Privacy Policy

BullionTally (“the App”) is developed and operated by Lunjevich Decorators Limited, trading as HMS Developments in New Zealand (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, and protect information in connection with your use of the App. We are committed to protecting your privacy and ensuring you have a positive experience.

BullionTally is designed with a privacy-first philosophy. By default:

• We do not collect, transmit, or store any of your personal or financial data on our servers.
• We do not require you to create an account to use the App.
• We do not track your browsing habits, location, or behaviour within the App for advertising purposes.
• We do not sell, rent, or share your data with third parties for marketing.
• All your holdings, portfolio data, and settings are stored locally on your device only.

If you choose to create an account (completely optional), we collect:

• First name (required) and last name (optional) — for personalisation only.
• Email address — for authentication, password recovery, and account-related communications.
• Password — stored securely using industry-standard hashing (never in plain text).
• Portfolio data — synced to our servers only if you have an account, encrypted in transit and at rest.

You may delete your account at any time from Settings, which permanently removes all server-side data.

The App makes the following outbound network calls:

• FRED API (fred.stlouisfed.org) — To retrieve gold and silver spot prices. No personal data is transmitted.
• GoldAPI.io (Pro users only) — To retrieve live precious metals prices. Only the API key (which you provide) is transmitted.
• Frankfurter API (api.frankfurter.dev) — To retrieve currency exchange rates. No personal data is transmitted.
• YouTube RSS feeds — To retrieve community video content. No personal data is transmitted.
• News API — To retrieve precious metals news articles. No personal data is transmitted.
• Google Play / Apple App Store — For in-app purchase validation and subscription management.

The App integrates the following third-party services, each governed by their own privacy policies:

• Google AdMob — Displays advertisements to free users. Google may collect device identifiers and usage data per their Privacy Policy. Ads are completely removed for Pro subscribers.
• Firebase Analytics — Collects anonymised app usage data (screen views, events) to help us improve the App. No personally identifiable information is collected.
• TikTok Business SDK (Android only) — Tracks conversion events (installs, purchases) for advertising attribution. Governed by TikTok’s privacy policy.

• All portfolio data is stored in a local SQLite database on your device.
• Sensitive data (authentication tokens) is stored using platform-secure storage (iOS Keychain / Android Keystore).
• If you create an account, synced data is encrypted in transit (HTTPS/TLS) and at rest on our servers.
• We implement industry-standard security measures to protect any data in our possession.

• Local data: You can delete all local data at any time via Settings → Data Management → Delete All Data.
• Account data: You can delete your account and all server-side data via Settings → Account → Delete Account.
• Email requests: You may request deletion of your account and associated server-side data by emailing [email protected].
• Uninstalling the App removes all locally stored data from your device.

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. Any changes will be reflected in the App and on our distribution platforms. Continued use of the App after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us at: