Privacy Policy

Last updated: 20 October 2026

This policy covers the Dealspert iOS app, the Dealspert Android app, and dealspert.com. Dealspert is operated by Tidal Infinity. It describes the personal data the apps and site collect, how that data is used, and the companies that receive it.

You can browse deals without an account. An account is required to vote on a deal or to keep a savings log on our servers. The apps are free because they show ads.

Who we are

Tidal Infinity operates Dealspert. Privacy questions and deletion requests: [email protected].

Data we collect

The table matches the data the apps and this website actually handle. “We” means Tidal Infinity. Advertising partners collect the ad data in their own SDKs inside the app.

Data	When	Why	Who receives it
Name and email address	You create an account, or you sign in with Google or Apple	Create and secure the account, send verification and password-reset email	Us. Google or Apple, for the sign-in you chose
Password	You register or sign in with email	Authenticate you. We store it only as a hash	Us
Username	We generate one when a Google or Apple account is created	Identify the account inside Dealspert	Us
Device model	You sign in	Label that login session. Android sends the model name. iOS sends the machine identifier, such as iPhone14,2. This is not a hardware serial number	Us, stored as the name of your access token
Deal votes	You upvote or downvote a deal while signed in	Record one vote per account per deal	Us
Savings log	You choose to log a purchase	Store the deal, quantity, and amount you say you saved, and show your total	Us
Push token and alert topics	You allow notifications	Send deal alerts for the general feed and for each category you turn on	Google Firebase Cloud Messaging. Apple Push Notification service on iOS. Us, if the app sends the token to your account
Advertising ID, IP address, device and app details, ad interactions, approximate location derived from IP	The app requests an ad. This happens without an account	Show and measure ads, limit ad fraud, and, where you allow it, select more relevant ads	Google Mobile Ads (AdMob) and Meta Audience Network
IP address, user agent, requested URL, date and time	You open the website or the app calls our API	Run the service, block abuse, and fix failures	Us and the company that hosts our servers
Saved deals, category-alert switches, dark mode, login token, cached profile, app version	You use those features	Keep them on the device so the app can show them	Nobody. They stay in app storage on your phone

Account data

Email registration stores your name, email address, and a hashed password. Google sign-in stores the name and email address from your Google account. Apple sign-in stores the name you share on first sign-in and the email Apple returns. That email can be a private relay address. We also store a username we generate, and the time your email was verified.

Email sign-in can store a short verification code (up to 24 hours) and a password-reset code (up to 1 hour). Those codes are deleted when they are used or when they expire.

The sign-in request includes the device model. We store that string as the name of the API access token for that session. We do not collect your phone number, contacts, photos, precise GPS location, or government ID.

Votes and savings

A vote stores your account id, the deal id, and whether the vote was up or down. A savings entry stores your account id, the deal id, the quantity, and the amount you enter as saved. Dealspert does not sell the products and does not collect payment card numbers, bank account numbers, or a checkout receipt from the retailer.

Data that stays on your device

Saved deals, including title, prices, store, promo code, and image address, are stored in a database on the phone. Category alert on/off switches and the dark-mode setting are stored the same way. The login token and a cached copy of your profile are stored in app preferences. The version number in Settings is read from the installed app and is not sent to us.

We do not upload saved deals. Uninstalling the app, or clearing its storage, removes this on-device data.

Notifications

Alerts are off until you allow them. If you allow them, the app subscribes this device to topics through Firebase Cloud Messaging, operated by Google. The topics are a general deals topic and one topic for each category you turn on, named from that category’s slug. Google receives the device push token and those topic names in order to deliver the alerts. On iOS, Apple Push Notification service delivers the message.

Our servers store a push token on your account when the app submits one. We use it only to send Dealspert alerts. You can refuse the permission, turn a category off in the app, or turn notifications off in the system settings.

Advertising

The apps load ads with Google Mobile Ads (AdMob). Some of those ads are filled by Meta Audience Network through AdMob mediation. The Android app uses the advertising ID permission. These SDKs run when an ad is requested, including when you are signed out.

Google and Meta receive:

Advertising ID on Android.
IP address.
Device and app details such as model, operating system, language, screen size, and app version.
Ad interactions, including which ad was shown and whether you tapped it.
Approximate location inferred from the IP address. The app does not request GPS or precise location permission.

They use that data to deliver the ad, measure it, limit fraud, and, where you have allowed personalized ads, choose an ad. Their own policies apply: Google Privacy Policy and Meta Privacy Policy.

