Privacy Policy

Last updated: April 2026  ·  Effective date: April 2026

This Privacy Policy describes how Marko Radisavljevic ("we", "us", or "our"), the developer of the Aevox mobile application (the "App"), collects, uses, stores, and discloses information about you when you use our App and related services (collectively, the "Services"). By using the Services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect the following categories of information:

• Account Information: When you register, we collect your email address and password. Your password is stored in encrypted form — we never store plaintext passwords.
• Authentication Tokens: We issue and store encrypted session tokens to maintain your authenticated session securely.
• Wallet Addresses: Blockchain wallet addresses you choose to monitor through the App (public addresses only — no private keys, seed phrases, or wallet credentials are ever collected or stored).
• Social Authentication Data: If you choose to sign in with Google, we receive your Google account email address and display name from Google's authentication service. We do not receive or store your Google password or any other Google account data.
• Push Notification Identifiers: A device push token used solely to deliver alerts to your device.
• Transaction Alert Data: On-chain transaction data associated with wallets you monitor, retrieved from publicly available blockchain sources.
• Subscription Data: Your subscription tier and status. We do not store or process payment card details — all billing is handled by Apple App Store or Google Play.
• Usage and Preference Data: In-app settings such as notification preferences, alert size filters, and theme preferences stored locally on your device.
• Device Information: Basic device identifiers and operating system information collected for diagnostic and security purposes.

2. Information We Do NOT Collect

We explicitly do not collect:

• Private keys, seed phrases, or any wallet credentials
• Your own wallet balances or personal transaction history
• Location data
• Contacts or address book data
• Payment card details (all billing is handled by Apple or Google)
• Any data beyond what is listed in Section 1

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Services
• To authenticate your identity and maintain the security of your account
• To deliver real-time push notifications about blockchain transactions involving wallets you monitor
• To compute confidence scores and win rates based on publicly available blockchain data (informational metrics only — not financial predictions)
• To enforce subscription tier limits and features
• To send transactional emails (account verification, password reset) — no marketing emails without explicit consent
• To detect and prevent fraud, abuse, and security incidents
• To comply with applicable legal obligations
• To respond to your support requests and communications

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Performance of a contract: Processing necessary to provide the Services you have requested
• Legitimate interests: Security monitoring, fraud prevention, and service improvement
• Consent: Where you have explicitly opted in, such as enabling push notifications
• Legal obligation: Where processing is required by applicable law

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• Service Providers: We use trusted third-party service providers to operate our Services, including providers for cloud infrastructure, database hosting, push notification delivery, blockchain data, and payment processing. These providers process data only as necessary to perform services on our behalf and are bound by appropriate data processing agreements.
• Legal Requirements: We may disclose information if required to do so by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified via email and/or a prominent notice within the App.
• Protection of Rights: We may disclose information where we believe it is necessary to protect the rights, property, or safety of our users or others.

6. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by applicable law or for legitimate business purposes such as fraud prevention.

Alert history is retained based on your subscription tier:

• Free tier: 7 days
• Premium: 30 days
• Premium+: 90 days

Push notification tokens are retained while your account is active and deleted upon account deletion.

7. Data Security

We implement industry-standard security measures to protect your personal data, including:

• All passwords and sensitive credentials are stored in encrypted form — plaintext is never stored
• All data transmitted between your device and our servers is encrypted in transit
• Session tokens are short-lived and rotated regularly
• Database access is restricted to authenticated backend services only

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and, where required, notify the relevant supervisory authority within 72 hours of becoming aware of the breach.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request that we restrict processing of your data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent, withdraw it at any time
• Lodge a Complaint: If you are located in the EEA, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable law

To exercise any of these rights, please contact us at privacy@aevox.xyz. We will respond within 30 days.

9. Age Requirement

The Services are intended for users aged 13 and over. We do not knowingly collect personal data from individuals under 13. If a parent or guardian believes their minor child has accessed the App and created an account, they should contact us immediately at privacy@aevox.xyz and we will promptly terminate the account and delete the associated data.

10. Third-Party Services

The App relies on trusted third-party service providers for its operation, including providers for cloud hosting, database infrastructure, push notification delivery, blockchain data access, subscription and payment management, and optional social authentication. Each provider operates under their own privacy policy and is bound by data processing obligations. We do not share your personal data with any third party beyond what is strictly necessary to operate the Services.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the European Union and the United States, where our service providers operate. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification through the App or via email. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Privacy requests: privacy@aevox.xyz
• General: aevox@aevox.xyz
• Business: Marko Radisavljevic