Mefico Studio • Security & Privacy

Privacy Policy

Effective Date: September 18, 2026 • Version 1.0 (Production Release)

Privacy Summary: M-FX operates on a strict principle of data minimization. We do not require accounts, logins, or personal identities. M-FX does not intentionally persist raw GPS coordinates in its application database or local app storage; location coordinates are processed solely for immediate country and currency resolution. Advertising is provided through the Yandex Mobile Ads SDK and related AppMetrica components. On iOS, M-FX implements Apple's App Tracking Transparency (ATT) framework; tracking and advertising identifiers are accessed solely when explicit user authorization is granted. If tracking is denied, advertising identifier tracking is explicitly disabled in SDK configuration, and the application remains fully usable. Location tracking within the advertising SDK is permanently disabled. Your calculations, preferences, and portfolio holdings are stored solely on your device.

1Application Overview & Developer Identity

This Privacy Policy applies to the foreign exchange tracking and conversion platform provided under the public name Mefico FX: Foreign Exchange (short brand: M-FX), available via web (https://mefico-fx.com) and mobile applications. The software is developed and published by Mefico Studio("we", "us", or "our").

Informational Utility Only: M-FX is strictly a foreign-exchange informational and conversion utility. M-FX is not a brokerage, does not execute currency trades, and maintains no custody of customer funds or deposits.

2Location Data & Region Detection

To provide an effortless experience, M-FX includes an optional regional detection feature that identifies your country to automatically pre-select your national currency and relevant localized interface:

Optional Precise GPS: When you explicitly tap or authorize location detection, your device requests precise geographic coordinates (latitude and longitude).
Encrypted HTTPS Transmission: Coordinates are transmitted securely over TLS/HTTPS via a POST request directly to our backend endpoint (/api/v1/location.php).
No Raw Coordinate Persistence: M-FX does not intentionally persist raw GPS coordinates in its application database or local app storage. Location coordinates are processed for region detection: coordinates received via secure HTTPS POST are evaluated in-memory for country and local currency resolution, after which the coordinate payload is discarded and not retained after request completion.
IP Geolocation Fallback: If you deny or revoke location permissions, M-FX does not prompt you repeatedly. The service instead relies on standard coarse IP-level geographic headers (e.g. Cloudflare IPCountry) or default regional settings (USD/EUR).
Permission Revocation: You can revoke location access at any time through your device operating system settings (iOS: Settings > Privacy & Security > Location Services > M-FX; Android: Settings > Apps > M-FX > Permissions > Location).

M-FX Server Location Processing

Optional GPS coordinates are transmitted exclusively to M-FX's own secure server (https://mefico-fx.com/api/v1/location.php) for immediate country and local currency resolution. Raw coordinates are evaluated strictly in-memory during the active request and are not intentionally persisted in databases, filesystem server logs, or retained following request completion.

Yandex Mobile Ads Location Isolation

M-FX explicitly disables location tracking in the third-party advertising SDK via YandexAds.setLocationTracking(false). No GPS coordinates are passed to ad targeting objects (AdTargeting.location calls: 0). M-FX does not intentionally provide the precise GPS coordinates used for region detection to Yandex Mobile Ads. Yandex SDK location tracking is disabled.

3IP Address Processing

When communicating with M-FX servers, your network IP address is processed automatically by network infrastructure for the following limited purposes:

Resolving coarse country location when GPS is not granted.
Edge rate limiting and DDoS protection to safeguard server stability.
Standard operational server logs that are routinely rotated and purged.

We do not link IP addresses to personal user identities, nor do we construct cross-site behavioral tracking profiles.

4Local Application & Browser Storage (Client-Side Persistence)

M-FX is architected so that personal preferences, watchlists, and portfolio calculations remain strictly on your client device. Storage is handled separately according to the platform:

Flutter Mobile Application Storage

On mobile devices (iOS / Android), user preferences, selected base currencies, theme, and locally tracked portfolio entries are persisted securely within isolated on-device application storage (utilizing application sandbox local storage and app preferences / SharedPreferences where applicable). Mobile storage is sandboxed to the app by the operating system.

Web Application Storage

When accessing M-FX via a web browser, user preferences, language selection, and local portfolio entries are stored exclusively within the browser's standard client-side localStorage.

Selected Currencies

Your active watch-list of fiat currencies and base conversion unit.

Portfolio Records

User-entered holding quantities and custom valuations.

Interface Preferences

Theme preference (Dark / Light) and selected language locale.

