Privacy Policy

JustConvert Effective Date: May 20, 2026 Last Updated: August 27, 2026 Version: 2.4

---

1. Introduction

AmaliLabs L.L.C-FZ ("we," "us," or "our"), incorporated in the UAE, operates JustConvert ("the App"), a native iPhone application available on the Apple App Store, with support and legal pages hosted at www.getjustconvert.com.

This Privacy Policy explains how we collect, use, store, and protect information when you use JustConvert. We are committed to protecting your privacy and being transparent about our data practices.

The short version: JustConvert is designed with privacy in mind. We collect minimal data, store most information only on your device, and never sell your personal information.

---

2. Information We Collect

2.1 Information Stored on Your Device (Local Only)

The following data is stored exclusively on your device and is never transmitted to our servers:

This data never leaves your device. It is stored in the app's local storage (UserDefaults) and is removed when you uninstall JustConvert.

Calculator expressions and live results are processed in memory on the device while the calculator is open. They are not stored in conversion history, analytics, or server-side storage.

2.2 Pseudonymous Analytics Data

When you use JustConvert, we collect pseudonymous usage data to understand how the App is used and to improve it. This data is stored in our Supabase database.

What we collect:

This data is designed not to identify you directly. The random user ID is generated on your device and is not linked in the checked-in App code to your name, email address, Apple ID, or conversion history. It may still distinguish an installation or session and may be treated as personal data under applicable law.

What we do NOT collect:

• Your name, email address, or any contact information
• Your actual conversion values or amounts
• Precise location or GPS data
• IP addresses are not intentionally included in the App's analytics payload, although an IP address may be processed as part of a network request by infrastructure providers
• Device identifiers (IDFA, GAID, or similar)
• Financial or payment information
• Your Apple ID or any account credentials

2.3 Subscription and Purchase Data

JustConvert is a paid app. Purchases are processed through Apple's App Store and managed via RevenueCat.

We do not collect, see, or store your payment card details, billing address, or Apple ID. All payment processing is handled by Apple. RevenueCat may associate purchase and entitlement records with its SDK-generated customer identity and Apple's transaction state. The App does not send conversion history, expressions, numeric conversion values, or other user-entered conversion content to RevenueCat.

2.4 Local Notification

The active JustConvert subscription flow does not request local notification permission and does not schedule billing reminders. On initialization, the App removes the legacy trial_reminder_day5 pending request from upgraded installations; no notification content is sent to our servers.

2.5 Public-site and campaign analytics

The public site creates random local and browser-session identifiers and may send page-view, App Store call-to-action, source, and campaign-token events to Supabase. The site also uses Vercel Analytics. Campaign redirect links may process a campaign slug or token, country header when available, user-agent data, and bot or link-preview classification to resolve a destination and measure scans or previews. These events do not contain conversion values or app conversion history.

---

3. How We Use Your Information

We use the information we collect to:

1. Provide the service - deliver currency, unit, and time conversions
2. Improve the App - understand which features are used and how
3. Monitor performance - identify and fix technical issues
4. Plan features - make informed decisions about future development

We do not use your information for:

• Targeted advertising
• Selling to third parties
• Profiling or automated decision-making that affects you
• Any purpose other than those listed above

---

4. Legal Basis for Processing (GDPR)

For users in the European Union and European Economic Area, we process data under the following legal bases:

You have the right to object to processing based on legitimate interest. See Section 8 for how to exercise your rights.

---

5. Third-Party Services

JustConvert uses the following third-party services:

5.1 Apple App Store / StoreKit

• Purpose: App distribution, in-app purchase processing, subscription management, plan changes, renewal-intent reads, and restore flows
• Data shared: Standard App Store and StoreKit purchase, subscription, storefront, and renewal information; payment details are handled entirely by Apple
• Privacy Policy: apple.com/legal/privacy

5.2 RevenueCat

• Purpose: Purchase offerings, entitlement state, purchase and restore handling
• Data shared: Pseudonymous purchase and entitlement data associated with Apple transaction state. No conversion history, user-entered values, or personal information is shared with RevenueCat.
• Privacy Policy: revenuecat.com/privacy

5.3 Supabase

• Purpose: Database storage for exchange rates, pseudonymous iOS and web analytics, campaign configuration, and redirect execution
• Data shared: Pseudonymous usage events as described in Sections 2.2 and 2.5; currency-rate read queries; campaign slug, token, and redirect event metadata where applicable
• Privacy Policy: supabase.com/privacy

5.4 open.er-api.com

• Purpose: Upstream exchange rate source
• Data shared: No user data. Rates are fetched server-to-server by a Supabase Edge Function, not by the App directly.
• Privacy Policy: exchangerate-api.com/privacy

5.5 Vercel

• Purpose: Hosts the public support and legal pages at www.getjustconvert.com and provides Vercel Analytics
• Data shared: Standard web request data, including IP address and browser information, and analytics data processed by Vercel's services when you visit those pages
• Privacy Policy: vercel.com/legal/privacy-policy

We do not integrate advertising networks, social media trackers, or any data brokers.

