Chart Pal Privacy Policy
Last updated:
Chart Pal is published by Nevronus Systems, Dhaka, Bangladesh, the data controller. Contact: info@nevronus.com. We have not appointed a Data Protection Officer.
1. Overview
Chart Pal has no application server of its own. Your main database lives on your phone. The app talks directly to Google services, a few public market-data APIs and one small Cloudflare service used to store chart images. We do not sell your data. Free users may choose to watch rewarded ads; Pro subscribers see no ads.
2. What we collect and why
2.1 Account
Sign-in uses Google or email & password via Firebase Authentication. We store your email, Firebase user ID and — for Google sign-in — your name and profile photo URL, plus your plan (from RevenueCat), settings, notification preferences and optional country and experience level. We never see your password.
2.2 Chart screenshots
Screenshots are cropped and compressed, then:
- sent to Google Gemini (via Firebase AI Logic) for analysis;
- saved on your device;
- uploaded once to a private Cloudflare R2 bucket under your user ID using short-lived signed links.
Image hashes let identical screenshots reuse earlier results. Important: on Google’s free Gemini tier, Google may use submitted content to improve its models. Crop out private details such as account numbers or balances before uploading.
2.3 Analyses, trades and watchlist
Stored on your device and mirrored to Google Cloud Firestore under your user ID. Price alerts, notifications and AI chat threads stay on-device only. Firestore rules restrict each document to its owner.
2.4 Usage counters
Daily analysis and rewarded-ad counts are stored on-device to apply free-tier limits. They contain no content.
2.5 Analytics and crash data
We use Firebase Analytics, Crashlytics and Performance Monitoring for app events, device and app metadata and country-level location. We never send chart images, analysis text, chat content, trade notes, prices you type or search text. You can turn off usage analytics in Settings → Privacy; crash reporting stays on.
2.6 Subscriptions
RevenueCat manages entitlements over Google Play Billing using your Firebase user ID and the purchase receipt. We never handle card details.
2.7 Notifications
Firebase Cloud Messaging delivers occasional announcements. Price alerts run locally on your device.
2.8 Advertising
Rewarded ads are shown only when a free user taps to watch one. Google AdMob may collect your advertising ID, IP-derived location, device info and ad interactions. In the EEA, UK and Switzerland a consent form is shown first. We never send AdMob your name, email, user ID or chart content.
3. Third-party services
Requests made directly from your device reveal your IP address to: CoinGecko and Binance (market data), alternative.me (Fear & Greed index), news RSS feeds (CoinDesk, Cointelegraph, Decrypt, Bitcoin Magazine), TradingView widgets (may set cookies), Google Firebase, RevenueCat, Cloudflare and Google AdMob.
4. Where data is stored
Firebase data is stored in the Google Cloud region configured for the project and may be processed elsewhere under standard contractual clauses. Chart images are in Cloudflare R2. Everything else stays on your phone.
5. Retention
| Data | Kept until |
|---|---|
| Firestore account data, analyses, trades, watchlist | You delete them or your account |
| Chart screenshots (device and R2) | You delete the analysis or account |
| Cached prices / news | Short-lived; news discarded after 48 hours |
| Firebase Analytics | Configured retention (max. 14 months) |
| Crashlytics | 90 days |
| Purchase records, AdMob, Gemini content | Governed by those providers’ policies |
6. Account and data deletion
See Account & Data Deletion for exactly what Profile → Delete account removes.
7. Your rights
You may have the right to access, correct, export, restrict or delete your data, object to processing and withdraw consent. Most actions are available in the app; email us for anything else and we will respond within 30 days. EEA and UK users may complain to their local data protection authority.
California: we do not sell personal information. AdMob identifiers may count as “sharing”; opt out in device settings or by emailing us.
8. Children
Chart Pal is not for anyone under 13 (or 16 where local law requires). Report an account you believe belongs to a child to info@nevronus.com.
9. Security
All traffic uses HTTPS/TLS. Firebase App Check with Play Integrity limits AI endpoints to genuine installs. Firestore rules and signed R2 links restrict data to its owner.
10. Changes
Updates are posted here with a new date; material changes are shown in the app.
11. Contact
Nevronus Systems, House 3, Road 3A, 6th Floor, Sector 15, Uttara Model Town, Uttara Dhaka 1230. Bangladesh — info@nevronus.com