Quantis Quantis
Open Quantis
Features Download API
← Back to legal

App privacy policy

Updated October 27, 2026

This policy applies to the Quantis Android app and the Quantis web app (together, the “app”). You can see the rates and use the converter without an account. Some tools (Payment Methods, Cash Recording, Split Bill and the advanced calculators) open with a free account. Access to the Quantis API and Quantis Center is covered by the API privacy policy. We apply the EU General Data Protection Regulation (GDPR) to all users.

Controller

Vzlaio digital LLC is the controller. Legal entity, address and contact details are published in the imprint. Privacy contact: privacy@vzla.io.

Data we process

  • Using the app: the exchange rates are downloaded to your device and kept there, so the app keeps working when the connection drops. Without sign-up, the Android app creates an anonymous account with a random identifier, so your settings and alerts work. Requests to our servers carry your IP address, device and operating-system type and app version.
  • Request log: for each request to our servers, your account (user and email), the page or endpoint, method, response status, IP address, user agent, referrer and response time. Copies of this log are stored in Google Cloud Storage.
  • Free account: email address, optional phone number, sign-in data (a code sent by email or a password, stored only as a hash), your app settings, app version and when you last used the app.
  • Payment Methods: the payment details you save, such as name, bank, account number, cédula, mobile number, email, Binance ID, Zelle, PayPal or Wise details. They are stored on our servers so you can use them from your account. They may include details of other people if you save them; you are responsible for having their permission.
  • Cash Recording: the photos you take of banknotes, their serial numbers, amounts, currency, rate, date and your notes. They are stored on our servers.
  • Split Bill: the names and amounts you enter stay in the app while you use it. They are not saved and are not sent to our servers.
  • VeriTrust: the link you check, typed or read from a QR code, is sent to our servers and checked with Google Safe Browsing and VirusTotal. We store the link and the result.
  • Alerts: a push token for your device, its platform and the alert categories you turn on. Alerts are delivered through the Expo push service.
  • Support and ideas: what you write to us, your email address, an optional screenshot, and device details that help us fix the problem (device model, operating system, app version, language, time zone, network type, IP address, battery, memory and storage).
  • Error reports and performance: the error and where it occurred, app version, device and operating-system type, and IP address (Sentry); server performance data (New Relic).

The QR codes you scan for Payment Methods are read by the app on your device.

  • Providing the app, your free account and its tools, and sending the alerts you turn on: performance of a contract (Art. 6(1)(b) GDPR).
  • Checking links with VeriTrust when you ask: performance of a contract (Art. 6(1)(b) GDPR).
  • Answering support requests and ideas: performance of a contract, or our legitimate interest in improving the app (Art. 6(1)(b) and (f) GDPR).
  • Securing the app, preventing abuse, fixing errors and measuring performance: our legitimate interest in operating a secure and reliable app (Art. 6(1)(f) GDPR).

Recipients

Data is disclosed to processors acting on our instructions under data-processing agreements:

  • Hosting and database providers (Heroku, United States).
  • Google Cloud Storage, for copies of the request log.
  • Error-monitoring and performance providers (Sentry, New Relic).
  • Push delivery (Expo), for alerts.
  • Link-check services (Google Safe Browsing, VirusTotal), which receive only the link you check.
  • Email delivery, for sign-in codes and support replies.

The app is free. If you choose to donate, the payment is handled by Stripe under its own privacy policy; we do not receive your card details.

Data may be disclosed to public authorities where required by law.

International transfers

Data is processed in the United States and in other countries where our processors operate. Transfers of personal data from the European Economic Area or the United Kingdom are based on the European Commission’s Standard Contractual Clauses or another transfer mechanism recognised under the GDPR.

Retention

  • You can delete your account in the app. This deactivates it: you can no longer sign in, and your email address is changed so it is no longer usable. Your saved data (Payment Methods, Cash Recording, support requests) stays on our servers until you ask for full erasure at privacy@vzla.io, which we carry out.
  • Payment Methods and Cash Recording entries you delete in the app are removed.
  • Link checks: the link and its result are stored without your account, so they are not part of your saved data.
  • Account data, support requests, push tokens, the request log and error reports: kept while the service runs, erased on request.
  • Split Bill: not stored.

Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to data portability, and to object to processing based on legitimate interests (Art. 15–21 GDPR). To exercise your rights, including full erasure of your data, contact privacy@vzla.io. We respond within one month. You have the right to lodge a complaint with a data protection supervisory authority.

Required data and automated decisions

No account is required to see the rates or use the converter. An email address is required for a free account. No decisions are made by automated means, including profiling. The VeriTrust result is an automated check of a link, not a decision about you.

Children

The app is not directed at children under 16.

Changes

Changes are published on this page with a new date. Material changes are notified in the app.

Contact

Privacy: privacy@vzla.io. Support: support@vzla.io.