This Privacy Policy explains what data SoleWatch collects, how it is used, and your rights regarding that data. SoleWatch is operated by George Bolea ([email protected]).

1. Data We Collect

Account data — When you sign in, we store your email address and a unique user ID. If you use Google or Facebook sign-in, we receive only the email and ID provided by those services; we do not receive your password.

App data — Your wishlist items and notification preferences are stored so they sync across devices.

Device token — To deliver push notifications, we store your device's FCM token. This is deleted when you disable notifications or delete your account.

Analytics Consent required — With your permission, we use PostHog to collect anonymised usage events (e.g. "product viewed", "deal feed searched"). PostHog is hosted on EU servers. No analytics data is collected if you decline consent.

Crash reports Consent required — With your permission, we use Firebase Crashlytics to collect crash and error reports. This helps us fix bugs. No crash data is collected if you decline consent.

2. How We Use Your Data

• To authenticate you and keep your account secure
• To sync your wishlist and notification preferences
• To send you push notifications about price drops and sales you have opted into
• To understand how the app is used and improve it (analytics, with consent only)
• To diagnose and fix crashes (with consent only)

We do not sell your data to third parties. We do not use your data for advertising.

3. Third-Party Services

• Supabase — Database and authentication. Data is stored in the EU. Privacy policy ↗
• PostHog — Analytics (EU Cloud). Only active with your consent. Privacy policy ↗
• Firebase / Google — Push notifications (FCM) and crash reporting (Crashlytics). Crash reporting only active with your consent. Privacy policy ↗
• Google Sign-In — Optional authentication provider.
• Facebook Login — Optional authentication provider.

4. Data Retention

Your data is retained for as long as your account exists. When you delete your account from Settings, all your personal data — including email, wishlist, preferences, and device tokens — is permanently deleted from our systems. Analytics and crash data collected prior to deletion may be retained in aggregated, anonymised form.

5. Your Rights (GDPR)

If you are in the European Economic Area, you have the following rights:

• Access — Request a copy of the data we hold about you
• Rectification — Ask us to correct inaccurate data
• Erasure — Delete your account and all associated data directly from the app, or contact us to request deletion
• Portability — Request your data in a machine-readable format
• Withdraw consent — You can change your analytics and crash reporting consent at any time from Settings

To exercise any of these rights, contact us at [email protected].

6. Children's Privacy

SoleWatch is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes within the app. The "last updated" date at the top of this page always reflects the most recent revision.

8. Contact

For any privacy-related questions or requests, contact us at [email protected].