Privacy Policy

Last updated: June 15, 2026

Rebalancer ("the App") is a privacy-first cryptocurrency pair‑ratio tracker. It has no user accounts, no login, and no advertising. We never ask for your name, email address, phone number, or location, and we have no way to identify who you are. This policy explains the small amount of data the App sends for two specific features — push notifications and optional feedback — and the much larger amount of data that never leaves your device.

The App is provided by the developer of Rebalancer, an independent developer. For any privacy question or a request to delete server‑side data, contact yuryuryury@icloud.com.

What we do NOT collect

• No accounts, usernames, passwords, or logins.
• No name, email address, phone number, or other contact details.
• No location data.
• No access to wallets, exchanges, or financial accounts — the App is a tracker; your "holdings" are just amounts you type in, and they stay on your device.
• No advertising, no analytics SDKs, no tracking pixels, no cross‑app or cross‑site tracking, and no Advertising Identifier (IDFA).

Data stored only on your device

Almost everything you create in the App is stored exclusively on your iPhone using standard iOS local storage, and never leaves it:

• The pairs you track and your watchlist arrangement.
• The holdings (coin amounts) you record.
• Your alerts and your app preferences (theme, language, display options).

The App also stores a device identifier in the iOS Keychain. Think of it as a random label the App makes up for itself on first launch (a random UUID) — not any of your phone's real identifiers. Specifically, it is not your device's serial number, not its IMEI, not the iOS Vendor Identifier (IDFV), not the Advertising Identifier (IDFA), and not your Apple ID. It is not derived from, seeded by, or correlated with any of those — and the App cannot even read your phone's IMEI or serial number. It is simply a random string, tied to nothing that can identify you. Its only purpose is to route your own push notifications back to your device; it is used for nothing else — no profiling, no advertising, and no tracking across other apps or websites. Because it lives in the Keychain, this random identifier intentionally survives app deletion, so the same device keeps a stable identifier if you reinstall. Deleting the App removes your other local data (pairs, holdings, alerts, preferences) but not this Keychain identifier (see Data retention & deletion below).

Push notifications (our notification server)

If you create alerts, the App sends the following to our notification server (hosted on Cloudflare) so that your alerts can be checked and delivered even when the App is closed:

• your random device identifier (the UUID described above);
• an Apple push token (provided via Expo) needed to deliver notifications to your device;
• your alert configuration — the coin pairs, target values, alert type, repeat setting, and whether each alert is on or off.

This information is tied only to the random device identifier — never to your name, email, or any personal identity. Our notification server does not store or log your IP address and runs no analytics. The record is kept so your alerts keep working; there is no automatic time‑based expiry. It is removed when (a) you reinstall the App and the same push token re‑registers, which replaces and clears the previous record, or (b) you email us to request its deletion. See Data retention & deletion.

Feedback (only if you send it)

The App includes an optional feedback form. Nothing is sent unless you choose to write and submit feedback. When you do, we receive:

• the feedback text you wrote;
• any attachments you choose to add — an optional screenshot or short screen recording you attach to help illustrate your feedback. Attachments are sent only if you add them, and are stored on our feedback server (Cloudflare);
• basic technical context to help us act on it: the App version, your iOS version, the device type ("iPhone"), your language/locale, and a single yes/no flag indicating whether you have an active subscription.

Your device identifier is sent with the submission but is not stored as‑is — our feedback server keeps only a one‑way hash of it that rotates daily, so submissions cannot be linked back to you or correlated across days. Our feedback server does not store or log your IP address. Feedback — including any attachments — is automatically deleted after 60 days. You may also email us to request earlier deletion.

Subscriptions (Rebalancer Pro)

Rebalancer Pro is an auto‑renewable subscription sold through Apple's In‑App Purchase. All payment is handled by Apple — we never see or receive your payment details, card information, or Apple ID. The App reads your subscription status from Apple on your device to unlock Pro features; this status is not stored on our servers. The only place your subscription status leaves the device is as the single yes/no flag in the optional feedback described above.

Third‑party services

• Market data the App fetches on your device — Binance, Bybit, and CoinGecko — to draw charts and show live prices, the App requests public cryptocurrency price and chart data directly from these services (Binance data is fetched from Binance's public market‑data host, data-api.binance.vision; Bybit and CoinGecko are used for coins Binance doesn't list). Because the App makes these requests, your device's IP address is visible to these services solely by virtue of making the connection, as with any internet request.
• Market data our notification server fetches — OKX, Coinbase, and Coinpaprika — to check your price alerts and deliver notifications even when the App is closed, our notification server requests public cryptocurrency prices from these services. These requests are made by our server, so the services see our server's IP address, not your device's.
• In every case — these market‑data requests contain only coin ticker symbols; no user data, no device identifier, and nothing that identifies you is ever attached, and we do not log or store them.
• Apple — processes In‑App Purchases and delivers push notifications (APNs) under Apple's own privacy terms.
• Expo — provides the push‑notification token and relays notification messages to Apple for delivery. Expo receives the push token and the notification content (e.g. "ENA/LDO alert"), acting only as a delivery service.

Analytics, tracking, advertising

None. Rebalancer contains no analytics SDKs, no tracking pixels, no advertising frameworks, and no third‑party software development kits that collect data. We do not use the Advertising Identifier and do not track you across other apps or websites.

Children's privacy

The App is not directed at children under 13 and does not knowingly collect any data from anyone, including children.

Data retention & deletion

There is no in‑app "delete my data" button. Here is exactly how each kind of data is removed:

• On‑device data — delete the App and your local data (pairs, holdings, alerts, preferences) is permanently removed from your device. The random device identifier stored in the iOS Keychain is the one exception: it persists across reinstalls by design (it is a random UUID tied to nothing identifying). To remove the server‑side record associated with it, use the email path below.
• Notification server — the record tied to your random device identifier has no automatic expiry. It is removed when the same push token re‑registers after a reinstall (which replaces the old record), or when you email us to delete it.
• Feedback — automatically deleted after 60 days, including any attachments; the stored device‑identifier hash rotates daily and cannot be reversed. You may email us to request earlier deletion.

To request deletion of any server‑side data (your notification‑server record or feedback), email yuryuryury@icloud.com and we will remove it.

Changes to this policy

If this policy changes in a future version, the updated text will appear at this URL with a new "Last updated" date.

Contact

Questions about this policy, or requests to delete server‑side data: yuryuryury@icloud.com