Privacy Notice

Personal data we collect and why

• Account data — email address, display name, avatar and login credentials or social sign-in identifiers (Google, Apple). Used to create and secure your account. Legal basis: performance of our contract with you.
• Product and watchlist data — products you analyse or save, target prices and alert settings. Used to provide the Service. Legal basis: contract.
• Subscription data — plan, status, billing period and the customer reference supplied to us by Paddle. Used to grant Premium access. Legal basis: contract. We do not receive or store your card details.
• Support messages — what you send us. Used to answer you. Legal basis: legitimate interests in supporting customers.
• Usage, device and log data — pages viewed, feature usage, device and browser information, IP address. Used for security, fraud prevention, debugging and improving the product. Legal basis: legitimate interests.
• Marketing preferences — where you opt in to product emails. Legal basis: consent, withdrawable at any time.

Who we share data with

• Service providers and subprocessors — hosting, database, authentication and analytics providers that operate the Service on our behalf.
• Paddle.com — our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law.

We do not sell your personal data.

International transfers

Some of our providers process data outside the UK and EEA. Where that happens we rely on appropriate safeguards, such as UK/EU Standard Contractual Clauses or an adequacy decision.

Retention

We keep account, watchlist and subscription data for as long as your account is active. If you delete your account, we delete or anonymise your personal data, other than records we must keep for legal, tax or fraud-prevention purposes (typically up to six years for billing records). Logs are kept for a short operational period and then deleted.

Your rights

Under UK and EU data protection law you have the right to access your data, have it corrected or erased, restrict or object to processing, receive it in a portable format, and withdraw consent where processing is based on consent. You can exercise many of these directly from your account page, including deleting your account. To make a request, contact us through the support channel in the app; we respond within one month. You also have the right to complain to your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage, row-level access controls in our database and least-privilege administrative access.

Cookies and similar technologies

We use essential cookies and local storage to keep you signed in, remember your theme preference and secure the Service; these are required for it to work. Where we use analytics or marketing cookies, we ask for your consent first and you can change your choice at any time in your browser settings. Paddle sets cookies during checkout to process your order.

Contact

Data controller: Jamie Ashley Stott, United Kingdom. Reach us through the support channel in the app for any privacy question or request.