Gold Rate privacy policy

Effective 24 October 2026

This policy explains what the Gold Rate app (on Google Play as "Gold Rate: Gold Price Live") does with information. The app is made by Kelmora Labs, the developer name of Bharatbhai Mafatlal Soni, India ("we", "us"). Questions: kelmoralabs@gmail.com.

In short

• No login. We never ask for your name, phone number or email.
• The app uses your location only on your phone, to find your city, and never sends it to us; if you allow location, the ad companies in the app may also read your approximate location (see Ads). The city you choose (in India) or your country (elsewhere) is kept with your price alerts and morning rate, and is part of their notification text.
• Your Gold Locker items and photos are never sent to us.
• Price alerts are kept on our server with an anonymous code, and the morning rate's text without any link to your phone, so they can ring when the app is closed. You can delete them in the app (Settings › Privacy policy › Delete my data).
• We count how the app is used and receive crash reports, to fix problems. These never include your name or contact details. You can turn the counting off in Settings.
• Free users see ads from our ad partners (Appodeal and Google AdMob, and the ad companies they work with), which may use your phone's advertising ID. Where the law asks for it, you choose first.
• Purchases go through Google Play. We never see your card or payment details.
• We do not sell your information.

What stays on your phone

• Location. Only when you tap "Use my location", the app reads your approximate location (never the precise one), finds the nearest city on its list and forgets the location. The location itself is never sent to us or anyone else. The city you choose (in India) or your country (elsewhere) is kept with your price alerts and morning rate, and is part of their notification text (below).
• Country. The app guesses your country from the SIM card and the phone's time zone, on the phone. No permission is needed. The country is sent only with usage counts and feedback (below) and, if you use them, with your morning rate and alerts.
• Gold Locker. Your items, bills and photos are never sent to us: they are kept on your phone, behind your phone's lock if you choose. If your phone's own Google backup is on, Android also keeps them in that backup in your Google account. A Gold Rate backup file is made only when you ask; it is locked with your password and saved wherever you choose.
• Settings (language, theme, city, units and so on), the home screen widget and "Hear the rate" (your phone's own voice) work on the phone.
• Camera and photos are used only when you add a photo to the Gold Locker.

What leaves your phone, and why

Rates. The app downloads the latest rates, charts and news lists as public files from our servers (Supabase and Cloudflare). Like any website, these servers see your phone's internet address when it asks; we do not use it to identify you.

Price alerts, the morning rate and smart alerts. When you set your first price alert or smart alert, the app makes a random code and key for your phone (no account, no login) and keeps them on the phone. Our server (Supabase) keeps the code, a fingerprint of the key (never the key itself) and:

• your phone's notification address (a push token from Expo and Google Firebase Cloud Messaging, which deliver the notifications), your time zone and your smart alert choices;
• each alert: the metal, purity, weight, the city (India) or money (other countries), the target price, up or down, and its words in your language.

For the morning rate, the app sends its text (the time, prices and words, which name your city or country, and the time zone) to our server, which keeps it without any link to your phone. Your phone then joins the Google Firebase topic that delivers that text; everyone with the same text shares it. The app also joins Firebase topics for our announcements (everyone, your app language, and India or other countries).

Only your phone can read or change its alerts, and our server uses them only to send your notifications. Deleting an alert in the app deletes it from our server at once, and "Delete my data" deletes them all with your phone's record. If the app is removed, our server deletes the phone's record 30 days after the notification service reports it, or after 400 days without use.

Usage counts (Google Firebase Analytics). The app counts things like which screens are opened and which features are used, with an app-install code from Firebase, the phone's model, Android version, language, and the country and general area (such as the city) that Google works out from the internet address; the address itself is not kept. It does not collect the advertising ID, and never your name or contact details. We use it only to understand and improve the app. In the European Economic Area, the UK and Switzerland nothing is counted unless you allow it. Everywhere, you can turn it off at any time in Settings › Privacy policy › Usage counts.

Crash reports and feedback (Sentry). When the app crashes, a report is sent with the error, the app version, the phone's model and Android version. If you send "Feedback & bug report", your message is sent with the app's language, country, theme and version. Please don't write personal details in it. We use these only to fix problems.

