FreqLens Privacy Policy

1. Application Identification & Scope

This Privacy Policy applies to the mobile and desktop software applications distributed under the name FreqLens (including Android application ID com.gone.freqlens on the Google Play Store, iOS builds currently under submission process, macOS applications, and associated landing pages hosted at https://freq-lens.web.app/).

By installing, accessing, or using the FreqLens application, you acknowledge and agree to the data handling practices outlined in this policy. If you do not agree with this policy, please do not install or use the application.

2. Information We Do NOT Collect

FreqLens is engineered with strict privacy principles. We explicitly do NOT collect, harvest, or monetize:

• Personal Identifiable Information (PII): We do not collect your real name, physical address, phone number, government ID, or social media accounts. (You may optionally provide an email address solely when submitting user feedback or support requests if you wish to receive a direct developer reply).
• Financial Information: We do not collect bank account numbers, credit card numbers, payment details, or cryptocurrency wallet seed phrases/private keys.
• Exchange Credentials: We do not collect or store exchange API keys, exchange secret keys, or exchange passphrases. (Your exchange API keys remain securely inside your self-hosted Freqtrade config.json file and are never sent to FreqLens).
• Biometric Data: We do not collect or process fingerprint, facial recognition, or iris scan data.
• Location Data: We do not collect or track your GPS coordinates or device coarse/fine geolocation.

3. Information Processed Locally & Collected for Application Features

To enable bot management, app performance, diagnostic stability, and community features, the application processes and collects the following parameters:

• Bot Server Endpoints & Credentials (Local Only): The server hostname, IP address, port, and authentication tokens (JWT / bot passwords) entered by you are encrypted and stored strictly locally on your device in hardware-backed storage.
• Anonymous User ID & Session (Account Maintenance): An anonymous user identifier (via Firebase Anonymous Authentication) is generated to maintain session continuity, manage application state, and enable app features (such as attaching support tickets or community participation).
• Feedback & Anonymous Diagnostics (App Operations): Cloud Firestore is utilized for processing user feedback, receiving anonymous diagnostics, and managing community features. Optional strategy performance metrics can be enabled or disabled at any time in Settings.
• Anonymous Telemetry & Diagnostics (Performance & Stability): Anonymous client operational logs (connection state, latency, and sanitized app events) are collected solely for application stability, performance monitoring, and troubleshooting analysis.
• Optional Feedback & Contact Email: If you voluntarily submit feedback, error logs, or feature requests via the in-app support screen, your optional contact email and message are collected solely to respond to your support request.

4. Google Play Data Safety Disclosures & Data Types

In accordance with the Google Play User Data Policy and the Google Play Data Safety section requirements, the table below provides an exhaustive mapping of data handling within FreqLens:

Data Category (Google Play)	Collected by FreqLens?	Shared with Third Parties?	Processing & Storage Mechanism
Personal Info (Contact Email)	OPTIONAL	NO	Collected only if voluntarily entered by the user in Feedback/Support for direct developer responses.
Personal Info (Name, Phone, Address, Government ID)	NO	NO	Not collected or processed.
Financial Info (Credit Card, Bank Account, Exchange Keys)	NO	NO	Not collected. Exchange credentials remain on user's self-hosted server.
Authentication & Credentials (Bot Password / JWT)	LOCAL ONLY	NO	Stored strictly in local hardware-backed secure storage (Android Keystore / Apple Keychain). Sent only to user's direct bot endpoint.
Location Data (Precise or Coarse)	NO	NO	Not collected or requested.
Device or Other IDs (Anonymous User ID)	ANONYMOUS	NO	Anonymous Firebase Auth identifier used solely for account/session maintenance and application feature continuity.
App Activity & Performance (App Diagnostics & Community)	ANONYMOUS	NO	Collected anonymously for processing user feedback, receiving anonymous diagnostics, and managing community features. Optional strategy performance metrics can be toggled in Settings.
Crash Logs & Diagnostics (Client Telemetry)	ANONYMOUS	NO	Anonymous operational logs and diagnostics collected for application stability and performance analysis.

