Privacy Policy

ExAgg (the “App”) is operated by Jujing Holdings Co., Ltd. (聚菁控股有限公司), Taiwan (“we”, “us”). This policy explains what information the App handles and how. By using ExAgg you agree to this policy.

The short version: Your exchange API keys never leave your device. We never have access to your private keys or your funds. We only store what is needed to run your account and the in-app pet game.

1. Information we handle

Account information. When you sign in with Google or Apple, we receive a user identifier and, where provided, your email address and display name.
Exchange API keys. Stored only on your device in the operating system’s secure storage (iOS Keychain / Android Keystore). They are never transmitted to or stored on our servers. They are used locally on your device to read your balances, positions and history directly from the exchange. We recommend using read-only keys.
Wallet addresses. Public blockchain addresses you choose to add. They are used to look up publicly available balances via third-party services. The App is read-only and never asks for or accesses private keys or seed phrases.
Game data. Your virtual pet’s status, points, season points and battle records are stored in our cloud database (Google Firebase) to enable the game, leaderboards and asynchronous battles.
On-device data. Your asset history snapshots are stored locally on your device and are not uploaded.
Purchases. In-app purchases are processed by Apple or Google. We receive confirmation of a purchase but not your payment card details.
Notifications. If you enable notifications, a device push token may be processed to deliver them.

2. How we use information

To provide and maintain the App and your account.
To aggregate and display your portfolio on your device.
To run the virtual pet game, leaderboards and battles.
To process and restore in-app purchases.
To send notifications you have enabled.
To detect, prevent and address abuse, fraud or technical issues.

3. Third-party services

We use the following service providers, which process data only to provide their function:

Google Firebase (authentication, database, cloud functions) — account and game data.
Cryptocurrency exchanges (e.g. Binance, OKX, Bybit, Bitget, Gate.io, KuCoin, BingX) — called directly from your device using your API keys to read your data.
Blockchain data providers (e.g. OKX Web3, BlockScout) — to read public wallet balances.
Apple / Google — sign-in and in-app purchases.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

4. Data storage and location

Cloud data (account and game data) is stored on Google Firebase infrastructure. On-device data and API keys remain on your device. Data may be processed in regions where our providers operate.

5. Security

Data in transit is encrypted using TLS. API keys are held in your device’s secure storage. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

6. Data retention and deletion

We keep account and game data while your account is active. You may request deletion of your account and associated cloud data at any time by emailing us. On-device data (including API keys and history) is removed when you delete the App or clear its data.

7. Children

ExAgg is not directed to children under 13 (or the minimum age required in your region) and we do not knowingly collect their personal information.

8. Your rights

Depending on your location, you may have rights to access, correct, delete or restrict processing of your personal information. To exercise these rights, contact us at the address below.

9. Changes

We may update this policy. Material changes will be reflected by updating the “Last updated” date and, where appropriate, an in-app notice.

10. Contact

Jujing Holdings Co., Ltd. (聚菁控股有限公司)
5F.-14, No. 105, Sec. 4, Meichuan E. Rd., Beitun Dist., Taichung City 406, Taiwan
support@exagg.app