Privacy Policy

1. About This Policy

This policy explains how Pricemist processes personal data when you use our website, web app, browser extension, or mobile app.

Data Controller: Jacek Polecki Business Services (NIP PL5423022046), a registered business in the European Union. For privacy questions or requests, use our monitored contact form.

2. Information We Process

We process data when it is needed to provide the service, meet legal obligations, protect the service, or—with consent where required—measure and improve it.

2.1 Account and profile data

This includes your email address, authentication provider, account and notification preferences, country, subscription state, and support communications. If you create a public profile or public collection, the handle, display name, bio, collection text, selected products, and approved avatar you choose to publish are visible to anyone with the page URL and may be indexed by search engines.

2.2 Avatars and product photos

A profile avatar you upload is stored in private media storage while it is pending review. Only approved avatars are shown publicly. Authorized moderators can preview pending images. Replacing or removing an avatar invalidates the prior review. A photo submitted to identify a product is sent for transient identification and offer matching; it is not added to your public profile or retained as a product-photo library by Pricemist.

2.3 Saved-product and activity data

We store saved URLs, product and price history, collection membership, watch and alert settings, purchase/return details you enter, coin ledger entries, and feature activity needed to provide and secure the service.

2.4 Device, push, and diagnostics data

We may process browser or app version, operating system, IP address, security logs, crash or performance diagnostics, and an Expo push token when you enable mobile notifications. A push token identifies an app installation for delivery; it is not your password and is deactivated when you sign out, delete your account, or disable the device.

2.5 Billing and StoreKit verification

Paddle processes web checkout and Apple processes App Store purchases. Pricemist does not receive your complete card number or Apple payment credentials. We retain provider customer, subscription, transaction, product, environment, status, and signed-verification results needed to grant entitlements and coins, reconcile purchases, prevent duplicate fulfillment, handle refunds or revocations, and meet financial-record obligations.

2.6 Analytics

In production, the signed-in web and mobile apps identify your PostHog analytics profile using an internal account identifier and may attach account properties such as email for account-level filtering and support. Events describe bounded product actions, purchase states, errors, and app/device context. We do not send report free text or rejected public-content text to analytics. PostHog may also provide session replay on supported web surfaces; sensitive inputs are not intended to be captured.

3. Public Content, Reports, Blocks, and Moderation

Public sharing is optional. We filter public text at publication boundaries and review user-uploaded avatars before they become public. Signed-in users can report public profiles, collections, and shared items, and can block another account. Blocking limits what the two signed-in accounts can see or do with each other's public content; anonymous public pages remain reachable by design.

A report stores the reporter and immutable subject identifiers, a bounded reason, optional details, a content hash, limited evidence metadata, status, reviewer actions, and audit notes. Authorized staff may review the live subject, hide or restore content, suspend sharing, reject an avatar, communicate about enforcement, or escalate serious safety and legal issues. We do not automatically delete an account because of a single report.

Terminal, non-held report records are deleted 24 months after resolution. Account deletion removes live reporter/subject links and report free text where no documented legal or security need applies. Open, in-review, or legally held reports may be retained longer. Block records and their bounded mutation history are removed when the relevant account is deleted.

4. How We Use Information

• Provide accounts, saved products, monitoring, alerts, public sharing, coins, subscriptions, and support
• Verify purchases, fulfill benefits, reconcile provider records, and process or record refunds and revocations
• Deliver email and optional push notifications
• Prevent fraud, abuse, duplicate grants, unauthorized access, and unsafe public content
• Measure reliability and product usage and improve the service
• Comply with legal, tax, accounting, safety, and dispute-resolution obligations

5. Sharing and Processors

We do not sell personal data. We use service providers only for defined operational purposes, including hosting and storage, email, Expo push delivery, product identification and price monitoring, PostHog analytics, Paddle billing, Apple StoreKit purchase verification, fraud/security tooling, and customer support. Retail links may use affiliate programs; we may earn a commission without changing the price you pay.

We may disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate protections. Where data is transferred outside the EEA, we use an applicable transfer mechanism such as an adequacy decision or Standard Contractual Clauses.

6. Retention and Account Deletion

We keep data only as long as needed for the purposes above. Product and price history may be retained while your account or shared content needs it. Security and analytics records use bounded operational retention. Payment and transaction evidence is kept as required for accounting, fraud prevention, provider reconciliation, and legal claims.

In-app account deletion deactivates sign-in, anonymizes account/profile identifiers, deletes your private library, notifications, active push devices, coin balance and action ledger, removes public profile content and avatars, and redacts eligible reports. Provider billing tombstones and financial records may remain so a later StoreKit or Paddle event cannot recreate an account or duplicate a benefit. Deleting Pricemist does not cancel an App Store or Paddle subscription; cancel it with the provider that sold it.

7. Browser Extension

When you ask the extension to save a page, it reads that active page's URL and available product details and sends them to Pricemist. It does not transmit pages you do not choose to save or collect general browsing history. Local browser storage holds authentication state, preferences, and a bounded recent-saves list. Host, cookie, active-tab, scripting, and storage permissions support those functions and communication with Pricemist over HTTPS.

8. Security, Cookies, and Your Choices

We use technical and organizational safeguards, including access controls, encrypted transport, private avatar storage, signed media access, bounded logs, and transaction idempotency. No system can guarantee absolute security.

Cookies and similar storage support sign-in, security, preferences, attribution, and analytics. You can control browser storage and optional notifications through your browser or device, although blocking essential session storage may prevent sign-in.

9. Your GDPR Rights

Depending on the processing and applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and may withdraw consent where consent is the basis. You may also complain to your data-protection authority.

Use our contact form to exercise a right. We may verify your identity and will respond within the period required by law.

10. Children and Automated Decisions

Pricemist is not intended for children under 16. We do not use solely automated decision-making that produces legal or similarly significant effects. Public-content filtering and fraud signals may restrict an action, but staff review and the monitored contact/appeal route remain available.

11. Contact Us

For privacy questions, rights requests, moderation appeals, or concerns about this policy, use our monitored Contact Form.