Privacy policy — PrismaFX

Introduction

PrismaFX has no accounts, no sign-in and no ads. What you track — your portfolio, your expenses, your favourites — is stored on this device and is never uploaded. This policy explains, in plain language, what the app keeps, the few things it sends over the network, and how you can remove all of it.

On your device

The app keeps the following in its own storage on this device — the app database, the system preferences store, and a container it shares with the widget. None of it is uploaded anywhere.

• Your portfolio: assets, transactions, purchase dates and any notes you write.
• Your expenses and budgets, with their categories and notes.
• Your preferences: favourite currencies and pairs, home currency, language, appearance, alerts and widget settings.
• A cache of current and historical exchange rates, so the app still works with no connection.

Storage and security

Your data lives in the app’s own container, protected by iOS and by your device passcode. The keys the app uses to reach the rate providers are kept in the iOS Keychain. Every network request uses HTTPS. PrismaFX does not sync to iCloud: there is no cloud copy of your data, which also means that deleting the app deletes the data with it. A backup you make of the whole device may include the app’s data — that backup is Apple’s, under Apple’s terms. The random device identifier described below is also kept in the iOS Keychain, on this device only. Because of that it can survive deleting and reinstalling the app; erasing the device or resetting its Keychain removes it. On Android, the app uses a random identifier created at install instead; it is removed when you uninstall the app and is left out of Android backups.

What leaves your device

A few things travel over the network, and they are listed here in full. Nothing in this list contains your portfolio, your expenses or your notes.

• Exchange rates, prices and chart history, fetched through the developer’s own server (prismafx-proxy on Vercel). That server gets them from Open Exchange Rates, CoinGecko (cryptocurrencies) and gold-api.com (copper); the app never contacts those providers itself. A request carries currency codes and dates. As with any request on the internet, your IP address is visible to the server.
• App configuration, read from the app’s own server. With this request the app sends a random device identifier — not your name, email address or advertising ID — used only to apply per-device settings, for example to recognise the developer’s own test and admin devices. Nothing else about you or your device is sent.
• Usage and crash diagnostics through Google Firebase — described in the next section.
• Feedback, and only if you send it. If you use the feedback form in Settings, your message, the email address you type (optional), the device identifier described above, and your device model and system version are sent to the developer’s feedback database. The identifier is what lets a reply reach your device. If you never use that form, nothing is sent.

Analytics and crash reports

PrismaFX includes Google Firebase Analytics and Crashlytics. They report how the app is used and what it was doing when it failed: which screens and features were opened, the app version, the device model, the iOS version, and the technical detail of a crash. Firebase gives each installation a random identifier so those reports can be grouped, and an approximate region can be inferred from the IP address of the request. Nothing from your portfolio, expenses or notes is included, the advertising identifier is not used, and PrismaFX does not track you across other companies’ apps or websites. You can turn all of this off at any time in Settings → Data & Privacy → Diagnostics; the switch is on by default and takes effect immediately.

What PrismaFX never collects

There is no account to create and nothing to buy, so there is none of the following to collect:

• Your name, address or phone number.
• Payment or card details — the app is free and has nothing to buy inside it.
• Your contacts, photos, calendar, microphone or camera. The app never asks for them.
• Your portfolio, expenses or notes. These are never uploaded — not even as a backup.

Location and notifications

PrismaFX asks for two permissions and both are optional. Location is requested only if you turn on automatic travel mode; when you do, iOS provides a coarse position which is passed to Apple’s geocoding service to work out which country you are in. Only the country code is used, it is kept for the session, and it never reaches the developer. Notifications carry the rate alerts and reminders you set up yourself; they are scheduled on the device, and there is no server behind PrismaFX that could push anything to you.

Your data, your controls

You can export everything the app holds as a CSV or JSON file and keep it yourself, clear the cached rates, or reset all app content — all from Settings. Deleting PrismaFX removes everything it stored on the device, apart from the device identifier described under Storage and security. Since the developer holds nothing about you, there is nothing to request or delete on your behalf, with one exception: if you have written through the feedback form, send an email and that message will be deleted.

Children

PrismaFX is a general-audience utility. It is not directed at children under 13 and does not knowingly collect anything from them.

Changes to this policy

When the app’s behaviour changes, this text changes with it and the date above moves. Because the policy ships inside the app, updating PrismaFX is what brings you the current version.

Contact

Questions about privacy, or a request about your data? Write to mustafa@mustafaevleksiz.com.