Privacy Policy

Effective date: March 15, 2026  ·  Last updated: March 15, 2026

Tiynex ("we", "us", or "the app") is a currency rate tracker for the Republic of Kazakhstan, developed by Alisher Mutaliyev as an individual developer. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

Tiynex displays official exchange rates from the National Bank of Kazakhstan (NBK) and exchange office data from kurs.kz, allowing you to compare rates, track favorites, set price alerts, and find nearby exchange offices on a map.

1. Information We Collect

Data	Purpose	Storage
Precise location (when in use)	Finding nearest exchange offices on the Map screen	On-device only
Favorite currencies	Saving your preferred currencies for quick access	On-device only
Price alerts	Notifying you when a currency reaches your target rate	On-device only
Favorite offices	Bookmarking exchange offices you frequent	On-device only
App preferences	Default currencies, selected city, launch count	On-device only
Anonymous usage analytics	Improving the app experience, understanding feature adoption, and aggregate engagement reporting	Our server

2. Information We Do NOT Collect

Category	Status
Name, email, or account credentials	Not collected
Apple Advertising Identifier (IDFA)	Not collected
Device identifier (identifierForVendor)	Not collected
Photos, camera, or microphone	Not used
Contacts, calendar, or health data	Not used
Browsing history or clipboard contents	Not collected
Personally identifiable analytics or cross-app telemetry	Not collected
Biometric data (Face ID, Touch ID)	Not used

3. How We Use Your Information

• Location: Your GPS coordinates are used exclusively on-device to sort exchange offices by distance on the Map screen. Location data is held in memory only while the app is open and is never transmitted to our server or any third party. If you deny location access, the app defaults to showing offices in Almaty.
• Favorites & alerts: Stored locally using Apple SwiftData. This data never leaves your device and is deleted when you uninstall the app or use the "Clear all data" option in Settings.
• App preferences: Your selected default currencies and city are stored locally to personalize the experience. This data is not transmitted anywhere.
• Network requests: The app makes read-only GET requests to our API server (tiynex-api.azurewebsites.net) to fetch currency rates and exchange office listings. These requests do not contain any user-identifying information — no tokens, no device IDs, no location data.
• Usage analytics: Anonymous interaction events (screen views, currency lookups, session start/end with duration, office interactions) are buffered on your device and periodically sent to our server in batches. These events contain only the action name, a random session UUID, and a timestamp — no device identifiers, no location data, and no personal information.

4. Third-Party Services

Tiynex uses the following data sources to provide its core functionality:

Source	Provider	Data Retrieved	User Data Shared
Official exchange rates	National Bank of Kazakhstan (NBK)	40+ currency rates via public XML feed	None
Exchange office listings	kurs.kz	Office names, addresses, phone numbers, and buy/sell rates	None
API hosting	Microsoft Azure (App Service)	Proxies aggregated data to the iOS app	Client IP address (standard HTTP)
Maps	Apple MapKit	Map tiles and routing	Per Apple's privacy policy

We do not use any third-party analytics SDKs (Firebase Analytics, Amplitude, Mixpanel, etc.), advertising frameworks (AdMob, Facebook Ads, etc.), crash reporting tools (Crashlytics, Sentry, etc.), or attribution services (Adjust, AppsFlyer, Branch, etc.).

5. First-Party Analytics

Tiynex collects anonymous usage analytics using our own first-party system (no third-party SDKs involved). This data helps us understand how the app is used and demonstrate engagement to potential partners.

What we collect:

• Screen views (which screens you visit)
• Session start and end times (to calculate average session duration)
• Currency detail views (which currencies are most popular)
• Converter usage (that a conversion occurred, not the amounts)
• Office interactions (views, route requests, phone calls initiated)
• Search queries and filter usage
• Alert creation and trigger counts

What we do NOT collect:

• Device identifiers (no IDFA, no identifierForVendor, no hardware IDs)
• Your location (GPS data stays on-device only)
• IP addresses (not logged or stored by our analytics system)
• Personal information of any kind

How it works:

• Events are buffered on your device and batch-sent to our server approximately every 60 seconds.
• Each app session receives a random UUID that is discarded when the session ends. Sessions cannot be linked to each other or to your identity.
• If your device is offline, events are saved locally and sent when connectivity resumes.
• Data is stored in an aggregated database on our server and is used solely for app improvement and aggregate engagement reporting.
• Analytics data is never sold, shared with third parties, or used for advertising or profiling.
• You can disable usage analytics at any time in Settings → General → "Usage analytics". When disabled, no events are collected or sent.

Tiynex also uses Apple's built-in OSLog system for local diagnostics during development. These logs remain on your device only, are not transmitted anywhere, and are subject to Apple's standard log rotation policies.

6. Data Storage & Security

• On-device data (favorites, alerts, preferences) is stored locally using Apple SwiftData and is protected by iOS Data Protection encryption.
• No cloud sync: Your data is not synced to iCloud, our servers, or any cloud service.
• All network communication between the app and our server uses HTTPS/TLS encryption.
• No user accounts: The app does not require account creation, login, or any form of authentication.
• Server-side caching: Our backend server caches currency rate and office data in-memory.
• Analytics storage: Anonymous usage events are stored in a database on our server. This data contains no personally identifiable information and cannot be linked to specific users or devices.

7. Data Retention & Deletion

• On-device data: Deleted immediately when you uninstall the app or use the "Clear all data" button in Settings → Data Management.
• Server logs: Standard Azure App Service HTTP access logs (containing IP addresses) are retained per Microsoft Azure's default policies and are not used by us for user identification.
• No account data: Since Tiynex does not create user accounts, there is no account data to retain or delete.
• Analytics data: Anonymous usage events are retained on our server for up to 90 days, after which they are automatically deleted. This data cannot be attributed to any individual user.

8. Your Rights

You have the right to:

• Access & control all data stored by the app via the Settings screen.
• Delete all data at any time using Settings → Data Management → "Clear all data".
• Revoke location permission at any time via iOS Settings → Tiynex, without affecting any other functionality.
• Revoke notification permission at any time via iOS Settings.
• Opt out of analytics at any time via Settings → General → "Usage analytics" toggle.

If you are located in the European Economic Area (EEA), you may exercise additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority. If you are located in the Republic of Kazakhstan, your rights are protected under the Law on Personal Data and its Protection (No. 94-V, May 21, 2013).

9. Children's Privacy

Tiynex is a general-audience financial information app and is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. Since the app does not require account creation and stores no personally identifiable information, there is no mechanism through which a child's personal data could be collected.

10. International Data Transfers

The app's backend server is hosted on Microsoft Azure in a region that may be outside your country of residence. The anonymous usage analytics transmitted from the app contain no personally identifiable information — only event names, random session UUIDs, and timestamps. No personal data crosses borders. Standard HTTP metadata (such as IP addresses) is subject to Microsoft Azure's privacy practices.

11. Privacy Manifest (Apple)

In compliance with Apple's requirements, Tiynex includes a Privacy Manifest (PrivacyInfo.xcprivacy) declaring:

• NSPrivacyTracking: false — No tracking.
• NSPrivacyTrackingDomains: empty — No tracking domains.
• Collected data types:
  • Precise Location — used for app functionality only, not linked to identity, not used for tracking.
  • Product Interaction — anonymous usage analytics for app improvement, not linked to identity, not used for tracking.
• Required Reasons API: UserDefaults — reason CA92.1 (accessing user-facing data written by the app).

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will also be communicated via the app's update notes. Your continued use of the app after changes constitutes acceptance of the revised policy.

13. Contact Us