Oneboom

Privacy Policy

This Privacy Policy applies to the "CoinWorth" mobile app developed by us (hereinafter referred to as "this App").

1. Purpose of the Policy

CoinWorth aims to process users' personal data in accordance with general privacy principles and applicable data protection laws.

Your personal data provided or to be provided to this App, as well as any personal data about you obtained by our company from external sources, may be processed by our company as the "data controller" in the following ways:

• a) Processed within the scope of and in a manner consistent with the purposes of handling your personal data;
• b) Ensure the personal data reported or notified to our company is accurate and up-to-date;
• c) Record, store, preserve, and organize personal data; transmit such data to authorized institutions when required by law;
• d) Classify personal data and share it with third parties (domestically or internationally) under legal conditions and, if necessary, with your explicit consent;
• e) Process personal data through other methods specified by applicable laws and conduct other procedures required by regulations.

2. Scope and Methods of Personal Data Collection

CoinWorth may process your personal data for the purposes stated in this Privacy Policy. The personal data collected and used by CoinWorth mainly includes the following categories:

2.1 Contact Information
Your name, email address, and phone number when you contact CoinWorth.

2.2 Order Information
Details of purchases you make through in-app transactions.

2.3 Device and Usage Data
Advertising Identifier (IDFA), Vendor/Developer Identifier (IDFV), and Internet Protocol (IP) address of the mobile device you use to access our services.

2.4 Data Categories and Specific Types

• a) Internet traffic data (web activity records, IP address, access data, time and date information);
• b) Device name, operating system, and version;
• c) In-app purchase history;
• d) Token ID, IDFA, IDFV;
• e) Photos uploaded to CoinWorth (for coin identification purposes);
• f) Order information.

2.5 Third-Party Services and SDKs
To provide, analyze, and improve our services, this App integrates third-party Software Development Kits (SDKs). These third parties may collect and process your data under their own privacy policies:

• Firebase SDK (by Google): We use Firebase for cloud storage, backend database (to cache coin data), analytics, and crash reporting. Firebase may collect IP addresses, unique device identifiers, and usage data to ensure app stability and performance.
• Facebook SDK (by Meta): We use the Facebook SDK for app analytics, user engagement, and advertising. It may collect device information, app events, and advertising identifiers (such as IDFA) to deliver personalized ads and measure ad performance.

2.6 General Principles for Personal Data Processing
As the data controller, CoinWorth processes personal data in accordance with the following basic principles:

• a) Comply with legal requirements and the principle of good faith;
• b) Ensure the accuracy and timeliness of personal data when necessary;
• c) Process personal data for specific, clear, and legitimate purposes;
• d) Limit processing to the scope necessary for achieving the purpose, following the "data minimization" principle.

2.7 Image Processing and Storage
When you use our coin identification feature, the photos you take or upload are processed by our third-party AI service providers (such as Google Gemini) solely for the purpose of recognizing and valuing the coin. These images may be securely stored in our cloud database (Firebase) to allow you to maintain your digital collection history across devices. We do not use your personal photos to train our AI models, nor do we sell or share your images with unauthorized third parties.

3. App Tracking Transparency (ATT) for iOS Users

In compliance with Apple's App Tracking Transparency framework (applicable to iOS 14.5 and later), we will ask for your explicit permission before collecting data that is used to track you across apps and websites owned by other companies for targeted advertising or advertising measurement purposes.

• If you grant permission: We and our third-party advertising partners (such as Meta via the Facebook SDK) may use your device's Advertising Identifier (IDFA) to provide personalized advertisements and measure campaign effectiveness.
• If you decline permission: We will not access your IDFA for tracking purposes. You will still see advertisements, but they will be less relevant to your interests.
• Managing your preferences: You can change your tracking preferences at any time by going to your iOS device Settings > Privacy & Security > Tracking, and toggling the switch for CoinWorth.

4. Technical and Administrative Security Measures

To protect your personal data, CoinWorth takes the following security measures:

• a) Equip all systems with antivirus protection;
• b) Deploy firewall protection;
• c) Provide secure VPN access;
• d) Encrypt sensitive data;
• e) Conduct regular security audits;
• f) Enable two-factor authentication (2FA);
• g) Provide regular security training for employees.

5. Rights of Data Subjects

You have the following rights:

• a) Know whether your personal data is being processed;
• b) Request information about your processed data;
• c) Understand the purpose of data processing;
• d) Know to whom your data has been transferred;
• e) Request correction of incomplete or inaccurate personal data;
• f) Request deletion or anonymization of your personal data;
• g) Object to automated decisions (decisions made based on automated processing);
• h) Claim compensation for damages caused by illegal data processing.

6. Data Transfer

Your personal data may be transferred to the following parties:

• a) Cloud service providers (e.g., Google Cloud/Firebase);
• b) Analytics and advertising service providers (e.g., Meta/Facebook);
• c) Payment processors (e.g., Apple for in-app purchases);
• d) Authorized public authorities when legally required.

7. Cookies and Push Notifications

7.1 Cookies
Cookies are small text files stored on your computer or mobile device’s browser or hard drive when you visit a webpage or app. They improve website efficiency, enable personalized content, and provide a faster, more tailored browsing experience. Cookies only contain historical data of your internet activity and do not collect any personal data or files stored on your device.

7.2 Push Notifications
CoinWorth may occasionally send you notifications about app updates or our services. You can always adjust the settings on your device to stop receiving these messages and notifications.

8. Data Retention Period

Your personal data will be stored for the period specified by applicable laws, the reasonable period needed to fulfill the processing purpose, or within the statutory limitation period.

If other laws require it, or if you provide additional consent, CoinWorth may continue to store your personal data even after the original purpose is achieved. If you authorize CoinWorth to extend the retention period of your personal data, such data will be immediately deleted, destroyed, or anonymized when the period expires or the processing purpose no longer exists.

Contact Information

If you have any questions about this Privacy Policy, please contact us at: kuma@oneboom.vip