Privacy policy

This Privacy Policy describes how Coinly ("Coinly," "we," "us," or "our") collects, uses, stores, and shares information about you when you use the Coinly mobile application and any related websites or services (collectively, the "App"). It also explains the rights and choices you have regarding your information.

Please read this policy carefully. By downloading, accessing, or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the App.

If you have any questions, you can contact us at any time at educoinly@gmail.com.

1. Information We Collect

We collect only the information we need to operate and improve the App. This falls into two categories.

1.1 Information you provide directly

When you create an account or communicate with us, we collect:

• Name: the name you provide when registering your account.
• Email address: used to create and secure your account, communicate with you about the App, and respond to your support requests.
• Communications: if you email us or contact support, we keep a record of that correspondence so we can assist you.

You are not required to provide this information, but certain features of the App (such as maintaining an account) will not be available without it.

1.2 Information collected automatically

When you use the App, certain information is collected automatically:

• Device and technical information: device model, operating system and version, app version, language settings, and unique device identifiers.
• Usage information: the features you use, screens you view, actions you take within the App, session duration, and the dates and times of your activity.
• Log and diagnostic data: IP address, crash reports, error logs, and performance data, which help us identify and fix problems.
• Approximate location: a general location (such as country or region) inferred from your IP address. We do not collect precise GPS location.

We do not collect sensitive categories of personal information such as government identification numbers, biometric data, health information, precise geolocation, or payment card details.

2. How We Use Your Information

We use the information described above for the following purposes:

• To provide the App: creating and maintaining your account, delivering the App's features, and syncing your data across sessions and devices.
• To communicate with you: responding to your inquiries, sending service-related notices such as security alerts or changes to our terms, and providing customer support.
• To improve the App: analyzing usage patterns to understand which features are useful, identifying bugs and crashes, and developing new features.
• To keep the App secure: detecting, preventing, and responding to fraud, abuse, unauthorized access, and other harmful activity.
• To comply with the law: meeting our legal obligations, enforcing our terms, and protecting our rights and the rights of our users.

We do not use your personal information for third-party advertising, and we do not sell it to anyone.

2.1 Legal bases for processing (EEA, UK, and similar jurisdictions)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we process your personal data under the following legal bases:

• Performance of a contract: processing necessary to provide you with the App and your account.
• Legitimate interests: improving the App, maintaining security, and preventing fraud, where these interests are not overridden by your rights and freedoms.
• Consent: where we ask for it, such as for optional communications. You may withdraw consent at any time.
• Legal obligation: where processing is necessary to comply with applicable law.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We share it only in the following limited circumstances:

3.1 Service providers

We use trusted third-party providers to operate the App. In particular, we use Supabase to host our backend infrastructure and database, which stores your account information (such as your name and email address) on secure cloud servers. Our service providers may access personal information only to perform services on our behalf and are contractually required to protect it and use it for no other purpose. You can review Supabase's privacy practices at https://supabase.com/privacy.

3.2 Legal and safety reasons

We may disclose information if we believe in good faith that it is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our terms of service; to detect or prevent fraud or security issues; or to protect the rights, property, or safety of Coinly, our users, or the public.

3.3 Business transfers

If Coinly is involved in a merger, acquisition, financing, reorganization, or sale of some or all of its assets, your information may be transferred as part of that transaction. We will notify you (for example, by email or an in-app notice) of any such change in ownership and any choices you may have.

3.4 With your consent

We may share your information for other purposes if you direct us to or give us your consent.

4. Data Retention

We keep your personal information only as long as necessary for the purposes described in this policy:

• Account information (name, email) is retained for as long as your account is active.
• Usage and diagnostic data is retained for up to 24 months, after which it is deleted or aggregated so it can no longer identify you.
• Support correspondence is retained for up to 24 months after the matter is resolved.

If you delete your account or request deletion of your data, we will delete your personal information within 30 days, except where we are required to retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies may persist in encrypted backups for a limited period before being permanently overwritten.

5. Your Rights and Choices

Depending on your location, you may have some or all of the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information.
• Portability: receive your information in a structured, commonly used, machine-readable format.
• Objection and restriction: object to or ask us to restrict certain processing of your information.
• Withdrawal of consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email us at educoinly@gmail.com from the email address associated with your account. We may need to verify your identity before fulfilling your request. We will respond within the timeframe required by applicable law (generally within 30 days). Exercising these rights is free of charge, and we will not discriminate against you for doing so.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority. However, we would appreciate the chance to address your concerns first, so please consider contacting us directly.

5.1 California residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to know what categories of personal information we collect and how we use and share them (as described in this policy), to access, correct, or delete your personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age. You may exercise your rights by contacting us at educoinly@gmail.com. You may also designate an authorized agent to make a request on your behalf.

5.2 Other jurisdictions

Residents of other regions with privacy laws (including Canada, Brazil, Australia, and various U.S. states) may have similar rights under their local law. We honor valid requests regardless of where you live, to the extent required by applicable law.

6. International Data Transfers

Coinly serves users worldwide. Your information is stored and processed on cloud infrastructure provided by Supabase, which may be located in the United States or other countries that may have data protection laws different from those in your jurisdiction.

Where we transfer personal data from the EEA, UK, or Switzerland to countries not deemed to provide an adequate level of protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK equivalent), together with the contractual data protection commitments of our service providers.

7. Data Security

We take reasonable technical and organizational measures to protect your personal information, including encryption of data in transit (TLS/HTTPS), encryption of data at rest on our hosting infrastructure, access controls limiting who can view personal data, and secure authentication for user accounts.

No method of electronic transmission or storage is 100% secure, so we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

You are responsible for keeping your account credentials confidential. Please notify us immediately at educoinly@gmail.com if you suspect unauthorized access to your account.

8. Children's Privacy

The App is not directed at children under the age of 13 (or the minimum age of digital consent in your jurisdiction, which may be up to 16), and we do not knowingly collect personal information from children under that age. If you are under the applicable minimum age, please do not create an account or provide any personal information through the App.

If we learn that we have collected personal information from a child under the applicable age without verifiable parental consent, we will delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at educoinly@gmail.com and we will take appropriate action.

9. Third-Party Links and Services

The App may contain links to third-party websites, products, or services that we do not operate. This Privacy Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any third-party service you visit or use.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the App, or applicable law. When we make changes, we will revise the "Effective date" at the top of this policy and post the updated version in the App. If the changes are material, we will provide more prominent notice, such as an in-app notification or an email to the address associated with your account, before the changes take effect.

Your continued use of the App after the updated policy takes effect means you accept the revised policy. If you do not agree, you should stop using the App and may request deletion of your account.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact us at:

Coinly
Email: educoinly@gmail.com

We will do our best to respond promptly to all legitimate inquiries.