---

6. Data Retention

---

7. Data Security

We implement the following security measures to protect your data:

• HTTPS encryption for all data transmitted between your device and our servers
• Row Level Security (RLS) on our Supabase database, restricting data access
• Pseudonymous IDs - no name, email address, Apple ID, IDFA, or other direct identifier is intentionally included in the App analytics payload
• Minimal data collection - we only collect what is necessary to operate and improve the App
• No accounts or passwords - JustConvert requires no registration, eliminating credential security risks
• On-device storage - the majority of your data never leaves your iPhone

While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

---

8. Your Rights

Depending on your location, you may have the following rights regarding your data:

8.1 Rights for All Users

• Delete local data: Uninstall JustConvert to remove all locally stored data from your device
• Object to analytics: The App and public site honor a local analytics_opt_out key when present, but the current interface does not provide a control that sets it. You may contact us to object to analytics processing or request available deletion actions.

8.2 GDPR Rights (EU/EEA Users)

If you are located in the EU or EEA, you have the right to:

• Access: Request a copy of personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request that we restrict processing of your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interest
• Withdraw consent: Where processing is based on consent

How to exercise your rights: Contact us at legal@getjustconvert.com. We will respond within 30 days.

Because our analytics use random identifiers that are not linked in the App code to your name, email address, Apple ID, or conversion history, we may be unable to identify, access, or delete specific analytics records tied to you. In this case, we will explain what actions are possible.

You also have the right to lodge a complaint with your local data protection authority. For EU users, you can find your authority at edpb.europa.eu.

8.3 CCPA/CPRA Rights (California Users)

California residents have the right to:

• Know what personal information we collect, use, and disclose
• Delete personal information we have collected
• Correct inaccurate personal information
• Opt-out of the sale or sharing of personal information for cross-contextual behavioral advertising
• Limit the use and disclosure of sensitive personal information where applicable

We do not sell or share your personal information for cross-contextual behavioral advertising.

To exercise your rights, contact us at legal@getjustconvert.com. We will respond within 45 days and will not discriminate against you for exercising these rights. You may use an authorized agent where permitted by applicable law.

8.4 UAE Users

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), you have rights to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing in certain circumstances

Contact us at legal@getjustconvert.com to exercise these rights.

---

9. Children's Privacy

The App has no age gate or age-verification flow. It has no social features, user-generated content, chat, advertising, or mature content.

We do not knowingly collect personal information from children under 13 without verified parental or guardian consent. The App does not use children's data for targeted advertising or commercial tracking. Because the App has no account system or child profile, it does not provide parent-managed accounts or profiles.

If you are a parent or guardian and have concerns, please contact us at legal@getjustconvert.com.

---

10. International Data Transfers

JustConvert is operated from the UAE. Pseudonymous analytics data is stored on Supabase infrastructure hosted on AWS. If you are located in the EU/EEA, your pseudonymous analytics data may be transferred to servers outside the EU.

Such transfers are safeguarded by:

• Supabase's compliance with GDPR and Standard Contractual Clauses (SCCs)
• The pseudonymous nature of data transferred (no direct personal identifiers)

---

11. On-Device Storage

JustConvert stores app preferences, conversion history, cached exchange rates, and other local state in iOS UserDefaults on your device. This data:

• Never leaves your device
• Is not accessible to us or any third party
• Is removed when you uninstall the App

The App does not use cookies or browser storage for its iOS conversion state. The public support and legal pages use browser localStorage and sessionStorage for pseudonymous web analytics identifiers and may use Vercel Analytics. We do not use advertising cookies or cross-site behavioral advertising on those pages.

---

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Make the updated policy available at www.getjustconvert.com/privacy

We encourage you to review this policy periodically. Your continued use of JustConvert after changes constitutes acceptance of the updated policy.

---

13. Contact Information

For privacy-related questions, requests, or concerns, please contact:

AmaliLabs L.L.C-FZ Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. Email: legal@getjustconvert.com Website: www.getjustconvert.com

We aim to respond to all privacy-related inquiries within 30 days.

---

This Privacy Policy was last updated on August 27, 2026.