I only allowed access to my phone's storage, but I refused to allow mate-global to make calls or obtain my location.
Did the app asked you these from the moment you opened it? 'cause an exchange app doesn't need these perms. Maybe the storage perm when you upload documents for KYC but it should only be asked when you are about to do tasks like that, not from the get go. Most importantly, you wouldn't really want any unknown/scam app to get those high-risk permissions.
One of the ways to know if an app is a spyware is if it asks permissions which aren't needed and it's the case for this one. I say uninstall the app op.
Lastly, a barrage of questions: is your phone rooted? and what OS? Did you notice anything unusual with your phone? are you getting more spam emails/sms more than usual?