Apple App Store, Google Play): subscription status and purchase history. Payments are processed by Apple or Google; we never receive your payment card details.
2.2 On the Website
- Launch updates. If you sign up, we store your email address, the date, your language and where on the Website you signed up. We don't store your IP address with your email.
- Technical logs. Our servers keep standard technical logs (such as IP address, browser type and the page requested) for a limited period for security and troubleshooting.
- Bot protection. To protect our data from automated scraping, the Website uses Cloudflare Turnstile, which checks that requests come from a real browser. Cloudflare processes technical information about your browser and connection for this check under its own privacy policy.
- Card search. When you search for your card on the Website, we receive the country and the text you type. We don't link searches to your identity; we keep counters per network address for a limited time to block abuse.
- Cookies. The Website does not use advertising or analytics cookies.
2.3 When you contact us
If you email us, we receive your email address and whatever you include in your message.
3. How we use information and legal bases
| Purpose | Information | Legal basis (where GDPR or similar laws apply) |
|---|---|---|
| Show exchange rates, fees and conversions | App settings on your device; no personal data needed on our side | Performance of our agreement with you |
| Send rate alerts and daily summaries | App identifier, push token, alert settings, time zone | Performance of our agreement with you |
| Provide Premium and restore purchases | Adapty profile identifier, subscription status | Performance of our agreement with you |
| Understand usage and fix problems | Analytics events, crash reports, server error reports | Our legitimate interest in a working, useful Service |
| Send launch updates | Email address | Your consent, which you can withdraw at any time |
| Answer support requests | Your email and message | Our legitimate interest / performance of our agreement |
| Security, preventing scraping and abuse, legal compliance | Technical logs, bot-protection and app-integrity checks, request counters, records required by law | Legitimate interest; legal obligation |
4. Service providers
We use the following providers to run the Service. They process data on our behalf or under their own terms, as indicated:
- Hetzner Online GmbH (Germany) — hosting of our server and Website.
- Google LLC — Firebase Cloud Messaging (Android notifications), Google Analytics for Firebase, Firebase Crashlytics.
- Apple Inc. — Apple Push Notification service (iOS notifications), App Store purchases.
- Google Play — purchases on Android.
- Adapty Tech Inc. — subscription management.
- Functional Software, Inc. (Sentry) — server error monitoring.
- Cloudflare, Inc. — Turnstile bot protection on the Website.
- Hostinger — email.
Exchange rate and gold price providers receive requests from our server only; no information about you is sent to them.
We may also disclose information if required by law, to protect our rights or users' safety, or as part of a merger, acquisition or sale of assets, in which case this Policy will continue to apply.
5. International transfers
Our server is located in Germany. Some providers process data in other countries, including the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep information
- App identifier, push token and alert settings: until you delete your data in the App, or 12 months after the App last contacted our server.
- Notification log: 30 days.
- Email for launch updates: until you unsubscribe.
- Analytics and crash data: according to the provider's retention settings; Google Analytics event data is kept for no more than 14 months.
- Support emails: as long as needed to resolve your request and for legal reasons.
7. Your choices and rights
- Delete your data: use "Delete my data" in the App settings, or email us. Deleting the App removes the data stored on your device.
- Notifications and location: you can turn them off in your device settings at any time.
- Launch emails: use the unsubscribe link in any email.
- Depending on where you live (for example in the EU, UK, Armenia or California), you may have the right to access, correct, delete, restrict or object to processing of your personal information, to data portability, and to withdraw consent. To use these rights, email hello@getyorate.com. You may also complain to your local data protection authority.
- We don't sell or "share" personal information for cross-context behavioural advertising as those terms are defined in California law.
8. Children
The Service is not directed to children under 13 (under 16 in the European Economic Area). We don't knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
9. Security
We use encryption in transit (HTTPS), access controls and regular backups. No method of transmission or storage is completely secure, but we work to protect your information.
10. Changes to this Policy
We may update this Policy. We will post the new version on this page with a new "Last updated" date and, for significant changes, notify you in the App.
11. Contact
MARGOAPPS LLC, 8 Yervand Kochar Street, Yerevan 0070, Republic of Armenia
Email: hello@getyorate.com