# Privacy Policy for Gold Weight Converter
**App:** Gold Weight Converter
**Package:** `com.ilyas.ilyasapps.goldweightconverter`
**Version:** 2.0
**Developer:** Muhammad Ilyas (Mobilia Apps)
**Contact:** muhammadilyas15@gmail.com
**Effective Date:** May 8, 2026
**Last Updated:** May 8, 2026
---
## 1. Introduction
This Privacy Policy explains how the Gold Weight Converter app ("the App", "we", "our") handles information when you use it on your Android device. The App is a calculator and reference tool for gold weight conversion, karat purity, jewelry pricing, live spot-rate lookup, price alerts, and an AI-powered hallmark assistant.
We have built this App to be **privacy-respecting by design**:
- There is **no user account** and **no sign-in**.
- There is **no cloud sync** of your data.
- We do **not** collect your name, email address, phone number, or location.
- The vast majority of your data (calculations, history, shop profile, price alerts) **stays on your device** and never leaves it.
The few times the App does talk to the internet, only the minimum information needed for the feature is sent. This policy explains exactly what, when, and why.
---
## 2. Information We Collect
The App distinguishes between two kinds of data: data that stays **locally on your device**, and data that is **transmitted over the internet** for a specific feature.
### 2.1 Data Stored Locally on Your Device (Never Transmitted)
The following information is stored only inside the App's private sandbox on your device (Room database and SharedPreferences). It is **never uploaded to a server**, **never synced** to any cloud, and is **not accessible** to any other app:
| Data | Where it lives | Why |
|------|----------------|-----|
| Calculation history (weight, karat, rate, currency, region) | Room database | Show past calculations, mark favorites |
| Favorite calculations flag | Room database | Filter "Favorites" in History |
| Shop profile (shop name, address, phone, optional shop logo image) | Room database + app file storage | Print on PDF receipts only |
| Price alert thresholds (currency, value, karat) | Room database | Trigger local price-alert notifications |
| AI Hallmark Assistant conversation history (last 50 messages) | SharedPreferences | Continue chats across sessions |
| App preferences (language, theme, last region preset, last unit) | SharedPreferences | Remember your settings |
The shop logo image, if you choose to add one, is selected from your device gallery using Android's privacy-safe Photo Picker (`PickVisualMedia`). The image is copied into the App's private storage and is used **only** to be drawn on PDF receipts you generate locally. It is **never uploaded anywhere**.
### 2.2 Data Transmitted Over the Internet
The App makes outbound network requests in only three situations. In each case, the data leaving your device is described below.
**a) Live Gold Spot Price Lookup**
When you open the home screen, refresh the live rate, or use the home-screen widget, the App requests the current gold price from our Cloudflare Worker proxy at `gold-price-proxy.muhammadilyas15.workers.dev`. The request contains:
- The currency code you selected (for example, `USD`, `PKR`, `INR`)
- The weight unit you selected (for example, `gram`, `tola`)
- A static per-app authentication key embedded in the App (used to rate-limit abuse)
The request **does not include** any device identifier, IP-based identifier we collect, your name, email, calculation history, shop profile, or any other personal data. The proxy forwards the request to an upstream gold-price data provider and returns today's price. Responses are cached server-side for approximately 5 minutes.
**b) AI Hallmark Assistant (Google Gemini)**
When you type a question to the in-app Hallmark Assistant, the App sends the **text of your question** (and a short prompt that frames it as a hallmark/karat question) to our Cloudflare Worker proxy at `gemini-proxy.muhammadilyas15.workers.dev`. The proxy forwards it to **Google's Gemini API** server-side and returns the AI's reply.
What is sent: the text you typed.
What is **not** sent: any device identifier, your name, your email, your shop profile, your calculation history, your price alerts, or any other data from the App.
Your conversation history is saved **only on your device** in SharedPreferences (last 50 messages) and is **never uploaded** for sync or backup.
**c) Crash Reports, Anonymous Analytics, and Ads**
See Sections 3 and 5.
---
## 3. How We Use Information
We use information only for the purpose described where it was collected:
- **Calculations & history** — to let you recall, favorite, copy, and share results.
- **Shop profile** — to render PDF receipts you can save and share.
