# Privacy Policy — Crypto AI Analyzer Elite Pro

*Last updated: August 27, 2026*

This Privacy Policy explains how Crypto AI Analyzer ("the App"), developed by **Rao Developers**, handles your data.

## 1. Account Data
Account creation (email/password, Google Sign-In, and Anonymous guest sessions) is handled by **Firebase Authentication**:
- **Email/password:** your email address and display name.
- **Google Sign-In:** email, display name, and profile photo URL shared by Google (subject to [Google's Privacy Policy](https://policies.google.com/privacy)).
- **Anonymous Guest Auth:** temporary unique identifier used solely to authenticate requests with our backend proxy server.

Firebase manages this account record. It is not shared with market-data providers.

## 2. Data We Collect & Store

### On-Device Only (Room DB & DataStore)
The following data is stored **exclusively on your device** and never uploaded to our servers:
- AI Chat history with Aria assistant (with full user control to copy or delete individual messages or clear all history)
- Cached Coin Market Data (`CoinDao`) for offline functionality
- Custom Price Alert targets and thresholds
- Portfolio tracking entries
- App preferences (Language, Currency, Theme, Notifications)

### Security Data
Biometric lock settings and 2FA (TOTP) secrets are stored using Android's hardware-backed **EncryptedSharedPreferences** (Android Keystore).

### AI Content Reports
If you report an Aria reply, the report is stored on-device (`ChatReportDao`) and can optionally be emailed to us from the report dialog in compliance with GenAI content safety guidelines.

## 3. How We Use Your Data

### AI Insights & Proxy Backend
Your market queries route to our **secure backend proxy server** (`https://crypto-proxy-8ekz.onrender.com/`). The proxy verifies your Firebase ID token (`Authorization: Bearer`) before forwarding requests to AI providers (Groq). An on-device **Embedded Crypto Knowledge Base** retrieves verified technical/whitepaper context locally before query transmission. **No personally identifiable information** (name, email, device ID) is included in AI requests — only your market question and technical context.

API keys are stored exclusively on the proxy server — **never inside the APK**.

### Background Monitoring & Notifications
Android WorkManager runs periodic background price checks to deliver Price Alert, 10%+ 24h market move (`PUMP/DUMP`), breaking news, and RSI signal notifications with custom sound (`alert_sound.mp3`) and vibration. No personal data is involved.

### Market Data & Offline Mode
Live prices are fetched from public APIs (CoinGecko, Binance, etc.) and cached locally. No personal data is attached.

## 4. Third-Party Services

| Service | Purpose |
|---|---|
| Firebase Authentication | Account login & proxy request authorization |
| Groq (via proxy) | AI chat and quantitative insights (`openai/gpt-oss-20b` / `openai/gpt-oss-120b`) |
| CoinGecko / CoinMarketCap | Market prices and metadata |
| Binance / MEXC / KuCoin | Live exchange data |
| DeFi Llama | On-chain TVL data |
| Alternative.me | Fear & Greed index |
| NewsData.io (via proxy) / Cryptocurrency.cv | Crypto news |

Third-party services only receive technical parameters (e.g., coin symbols, chat questions) — never your account identity.

## 5. Data We Do NOT Collect
- ❌ Location data
- ❌ Behavioral analytics or tracking
- ❌ Advertising data
- ❌ Chat history or alerts on any server
- ❌ Private keys or exchange credentials

## 6. Security
- All network traffic uses **HTTPS**
- API keys are stored on a **backend proxy server**, not in the APK
- Requests are secured with **Firebase ID Token authentication**
- Sensitive on-device data uses **Android Keystore** encryption

## 7. Your Rights & Choices
- **Message Deletion:** Delete individual chat messages anytime from the chat bubble or clear entire history via the chat menu.
- **Data Erasure:** Wipe all local data via Settings > Security & Privacy.
- **Account Deletion:** Delete your account permanently via Settings > Delete Account (removes Firebase record and all local data).
- **Data Request:** Email raodevelopers1100@gmail.com

## 8. Contact
**Rao Developers**
raodevelopers1100@gmail.com

*Built with ❤️ by Rao Developers*