ExNook Privacy Policy

Effective date: 2026-10-20

1. Who we are

3 Bridges LLC, a Wyoming limited liability company, United States, operates ExNook and determines the purposes and means of the processing described here. Where applicable, we act as the data controller or equivalent responsible business.

This Policy covers exnook.com, the ExNook applications, and their supporting systems. Contact l@3bridges.pro about privacy or your rights. For general feedback and support, use c@exnook.com.

ExNook provides informational exchange rates and calculations. It does not exchange or transfer money. Ordinary use does not require bank-account details, payment-card details, or purchase records. Being free and without advertising does not mean that the Service has no analytics or technical data processing.

2. Device preferences and calculations

The application stores currency selections, currency sets and their order, display preferences, language, theme, and downloaded rates on your device. The amount you enter is used for calculations in the application. Requests for relevant rates or history may include currency codes and a requested period.

Usage analytics may include currency codes, set composition and size, quote direction, a standard reference denomination or the type and broad category of a custom denomination, the selected tab, and predefined setting values. We do not include an exact custom denomination, an entered amount or its range, calculated monetary results, custom set names, raw search text, clipboard content, or precise coordinates in these analytics events. An installation identifier can still make information personal or pseudonymous; the absence of a name does not make it anonymous.

3. Network requests and operational records

When your device connects to our website or rate service, our infrastructure and providers receive technical information such as an IP address, request time, resource address, client type, browser or application version, response status, and error information. Rate and history requests may reveal requested currency codes and periods.

We use this information to respond to requests, maintain the Service, diagnose failures, and prevent abuse. Browser or device language settings help select an available interface language. A manual language choice may be stored locally; language selection does not require precise location access.

4. Location-based currency suggestions

With device location permission, ExNook can use your location to suggest the currency of the country you are visiting. You can revoke that permission through your operating system or choose a currency manually, including before travelling.

Country detection may use operating-system location and geocoding services. On Apple devices, this includes Apple services, which may process location under their own policies. Location processing is therefore not necessarily confined to the ExNook application on your device. ExNook does not send precise coordinates to product analytics or use this feature to track your route in the background.

5. Usage analytics

Analytics is part of the standard operation of ExNook and is enabled by default, subject to applicable legal requirements and platform restrictions. We use Google Analytics on the website, managed through Google Tag Manager, and Google Analytics for Firebase in the applications. Tag Manager manages tags; it does not itself authorize additional processing unrelated to this Policy.

Analytics processes browser or app-instance identifiers, page and screen views, use of features, currency selections, standard settings, action outcomes, technical errors, and information about platform, version, language, and approximate region. Website analytics may use cookies, and application analytics may use SDK identifiers and local storage. Google receives technical connection information, including an IP address, and may derive approximate geography as described in its documentation. This is distinct from sending precise device coordinates in our events.

We use analytics to understand which currency sets and settings people use, which actions are frequent, where a workflow is abandoned or fails, and how to improve usability and reliability. We do not use these events for personalized advertising or cross-company advertising tracking. The excluded content listed in section 2 is not included in our product-analytics events.

Where consent is legally required for a particular type of collection or storage, that processing takes place only after the required consent; otherwise we use an applicable lawful basis. Default operation does not override a valid withdrawal, objection, or other right under applicable law. Device permission for location is separate from the rules applicable to analytics.

More information about Google's handling of data is available in How Google uses information from sites or apps that use its services and Google's Privacy Policy.

6. Communications and purposes of processing

If you contact us, we receive your email address, message, attachments, and communication metadata. Do not send passwords, complete card details, or unnecessary financial information. Remove personal information from screenshots that is not needed to explain the issue.

Where a legal basis is required, we rely on:

• Performance of our agreement with you, or steps you request, for processing objectively necessary to deliver requested features and data.
• Legitimate interests, where permitted and balanced against your rights, for security, service diagnostics, responding to enquiries, and proportionate usage measurement. This basis does not replace consent where consent is mandatory, including for certain device storage or access.
• Consent for processing that requires it, including relevant analytics technologies or location processing where applicable.
• Legal obligations for compliance requests and legally required recordkeeping.

We do not use analytics to make solely automated decisions producing legal or similarly significant effects on you.

