GOLDX Privacy Policy
Last updated: 1 August 2026
GOLDX ("we", "us", "our") provides trading signals, market analysis and related tools
through the GOLDX mobile application (the "App"). This policy explains what information we
collect, why we collect it, who we share it with, and the choices you have.
By using the App you agree to this policy. If you do not agree, please do not use the App.
---
1. Information We Collect
1.1 Information you give us
-Account details — your name, email address, phone number, address and country when
you register or update your profile.
-Profile photo — if you choose to upload one. Providing a photo is optional.
-WhatsApp number— if you choose to receive signals over WhatsApp. This is optional
and used only to deliver signals.
- Trading account details— where you connect a MetaTrader account, we collect the
account number, broker name and server name. We never ask for, and never collect, your
trading account password or trading credentials.
-Support communications— messages you send us.
1.2 Information collected automatically
-Usage and interaction data— which screens you open and how long you spend on them,
which trading signals you view, which subscription plans you view and select, and whether
you complete or abandon a purchase.
-Purchase history— the subscription plan purchased, its price and currency, and the
outcome of purchase attempts. Payment card details are handled entirely by Google Play
and are never received or stored by us.
-Device and technical data— device model, operating system version, app version, and
diagnostic information such as crash reports and network performance.
-Advertising identifier— your device's advertising ID, used to serve and measure the
advertisements shown in the App.
-A hashed device identifier— a one-way encrypted value derived from your device's
Android ID. We do not collect or store your raw device identifier, IMEI or serial number.
-Push notification token— so we can deliver notifications you have enabled.
-Approximate location— derived from your country as entered in your profile. We do
not collect precise or GPS location.
1.3 What we never collect
We do not collect your trading account passwords, payment card numbers, biometric data,
contacts, calendar, messages, call logs, files or precise location.
---
2. How We Use Your Information
| Purpose | What we use |
Providing the service- Account details, trading account details, purchase history — to deliver signals, unlock subscription features and operate the App
Account management-Account details, purchase history — to manage your subscription, entitlements and renewals
Payments-Purchase history — processed through Google Play Billing
Improving the App-Usage data, diagnostics, crash reports
Marketing and personalised offers-Usage and interaction data, purchase history — to understand which features and plans interest you and to select which offers, discounts and content to show you |
Advertising- Advertising identifier — to serve advertisements and measure their performance
Preventing abuse of the free trial- Hashed device identifier — to determine whether a device has already used its free trial |
Security and fraud prevention- Device and technical data, purchase history
Communications- Email address, push token — for service messages, and for promotional messages where you have not opted out |
### 2.1 Legal bases (users in the EEA and UK)
- **Performance of a contract** — providing the service, managing your account and
processing payments.
- **Legitimate interests** — improving the App, securing it, and preventing abuse of the
free trial. We use a hashed device identifier for this purpose on the basis of our
legitimate interest in preventing repeated claiming of a free trial by the same device.
- **Consent** — personalised advertising and marketing analytics. You may withdraw consent
at any time; see section 6.
- **Legal obligation** — where we must retain records or respond to lawful requests.
---
## 3. Data Sharing and Disclosure
We do not sell your personal information.
We share information with:
- **Google** — Firebase Analytics and Crashlytics (usage and diagnostic data), Firebase
Cloud Messaging (push notifications), Google Play Billing (purchases) and Google AdMob
(advertising). AdMob and its advertising partners receive your advertising identifier.
Where required by law, advertising is personalised only with your consent.
- **Meta Platforms** — the App includes the Facebook SDK, which records app events such as
app opens for measurement purposes.
- **Our own servers** — usage and interaction data is also transmitted to and stored on
servers we operate, so that we can analyse it and select offers for you.
- **Service providers** — hosting, communications and support providers acting on our
instructions.
- **Legal and safety** — where required by law, or to protect our rights, users or the
security of the service.
- **Business transfers** — if we are involved in a merger, acquisition or sale of assets,
your information may be transferred as part of that transaction.
---
## 4. Data Retention
| Data | Retained for |
| --- | --- |
| Account information | For as long as your account is active |
| Purchase and transaction records | As required for accounting, tax and legal purposes |
| Usage and interaction (analytics) records 90 days |
| Device trial records | 180 days |
| Crash and diagnostic reports | As retained by Google Firebase under its own policies |
When you delete your account, we delete or anonymise your personal information except where
we are required to keep it for legal, accounting or fraud-prevention purposes.
---
## 5. Security of Your Information
We protect your information with encryption in transit, encrypted storage of authentication
data on your device, and access controls on our servers. Device identifiers used for
trial-abuse prevention are stored only in one-way encrypted (hashed) form.
No method of transmission or storage is completely secure, and we cannot guarantee absolute
security.
---
## 6. Your Rights and Choices
### 6.1 Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or
object to our use of your personal information, to withdraw consent, to receive a copy of
your data in a portable format, and to complain to your data protection authority.
To exercise these rights, contact us using the details in section 10.
### 6.2 Managing your consent
If you are in the European Economic Area or the United Kingdom, the App asks for your
consent before using your information for personalised advertising and marketing analytics.
You can change your choice at any time from **Settings → Privacy Options** in the App.
Withdrawing consent stops personalised advertising and marketing analytics. It does not
affect your ability to use the App, your subscription, or the delivery of trading signals.
### 6.3 Other choices
- **Advertising identifier** — you can reset it or opt out of personalised advertising in
your device settings, under Google → Ads.
- **Push notifications** — you can turn these off in your device settings at any time.
- **Marketing emails** — you can unsubscribe using the link in any marketing email.
- **Account deletion** — you can request deletion of your account and associated data by
contacting us.
---
## 7. Children's Privacy
The App is intended for users aged 18 and over. We do not knowingly collect personal
information from anyone under 18. If you believe a child has provided us with personal
information, contact us and we will delete it.
---
## 8. Changes to This Privacy Policy
We may update this policy from time to time. We will change the "Last updated" date above
and, where the changes are significant, notify you in the App or by email. Continued use of
the App after a change means you accept the updated policy.
---
## 9. International Transfers
Your information may be processed and stored in countries other than your own, including by
the service providers listed in section 3. Where information is transferred out of the EEA
or the UK, we rely on appropriate safeguards such as the European Commission's standard
contractual clauses.
---
## 10. Contact Us
If you have questions about this policy or wish to exercise your rights, contact us at:
**[COMPANY LEGAL NAME]**
**[POSTAL ADDRESS]**
Email: **[CONTACT EMAIL]**
---
## Important — read before publishing
Three placeholders must be filled in before this goes live:
1. **4 — analytics retention `[NUMBER]` days.** Your backend developer said **180 days**,
but the analytics API returns `retention_days: 90`. These disagree, and the number here
is a legal statement that must also match your Play Data Safety declaration and what the
backend actually deletes. **Settle it first, then write one number in all three places.**
2. *10 — company name, address and contact email.** Copy these from your existing policy.
3. **Effective date** at the top if you want it to differ from the publish date.
This draft describes what the app does today, taken from the source code — including the
advertising, device identifier and marketing analytics that the previous version of the
policy did not mention. It is not legal advice. GOLDX is a financial product with users in
the EEA, so have a qualified reviewer check the wording, particularly the legitimate
interests claim in 2.1, before you publish.