Cached Rates

Recent market snapshots for offline viewing.

✓ Client-Only Processing: Your portfolio balances, custom asset quantities, and financial entries are NEVER transmitted to Mefico Studio servers or any external third party.

5Advertising & Third-Party SDK Disclosures

To support continuous server infrastructure, exchange rate feeds, and ongoing software development without charging users subscription fees, M-FX integrates the Yandex Mobile Ads SDK (v8.4.0) in its production mobile applications:

Integrated Ad Formats

Rewarded Advertisements: Fully optional, user-initiated video ads displayed only when you choose to watch an ad to extend daily reference lookup quotas.
App Open Advertisements: Displayed periodically upon returning to the application only when resuming after more than 30 seconds of background inactivity. Ads are strictly suppressed during initial onboarding, first launch, and system permission workflows.

Third-Party Data Processing Mechanics

Third-party advertising SDKs (Yandex Mobile Ads and associated native AppMetrica components) may process technical device information, approximate network indicators, and ad interaction metrics solely for essential advertising functions: ad rendering, delivery verification, frequency capping, anti-fraud protection, network diagnostics, and SDK operational integrity, subject to platform permissions and active SDK configuration.

iOS Platform & App Tracking Transparency (ATT / IDFA)

On iOS, M-FX integrates Apple's App Tracking Transparency (ATT) framework and declares NSUserTrackingUsageDescription. M-FX presents a system prompt requesting permission to track ad performance. If you choose "Allow Tracking", the Yandex Mobile Ads SDK and associated AppMetrica components may use your device identifier (IDFA) for advertising measurement and attribution. If you choose "Ask App not to Track" or have tracking restricted, M-FX explicitly configures the SDK to disable advertising identifier tracking (isAdvertisingIdentifierTrackingEnabled = false). Denying tracking does not block or limit any application feature; M-FX remains fully functional. Furthermore, Yandex SDK location tracking remains permanently disabled in all modes (setLocationTracking(false)), and M-FX's optional GPS country and local currency detection operates as a completely separate feature that never passes location data to advertising networks.

Android Platform & Advertising ID (AD_ID)

On Android, the compiled release manifest includes the standard Google Play Services permission com.google.android.gms.permission.AD_ID inherited transitively from Yandex Mobile Ads and AppMetrica dependencies. M-FX application code does not directly request, read, or persist the Android Advertising ID (AAID). Yandex Mobile Ads and related SDK components may access the Android Advertising ID, where available under platform rules, for purposes such as ad delivery, measurement, frequency control, fraud prevention, analytics, and related SDK functionality. M-FX does not intentionally associate the Android Advertising ID with an M-FX user account or profile.

EEA & Switzerland Advertising Privacy Controls

For users located in the European Economic Area (EEA) and Switzerland, M-FX provides an in-app advertising privacy management sheet. Your consent selection is stored locally on your device and can be reviewed or modified at any time via Settings > Ad Privacy .

M-FX does not sell personal data to data brokers or cross-app tracking networks.

6In-App Purchases & Subscriptions

In the current version (v1.0), M-FX contains no active in-app purchases (IAP), recurring subscriptions, or paid feature paywalls. All supported exchange rate monitoring, conversion calculators, and portfolio tools are provided to all users equally and free of charge.

7Third-Party Data & Infrastructure Providers

The service relies on trusted third-party service providers to deliver reliable functionality:

Foreign Exchange Rates: Mid-market exchange rates, updated every minute, are sourced via FastForex.io under encrypted API protocols.
Geographic Mapping: Ephemeral reverse geocoding may consult OpenStreetMap Nominatim or IP geolocation lookups (ip-api.com, ipwho.is) solely for country matching.
Typography & Assets: Google Fonts provides standard static typography files.

8Data Retention & User Controls

Because M-FX does not retain personal information on server databases, you maintain direct, total control over your data:

Clearing Local Data: You can wipe all stored portfolio data and saved currency settings at any time by clearing your browser cache (Web) or resetting app storage / uninstalling the mobile application (Flutter mobile).
Location Revocation: You can withdraw location access in your device settings without losing access to conversion capabilities.

9Contact & Privacy Inquiries

If you have any questions regarding this Privacy Policy, our data minimization principles, or application functionality, please contact our team:

Developer: Mefico Studio

Brand: Mefico FX: Foreign Exchange (M-FX)

Support & Privacy Email:support@mefico-fx.com

Support Center: https://mefico-fx.com/support

Review Terms of Use Support & Help Center