7. Recipients and external links

Authorized personnel and contractors, hosting and network providers, email providers, and Google for the described analytics may receive information as needed for their roles. Applicable processing agreements and restrictions govern our service providers. A provider's role depends on the particular service and its terms. Using one Firebase service does not mean we use all Firebase products.

Apple and Google may independently process information connected with their app stores, operating systems, backups, and permissions under their own policies. We may disclose information to meet a lawful request, protect legal rights, or investigate abuse, as necessary and permitted. Information may also be transferred in a business reorganization or transfer, subject to applicable safeguards and notice requirements.

We do not sell personal information or share it for cross-context behavioral advertising. Transfers to providers for the purposes described here are not excluded by that statement.

Links to app stores, websites, or AI services open when you choose to use them. The external operator may receive your IP address, browser information, and information carried by the link, and may associate further activity with an account you use there. Any AI prompt prepared by us concerns general information about ExNook and does not include your amounts, currency sets, or usage history. Information you add yourself is handled by the external service under its policies.

8. International processing

3 Bridges LLC is based in the United States. Information may be processed in the United States and other countries where our providers operate; their data-protection rules may differ from those of your country.

Where international-transfer rules apply, we use a lawful transfer mechanism and required safeguards, such as an applicable adequacy decision or standard contractual clauses with supplementary measures where needed. Contact l@3bridges.pro for information about the mechanism relevant to a transfer and available copies of safeguards. A provider's certification does not mean that 3 Bridges LLC or all its contractors hold that certification.

9. Retention

Device preferences and cached rates remain until changed, deleted through the application or operating system, or replaced by cache management. System backups also depend on your device settings and the platform provider.

For Google Analytics user-level and event-level data, the retention setting is 14 months, with renewal of user-data retention on new activity disabled. Deletion occurs through Google's processing cycle after expiry. This setting does not automatically apply to all standard aggregated reports; any separate exports also require their own retention controls.

Routine server logs are deleted after 30 days. Records necessary for an identified incident or a specific legal claim may be retained for the investigation and the applicable period for addressing that claim, with use limited to that purpose.

Routine support correspondence is retained for up to 12 months after an enquiry is closed. Only information needed for an ongoing dispute, a specific legal claim, or mandatory recordkeeping is retained longer. Unnecessary attachments need not be retained simply because the correspondence remains relevant.

Evidence of applicable consent or rights requests is retained as needed to meet and demonstrate the relevant obligations, taking account of applicable claim periods. Where law requires limited retention after an erasure request, further use is restricted to that basis. Backups do not justify indefinite retention or recreating a deleted analytics profile. This Policy does not promise preservation or recovery of your information.

10. Your rights and controls

Depending on applicable law, you may have rights of access, correction, erasure, restriction, portability, objection to processing based on legitimate interests, withdrawal of consent, and complaint to a competent data-protection authority. Consent withdrawal does not affect the lawfulness of earlier processing.

Contact l@3bridges.pro to exercise a right and tell us whether your request concerns the website or an application. We may ask for proportionate information to locate the relevant records and verify that they relate to you. Do not send a password, identity document, or payment details without a specific, justified request. If we cannot associate records with you using the available information, we will explain that limitation without collecting unnecessary information merely to identify you. We handle requests within the time and conditions required by applicable law.

Browser settings can delete or restrict cookies and local storage; device settings control location permission. These actions may reset preferences. Deleting local data or uninstalling an application does not automatically delete previously transmitted analytics, support messages, or security records. Where consent is required, the applicable consent mechanism also provides a way to withdraw it. Restricting legally controlled analytics does not remove ordinary currency-conversion functionality.

11. Age and security

ExNook is a general-purpose informational currency tool with no product-specific minimum age. We do not impose an age gate simply because the application displays exchange rates. This does not waive legal protections for children's information. Where we know that processing is subject to special child-data requirements, we apply the required safeguards, limit processing, obtain any required parental consent, or delete information as applicable. A parent or guardian can contact l@3bridges.pro about a child's information.

We apply proportionate technical and organizational security measures. No system can guarantee absolute security; this does not remove mandatory safeguards, incident-notification duties, or other legal obligations.

12. Updates and contact

We update this Policy when our practices change, identify the effective date, and provide notice where required. A revised policy does not itself replace consent to a new purpose where consent is required.

Provider: 3 Bridges LLC, Wyoming, United States
Privacy and legal: l@3bridges.pro
Feedback and support: c@exnook.com