- **Price alerts** — to schedule a local background check (via Android WorkManager) and post a local notification when a threshold is crossed. The check uses the same anonymous gold-price call described in Section 2.2(a).
- **AI Hallmark Assistant** — to send your typed question to Google Gemini via our proxy and display the reply.
- **Crashlytics** — to fix bugs and crashes.
- **Analytics** — to understand which features are used at an aggregate level.
- **Ads & billing** — to show ads and process the optional one-time premium purchase.
We do **not** sell your data. We do **not** profile you. We do **not** combine local app data with any external profile.
---
## 4. Storage and Security
### 4.1 On-device storage
- The Room database `gold_weight_converter.db` and SharedPreferences are stored in the App's private sandbox provided by Android. Other apps cannot read this storage.
- PDF receipts you generate are written to the App's cache directory and are shared with other apps (such as Gmail, Drive, WhatsApp) **only** when you tap Share — using Android's standard `FileProvider` mechanism.
- Beyond the standard Android sandbox, the App does **not** apply additional encryption-at-rest. Sensitive financial details should not be stored in the Shop Profile.
### 4.2 Network security
- All external requests use HTTPS.
- The Cloudflare Workers (`gold-price-proxy` and `gemini-proxy`) are operated by the developer of this App. They exist to keep upstream API keys server-side and to apply rate-limiting. The proxies do **not** persist per-user request bodies and do **not** create per-user accounts.
### 4.3 Backup behavior
The App is configured with `android:allowBackup="false"` and a `dataExtractionRules` file, which prevents Android Auto Backup from copying the App's data to your Google Drive.
---
## 5. Third-Party Services and SDKs
The App integrates the following third-party services. Each link goes to that provider's privacy policy; their handling of data is governed by their own terms.
| Service | Purpose | Data sent |
|---------|---------|-----------|
| **Google AdMob** | Banner, interstitial, and rewarded ads | Standard ad identifiers (e.g., advertising ID), coarse ad-related signals as described in Google's policy |
| **Google User Messaging Platform (UMP)** | EU/UK/Swiss consent collection for ads | Your consent choices |
| **Google Play Billing** | Optional one-time premium purchase (`goldweightconverter_premium_lifetime`) | Your purchase token, handled by Google Play |
| **Firebase Crashlytics** | Crash reports and stack traces | Crash stack trace, OS version, device model, anonymous installation ID |
| **Firebase Analytics** | Aggregate, anonymous usage events | Standard Firebase event data, anonymous installation ID |
| **Google Gemini API** (via developer-operated Cloudflare Worker proxy) | Hallmark AI Assistant replies | The text of your question only — no identifiers |
| **Cloudflare Workers** (developer-operated) | Hosts the gold-price proxy and Gemini proxy | Routes the request through; no user accounts; no per-user logs persisted |
| **Glide** | Loads your local shop logo image into views | None — local-only image processing |
| **AndroidX WorkManager** | Schedules periodic price-alert checks and home-screen widget refresh | None — local scheduling only |
Provider privacy policies:
- Google (AdMob, UMP, Firebase, Gemini, Play Billing): https://policies.google.com/privacy
- Cloudflare: https://www.cloudflare.com/privacypolicy/
---
## 6. The AI Hallmark Assistant — Important Disclosures
The Hallmark Assistant is a chat feature powered by **Google's Gemini API**, accessed through our Cloudflare Worker proxy.
- **What is sent:** only the text you type into the chat.
- **What is stored:** your conversation is stored **only on your device** (SharedPreferences, last 50 messages). It is not uploaded for sync or backup.
- **Data and model training:** requests are made to Google's **Gemini API** (the developer endpoint), which under Google's API terms is **not** used to train Google's general consumer models. This is different from Google's consumer chat products. Please review Google's AI/Gemini API terms for the most current details.
- **Do not include sensitive personal data** in your questions (for example, full names, ID numbers, payment details, addresses, health information). Treat the chat the way you would treat any third-party online search.
- **Not financial or investment advice.** The Assistant is an educational helper for hallmark, karat, and weight questions. It does **not** provide investment recommendations or price predictions. Always verify gold purity and pricing with a certified jeweler or assay office.
- **Replies may be inaccurate.** Like all generative AI, replies can be wrong, incomplete, or outdated. Do not rely on them for irreversible decisions.