5. Device Permissions & Justifications

FreqLens requests only the absolute minimum Android permissions necessary for standard functionality:

• android.permission.INTERNET: Required to establish direct HTTP/HTTPS connections from your device to your self-hosted Freqtrade REST API server and communicate with backend services for feedback and support.
• android.permission.ACCESS_NETWORK_STATE: Required to determine whether your device has an active Wi-Fi or cellular connection before initiating API requests, preventing unnecessary timeout delays.
• android.permission.POST_NOTIFICATIONS (Android 13+): Optional permission used strictly to display local on-device alert notifications (e.g. order execution alerts or connection drop warnings) configured by the user. No notification data is transmitted externally.

6. Data Storage, Encryption & Security Standards

FreqLens adheres to institutional-grade security standards to protect your local data:

• Hardware-Backed Encryption: All sensitive credentials (such as bot REST API JWT tokens and passwords) are encrypted using AES-256-GCM cryptography backed by the Android Keystore system (or Apple Keychain on iOS/macOS).
• In-Transit Transport Security: All network communication with your Freqtrade bot is conducted over Transport Layer Security (TLS 1.2 or TLS 1.3 / HTTPS) to protect against eavesdropping or man-in-the-middle (MITM) attacks.
• No Plaintext Storage: At no point are API passwords or secret tokens stored in plaintext files, unencrypted SQLite databases, or world-readable SharedPreferences.

7. Third-Party Services & External Integrations

FreqLens is built as an open client and does not integrate commercial ad networks or third-party data broker SDKs:

• No Advertising SDKs: We do not include Google AdMob, Unity Ads, AppLovin, or any other commercial ad SDKs.
• No Data Brokers: We do not sell or monetize any user data with commercial data brokers or marketing aggregators.
• Google Play Services: Core Android system libraries provided by Google Play may process diagnostic telemetry in accordance with Google's own Privacy Policy if opted-in at the Android operating system level.
• Firebase Infrastructure: We utilize Firebase Authentication for anonymous account/session maintenance, and Cloud Firestore for processing user feedback, receiving anonymous diagnostics, and managing community features.

8. Data Retention & Auto-Purge Policy

In accordance with the Google Play Data Deletion Policy:

• No Personally Identifying User Records: Because FreqLens does not require user registration or maintain personal profile databases, no personal identifying user data is retained on our servers.
• 90-Day Auto-Purge of Inactive Operational Data: Anonymous diagnostic logs and operational records collected for analysis purposes are automatically purged after 90 days of inactivity.
• Complete On-Device Erasure: You can completely and irreversibly erase all locally stored bot profiles, encrypted credentials, and cached data at any time through:
  1. Android System Settings: Navigate to Device Settings ➜ Apps ➜ FreqLens ➜ Storage ➜ Clear Data / Clear Cache.
  2. App Uninstallation: Uninstalling the FreqLens application immediately purges all encrypted sandboxed storage and key pairs from the device.

9. Children's Online Privacy (COPPA & Global Standards)

FreqLens is intended strictly for adult cryptocurrency algorithmic traders and software developers. The application is not directed to children under the age of 13 (or under 16 in the European Economic Area / UK).

We do not knowingly collect, solicit, or maintain personal information from children. If you become aware that a child has provided personal information to us, please contact us immediately so we can take appropriate steps.

10. International User Rights (GDPR & CCPA/CPRA Compliance)

Regardless of your geographical location, FreqLens respects your fundamental digital privacy rights under international privacy frameworks including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA / CPRA), and the UK GDPR:

• Right to Know & Access: Because all data resides solely on your physical device, you maintain immediate, direct access to all stored information at all times.
• Right to Erasure ("Right to be Forgotten"): You have the absolute right to purge all data at any moment via the in-app reset function or app uninstallation.
• Right to Non-Discrimination: FreqLens provides full equal functionality to all users without selling or monetizing user data.
• "Do Not Sell My Personal Information": We do NOT sell, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate personal information to any third party for monetary or other valuable consideration.

11. Policy Amendments & Notification

We may update this Privacy Policy from time to time to maintain compliance with evolving laws, Google Play Developer Policies, or technical app enhancements.

Any revisions will be published on this URL (https://freq-lens.web.app/Privacy-Policy) with an updated "Effective Date" at the top of the page. We encourage users to review this page periodically to remain informed.

12. Contact & Developer Information

If you have any questions, clarifications, compliance inquiries, or suggestions regarding this Privacy Policy or our security practices, please contact the development team through our official communication channels: