# AssetOrbit Privacy Policy

Effective Date: 2026-02-17

luceForge.studio (the "Operator") complies with applicable privacy laws and regulations and establishes this Privacy Policy to protect users' personal information.

## 1. Personal Information We Process
The Operator may process the following information in connection with providing the Service.

1. Information entered directly by users (stored locally)
- Service data such as asset names, amounts, categories, memos, dates, target amounts, monthly savings amounts, and target dates
- App settings such as language and display options

2. Security setting information (stored securely on device)
- PIN code, security lock enabled status, PIN failure count, and lock timing information
- This information is stored in device secure storage (Flutter Secure Storage).

3. Permission-related information
- Photo (gallery) permission: requested only when the user uses the screenshot save feature.

4. Automatically collected information (external analytics tool)
- Usage analytics data via Firebase Analytics
- Information necessary for analytics, such as screen views, feature usage events, and device/app identifiers

5. Network information when using external APIs
- When calling the Frankfurter API for exchange rates, network connection information such as IP address may be processed by the API provider.

## 2. Purposes of Processing
The Operator processes personal information for the following purposes:
1. Providing asset management functions and data display
2. Providing security lock functions (PIN/biometric authentication)
3. Improving app quality and usability (Firebase Analytics)
4. Providing currency conversion features through exchange rate information

## 3. Retention and Processing Period
1. Service data entered by users is generally stored on the user's device until deleted by the user or until the app is removed.
2. Security setting information may be retained until the user disables the security feature or deletes the app.
3. Retention and processing periods for Firebase Analytics data follow Google Firebase policies.

## 4. Third-Party Provision and Outsourcing
The Operator does not sell personal information to third parties. However, the following external services are used to provide the Service.

1. Firebase Analytics (Google)
- Purpose: app usage analytics and feature improvement
- Data: event data, device/app identifiers, and related analytics data
- Policy: <https://firebase.google.com/support/privacy>

2. Frankfurter API
- Purpose: exchange rate lookup
- Data: network access data at request time
- Website: <https://www.frankfurter.dev/>

## 5. Cross-Border Transfer
When using Firebase Analytics, personal information may be transferred to and processed on servers outside the user's country, in accordance with Google policies.

## 6. Data Deletion Procedures and Methods
1. Locally stored data on the user's device may be deleted through in-app deletion features or by uninstalling the app.
2. If the Operator separately retains personal information, it will be deleted without delay once the processing purpose is achieved or the retention period expires.

## 7. User Rights and How to Exercise Them
Users may request access, correction, deletion, or suspension of processing of their personal information. Requests can be made through in-app features or by contacting the Operator.

## 8. Security Measures
The Operator applies the following measures:
1. Storing sensitive security information such as PIN in device secure storage
2. Requesting minimum permissions only when needed (photo permission at feature use time)
3. Applying access control and data minimization principles

## 9. Children's Privacy
The Service is not intended for children under the age of 14. If a legal guardian has questions regarding a child's personal information, please contact the Operator below.

## 10. Changes to This Privacy Policy
This Privacy Policy may be revised due to legal or service changes, and updates will be announced via the app or related documents.

## 11. Contact
- Operator: luceForge.studio
- Email: [email protected]