Ads (Appodeal and Google AdMob). Free users see ads. They come from Appodeal, which offers each ad to the ad companies it works with (among them AppLovin, BidMachine, InMobi, Liftoff, Mintegral and Unity Ads, and Meta Audience Network and Google AdMob when we turn them on), and from Google AdMob. To show and measure ads, to prevent fraud, and to personalise ads where you allow it, these companies may use your phone's advertising ID, its internet address (which tells a general area, such as the city), the phone's model, language and settings, how ads are seen and tapped, and crash and performance information. If you let the app use your location (to find your city), their code inside the app may also read your phone's approximate location; the app never asks for your precise location. In the European Economic Area, the UK and Switzerland, Google's consent form asks you first, and your answer goes to every ad company; you can change it any time in Settings › Privacy choices. You can also reset or delete your advertising ID in your phone's settings (Google › Ads). People who buy "Remove ads" or Premium see no ads, except a rewarded ad they choose to watch on a Premium lock. See Appodeal's privacy policy, with its list of partners, and how Google uses information from apps that use its services.

Purchases (Google Play and RevenueCat). Premium and "Remove ads" are bought through Google Play. RevenueCat checks the purchase for us with an anonymous code, so the app knows what you bought and can restore it. We never see your card, bank or payment details.

News. A news story opens the publisher's own page inside the app, and the story pictures come from the publishers. The publisher sees that visit like any website visit, under its own privacy policy.

Google Play. The app uses Google Play's own boxes to ask you to rate the app and to install important updates. Google handles them under its privacy policy.

Services we use

Each follows its own privacy policy: Supabase · Cloudflare · Expo · Google (Firebase, AdMob, Google Play) · Appodeal · Sentry · RevenueCat. Their servers may be outside your country, including in the United States.

Legal basis (European Economic Area and UK)

Alerts and the morning rate: to provide what you asked for. Crash reports and security: our legitimate interest in a working, safe app. Usage counts and personalised ads: your consent, which you can take back any time.

How long we keep it

• Alerts and your phone's record: until you delete them in the app, or 30 days after the notification service reports the app removed, or after 400 days without use.
• Morning rate texts: until no phone has used them for 400 days.
• Usage counts and crash reports: for a limited time set by Google and Sentry, then deleted automatically.
• Purchase records: as long as needed to restore your purchases and as the law requires.

Your choices and rights

• Delete everything our server keeps about your phone in the app: Settings › Privacy policy › Delete my data (or one alert in Tools › Price alerts). Turn off notifications in Settings › Notifications. All the ways to delete your data: Delete your data.
• Turn usage counts off at any time: Settings › Privacy policy › Usage counts.
• Change your ad choices (Settings › Privacy choices, where shown) or reset your advertising ID.
• Location, camera and photos are asked for only when you use them; you can say no, or turn them off in your phone's settings.
• Removing the app deletes everything it keeps on your phone.
• Depending on where you live, you may ask to see, correct or delete information about you, or object to its use. Write to kelmoralabs@gmail.com; we reply within 30 days. Because we don't know who you are, we may ask for details that help us find your phone's anonymous data.
• If you live in the European Economic Area, the UK or Switzerland, you can also complain to your local data protection authority.

India

For users in India (Digital Personal Data Protection Act, 2023):

• What we use and why: your phone's alert code, notification address and price alerts, to send your notifications; usage counts (Google Firebase), to understand and improve the app; crash reports (Sentry), to fix problems; the advertising ID (our ad partners: Appodeal and the ad companies it works with, and Google AdMob), to show and measure ads.
• Saying no: turn usage counts off in Settings › Privacy policy › Usage counts; reset or delete your advertising ID in your phone's settings (Google › Ads); turn off any notification in Settings › Notifications.
• Deleting: Settings › Privacy policy › Delete my data, or the other ways on Delete your data.
• Questions and complaints: write to kelmoralabs@gmail.com; we reply within 30 days. You can then complain to the Data Protection Board of India.

Children

Gold Rate is made for adults. It is not directed at children, and we do not knowingly collect information from children.

Security

Everything the app sends travels encrypted (HTTPS). On our server, each phone can reach only its own alerts.

Changes

If this policy changes, we update this page and its date.

Contact

Kelmora Labs · kelmoralabs@gmail.com