On iOS the app does not show Apple’s App Tracking Transparency prompt and does not read the IDFA. iOS ads use the signals those SDKs can collect without that permission, including IP address, and Apple’s SKAdNetwork for install attribution.

In the EEA and the UK, Google’s consent form runs before personalized ads. You can open it again in the app under Settings → Ad preference. On Android you can delete or reset the advertising ID, or opt out of personalized ads, in the system ads settings. On iOS you can control tracking under Settings → Privacy & Security → Tracking.

Website and API logs

Requests to dealspert.com and to the Dealspert API are logged with IP address, user agent, requested URL, and time. A signed-in browser session can also store IP address and user agent. The site may set a session cookie so pages work. That cookie is not an advertising cookie. This website does not embed its own analytics or advertising tags.

How we use data

Provide the deal feed, promo codes, and store links.
Create your account, keep you signed in, and send account email.
Store votes and the savings log you choose to record.
Send the deal alerts you turn on.
Show and measure ads that pay for the free app.
Detect abuse, debug failures, and keep the service available.

We do not use this data to decide credit, insurance, or employment. We do not sell your name, email address, votes, or savings log.

Who else receives data

Google. Sign-in, Firebase Cloud Messaging, and Google Mobile Ads. Google’s policy is at policies.google.com/privacy.
Meta. Audience Network ad requests inside the app. Meta’s policy is at facebook.com/privacy/policy.
Apple. Sign in with Apple, and push delivery on iOS. Apple’s policy is at apple.com/legal/privacy.
Our hosting provider. Stores the database and server logs only to run Dealspert for us.

We do not sell personal information for money, and we do not share your email list with advertisers. Ad partners do receive the advertising and device data listed above so they can show and measure ads. Some US state laws treat that sharing for cross-context advertising as a “sale” or “share.” Use the ad controls in this policy, or email [email protected], to opt out.

Data we do not collect

We do not collect precise location, contacts, photos, microphone or camera audio, SMS, calendar, health data, or payment card details. The apps do not include a separate product-analytics or crash-reporting SDK. Ad partners still measure ads as described above.

Legal bases (EEA and UK)

Contract. Your account, votes, and savings log.
Consent. Push alerts you allow, and personalized ads where the consent form applies.
Legitimate interests. Security logs, keeping the site and API available, and non-personalized ads where the law allows. You can object by emailing [email protected].

How long we keep it

Account data, votes, savings logs, and any push token stored on the account stay until you delete the account.
After you request deletion, we remove that data within 90 days. The account is deactivated during that window. Signing in again before the deletion date cancels the request. You can also email [email protected] to cancel it.
Verification codes expire within 24 hours. Password-reset codes expire within 1 hour.
Access tokens are removed when you sign out or when you request deletion.
Server logs are kept for up to 90 days, then deleted or overwritten, unless a security incident or a legal duty requires a specific record to be kept longer.
On-device saved deals and settings remain until you remove them, clear app storage, or uninstall the app.
Google, Meta, and Apple keep data they collect under their own retention rules.

Deletion steps are on the data deletion page. In the app: Settings → Other → Delete Account.

Security

The apps and website talk to our API over HTTPS. Passwords are stored as hashes. The app keeps an access token, not your password, on the device. Access to production systems is limited to people who operate Dealspert. No storage or transmission method is perfectly secure.

Your choices and rights

Browse deals without creating an account.
Refuse or revoke notification permission in the system settings.
Change ad consent in Settings → Ad preference where that control is shown, and in your device’s ads or tracking settings.
Request access, a copy, correction, or deletion by emailing [email protected].
Delete the account in the app. Details are on the data deletion page.

If the GDPR or UK GDPR applies to you, you can also object, restrict processing, ask for portability, and complain to your data protection authority. If a US state privacy law applies to you, you can ask us to know, correct, or delete personal information, and to opt out of sharing for cross-context advertising. We will not deny the app because you exercised these rights. Email [email protected] to appeal a decision.

Children

Dealspert is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email [email protected] and we will delete it.

International transfers

Dealspert operates from Kenya. Google, Apple, Meta, and our hosting provider may process data in the United States and in other countries. If you use Dealspert, your information may be processed in those locations with the safeguards those companies provide.

Changes

When this policy changes, we update this page and the date at the top.

Contact

Dealspert
[email protected]