Privacy Policy

DealLens (“DealLens”, “we”, “our”) is an indie iOS app that compares current Dutch supermarket promotions and helps you plan your weekly groceries. It has no account and no login. We collect only the minimum data needed to deliver the features you turn on, and nothing that identifies you personally.

By default, everything you do in DealLens stays in this device’s local storage (Apple’s UserDefaults) and is never sent anywhere:

• Your favourite products and followed brands.
• Your shopping list and trip-plan items.
• Hidden categories and niche preferences.
• Theme and language preferences.

Price-drop and brand-promotion notifications are optional. If — and only if — you allow notifications, iOS gives us an opaque push token, and we send the following to our push server (deallens-server, hosted on Cloudflare) so it can detect relevant deals for you:

• Device ID (APNs push token). An opaque identifier iOS assigns for push delivery. Not your Apple ID, name, or contact details.
• Product Interaction. The product barcodes (EANs) you have favourited and the brand keys you follow, so the server can match them against new promotions.
• A coarse locale and sync timestamps, used only to format notifications and keep the record current.

That is the complete list. There is no name, email, location, GPS, advertising ID, or device fingerprint — the record cannot be traced back to you personally.

• No name, email address, phone number, or Apple ID.
• No location or GPS.
• No analytics, advertising, or third-party tracking SDKs.
• No device fingerprinting.
• We never sell, rent, or share your data with third parties.

The supermarket deals shown in DealLens are compiled from publicly available Dutch retailer promotions (Albert Heijn, Jumbo, Dirk, ALDI, Lidl, and others) and public product references. This is public retail information and contains none of your personal data. The app downloads this public feed over HTTPS; fetching it does not send us anything about you.

• Apple Push Notification service (APNs). Used to deliver optional price-drop and brand notifications to your device.
• Cloudflare. Hosts the public deal feed and the push server. If you enable notifications, your APNs token and followed product/brand keys are stored in Cloudflare’s key-value store. Cloudflare’s privacy policy.

If you enable notifications, your push record (APNs token plus the EANs and brand keys you follow) is stored keyed only by that opaque token. All traffic uses HTTPS, requests are rate-limited, and notification payloads are size-bounded. The server never stores any data that identifies you.

Everything else — favourites, lists, preferences — is stored locally on your device and is never uploaded.

We do not use cookies or web tracking technologies.

You can delete your server-side push data at any time from Profile → Privacy → Delete push data in the app. This removes the APNs token, favourite EANs, and followed-brand keys from our server, and keeps future background sync disabled until you explicitly enable it again.

Local preferences remain on your device and are removed when you delete the app. Turning notifications off also stops any further data from being sent to the server.

DealLens is not directed at children under 13. We do not knowingly collect data from children.

We may update this privacy policy from time to time. Any changes will be reflected in the “Last updated” date at the top of this page. Continued use of DealLens after changes constitutes acceptance of the updated policy.