Privacy policy
Last updated:
This policy explains what personal data Dealio (the iPhone and Android app, and this website) processes, what it's used for and what your rights are. In short: we keep only what's needed to alert you to price drops, we don't sell data, we don't show ads and we don't use trackers.
Controller
Dealio. Contact for any privacy matter:[email protected].
What data we process and why
Your account
Your email and your password, which is stored as a hash and never in readable form. Also the app language, so we email you in your language. We use them to create your account, confirm your email, sign you in and reset your password.
The products you track
The product links you add, your target prices, notes, categories and favourites, and the price history of those products. We use them to watch the price and alert you when it reaches your target.
Alerts
The history of alerts we send you, your notification preferences and, if you turn on push notifications, a device identifier (token) that lets us send alerts to that phone. The token is deleted when you sign out or when it stops being valid.
Beta list
If you sign up on this website, we store your email, whether you have an iPhone or Android and the website language. We only use it to invite you to the beta.
Technical data
Our providers log technical data such as IP address and request time, which is needed for the service to work, to keep it secure and to detect abuse.
On your phone
Light or dark theme, language and whether you've seen the intro are stored only on your device.
Legal basis
- Performing the service you ask for (Art. 6(1)(b) GDPR): account, tracked products and alerts.
- Your consent (Art. 6(1)(a) GDPR): beta list and push notifications. You can withdraw it at any time.
- Legitimate interest (Art. 6(1)(f) GDPR): security, abuse prevention and bot protection on the beta form.
Who we share data with
We don't sell or hand over your data. To run the service we use these providers, which process data only on our instructions:
| Provider | Purpose | Where |
|---|---|---|
| Supabase | Database and accounts | EU (Sweden) |
| Google (Firebase Cloud Messaging) | Push notifications | Global |
| Resend | Sending emails (codes and alerts) | USA |
| Cloudflare | Hosting this website, bot protection and support email | Global |
| Apple (TestFlight) and Google (Firebase App Distribution) | Sending you the beta invitation, if we invite you | Global |
Price checks and alert delivery are scheduled on Dealio's own server in the EU. The servers that look up prices in the stores (Fly.io, in France) only receive product links, never your data.
When a provider processes data outside the European Economic Area, it does so with the safeguards the GDPR requires, such as an adequacy decision or standard contractual clauses.
Affiliate links
Some Amazon links carry our affiliate code. If you open them you're on Amazon's website, and Amazon's privacy and cookie policies apply. We don't receive data about what you buy. As an Amazon Associate, Dealio earns from qualifying purchases.
This website
This website uses no analytics or advertising cookies, and fonts are served from our own domain. The beta form uses Cloudflare Turnstile to check that a person is sending it.
How long we keep data
- Account, products and alerts: for as long as you have an account.
- Notification tokens: until you sign out or they stop being valid.
- Beta list: until the beta ends or you ask to be removed.
If you delete your account, we erase its data within 30 days, including backups.How to delete your account.
Security
Connections are encrypted (HTTPS), passwords are stored as hashes and each user can only access their own data.
Your rights
You can ask to access, correct or erase your data, restrict or object to its processing and receive it in a portable format, by emailing[email protected] from your account's address. If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.
Children
Dealio is not directed at children under 14.
Changes
If we change this policy, we'll update the date above and, for significant changes, let you know by email or in the app.