---
## 7. Permissions and Why We Use Them
The App requests the following Android permissions:
| Permission | Why |
|------------|-----|
| `INTERNET` | Live gold price, AI Assistant, ads, crash reports, analytics |
| `ACCESS_NETWORK_STATE` | Detect whether you are online before making a network request |
| `POST_NOTIFICATIONS` (Android 13+) | Show price-alert notifications you set up. You can deny or revoke this at any time in Android Settings |
| `RECEIVE_BOOT_COMPLETED` | Re-schedule your price-alert background checks after the device restarts |
The App requests **gallery image access only through Android's privacy-friendly Photo Picker** when you tap "Add Logo" in the Shop Profile screen. No broad storage permission is requested.
The App does **not** request: camera, microphone, contacts, location, calendar, SMS, call logs, biometric, or precise device identifiers.
The `<queries>` block in the manifest declares `mailto:` so that the Contact Us screen can find your email app on Android 11+.
---
## 8. Cloud Sync, Accounts, and Backups
- The App has **no user accounts** and **no sign-in**.
- The App has **no cloud sync**.
- The App is **not** wired to Firebase Authentication, Firebase Firestore, or Firebase Storage.
- Android Auto Backup is **disabled** (`allowBackup=false`).
The only data that ever leaves your device is:
1. Anonymous live-price queries (currency code + unit only).
2. The text of questions you send to the AI Hallmark Assistant.
3. Aggregated, anonymous Crashlytics and Analytics signals.
4. Standard ad-serving requests by Google AdMob (subject to your UMP consent).
---
## 9. Children's Privacy
The App is intended for general audiences (jewelers, gold traders, hobbyists). It is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has used the App and you wish to raise a concern, please contact us.
---
## 10. Your Rights
Because the App stores nearly all data locally on your device and has no user account, you control your data directly:
- **Right to access:** open the App. History, favorites, shop profile, price alerts, and assistant conversations are all visible inside the App.
- **Right to correction:** edit or delete entries inside the App at any time.
- **Right to erasure:** to remove **all** data the App holds about you, do one of the following:
- In Android Settings → Apps → Gold Weight Converter → Storage → **Clear data** (wipes the local database, preferences, and assistant chat history).
- Or simply **uninstall** the App.
- **Right to opt out of ads personalization:** use the in-app consent banner (UMP) or Android Settings → Privacy → Ads → Reset/Delete Advertising ID.
- **Right to opt out of Crashlytics/Analytics:** uninstall the App. (We do not currently expose a separate in-app toggle.)
If you are in the EU/UK (GDPR) or California (CCPA), you have additional rights including the right to lodge a complaint with your local data-protection authority. Because we do not maintain any user account or per-user identifier on our servers, requests of the type "give me all data you have about me" are satisfied entirely by inspecting and clearing the App's local storage as described above.
---
## 11. International Data Transfers
When the App calls the Gold Price proxy or the Gemini proxy, the request is processed by Cloudflare's global edge network and (for Gemini) by Google's API infrastructure. These services may process the request in regions outside your country, including the United States. By using the affected features, you consent to this transfer.
---
## 12. Data Retention
- **On your device:** data persists until you delete an entry, clear app data, or uninstall the App.
- **Cloudflare Worker proxies (operated by the developer):** the proxies are stateless with respect to user data. Live-price responses are cached server-side for ~5 minutes per (currency, unit). No per-user logs are retained.
- **Google Gemini API:** retention is governed by Google's API terms.
- **Crashlytics / Analytics:** governed by Google's Firebase data retention policy.
---
## 13. Changes to This Policy
We may update this Privacy Policy when the App's features change. The "Last Updated" date at the top of this page will reflect the most recent revision. Significant changes will be highlighted in an in-app message or in the Play Store changelog.
---
## 14. Contact
For privacy questions, data deletion requests, or any other concern:
**Muhammad Ilyas — Mobilia Apps**
Email: muhammadilyas15@gmail.com
Developer page: https://play.google.com/store/apps/developer?id=Mobilia+Apps
Privacy site: https://sites.google.com/view/mobilia-apps/
---
*This policy applies to the Gold Weight Converter Android application only.*