Privacy Policy

1. Who we are

Deal Basket ("Deal Basket," "we," "us," or "our") is a service operated by Deal Basket LLC, 201 E Methvin St #1262, Longview, TX 75601. This policy explains what information we collect through the Deal Basket mobile app and the dealbasket.app website (together, the "Service"), why we collect it, and what control you have over it.

Deal Basket is independent. We are not affiliated with, endorsed by, or sponsored by any grocery retailer.

2. Information we collect

Information you give us

• Account information. Your email address and a password, which we store only as a one-way hash. If you choose to add them, a display name and a phone number. We keep the phone number in your account. We do not currently use it for anything.
• Shopping lists and preferences. Items you add to your lists and cart, items you save, items you set to repeat, and the stores you tell us to prefer or avoid.
• Product ratings. If you rate a product, we store your rating. Other shoppers see only the average of all ratings for that product, never yours on its own.
• Addresses. A ZIP code on its own, or a full street address, that you enter so we can find stores near you. We work out where a ZIP code is from a table of ZIP code locations published by the US Census Bureau, which we keep on our own servers. Neither a ZIP code nor a street address is sent to anyone else to place it.
• Receipts you scan. If you use receipt scanning, we send the photo to Anthropic to be read (section 5) and keep the itemized data read from it: the store, the items and the prices. We do not keep the photo. We use your receipts to build your lists and your price history. A price from a receipt is used in the store prices other shoppers see only when receipts from at least three different shoppers show the same product at the same store. It is then combined with theirs into one figure that is not linked to anyone. We never sell receipts.
• Dinner planning. If you use dinner planning, the dinner you describe and the number of servings, which we send to Anthropic to turn into a list of ingredients (section 5). If you tell us foods to leave out, we apply that on our own servers. It is not sent to Anthropic.
• Household sharing. If you invite someone to share your lists, we record the invitation, including any email address you type for them, and which of your lists you have chosen to share.
• Referral codes. If you sign up with someone's referral code, we record which code you used.
• Coupons. If you clip a coupon, we record that you clipped it.
• Messages you send us. The contents of emails you send us, which are kept in our mailbox (section 5).

Information collected automatically

• Products you look at and scan. When you open a product's page or scan a barcode, we record that against your account. We use it to remember what you look for often, to suggest products, and to choose sponsored placements (section 3). We do not record which screens you open. What you type into search is used to show you results; we do not save it to your account.
• Crash reports. If the app crashes or hits an error, it sends a report to Sentry (section 5). This is the only time the app sends your device's model, operating system version and language setting. We do not collect your time zone.
• Precise location, only if you allow it. With your permission, the app reads your device's location, to within about 100 meters, while you are using it, to find stores near you and sort them by distance. We do not store it in your account; our server holds it for up to 60 seconds so that a repeated search is quicker. You can decline and enter a ZIP code instead, and you can turn the permission off at any time in your device settings. The app works without it.
• Push notifications, only if you allow them. If you allow notifications, Expo issues your device a push token, and we store it in your account so we can send you notifications.
• The website. dealbasket.app sets no cookies and stores nothing in your browser. Its pages load fonts from Google, so Google receives your IP address and browser details when you visit. The site is hosted by GitHub, which receives your requests.

What we do not collect

The app does not take payments today, and we do not collect payment card details. Deal Basket does not accept EBT or SNAP benefits. We do not ask for your Social Security number or government ID. Deal Basket does not currently connect to store loyalty programs, and the app does not ask for your loyalty account username, password, or card number. We do not access your contacts, your photo library, your microphone, or health data. The app uses your camera only when you scan a barcode or photograph a receipt. Anything you type yourself, such as a dinner description, may of course mention foods you avoid.

3. How we use information

We use the information described above to:

• Find stores near you and compare prices for your list;
• Save your lists, preferences, and history across your devices;
• Choose which sponsored placements to show you, as described below;
• Run household list sharing and referral codes;
• Send you notifications. Sale alerts and Order status notifications are on unless you turn them off; Promotional notifications are off unless you turn them on. You can change these in the app under More → Notification Settings, and turn off push notifications in your device settings;
• Send you email: one-time codes to verify your email address and reset your password;
• Diagnose crashes, prevent abuse, and keep the Service secure;
• Understand which features are used, from counts in our own database. We use no outside analytics service; and
• Comply with legal obligations.

Sponsored placements are our own, chosen inside Deal Basket.

Some product listings may be sponsored: a brand has paid for the placement, and it is labeled Sponsored. We choose which one to show you on our own servers, from campaigns brands set up with us, using only:

• your plan: whether you are on the free plan or a paid one;
• the category of the product you are looking at;
• your home area, the metropolitan area of the address saved in your account, not your device's location; and
• your activity in Deal Basket: whether you have viewed or scanned products in a category, and whether you view or scan certain products often.

We do not use your name, email address, street address, search terms, receipts, or payment information to choose sponsored placements. No advertising network is involved. The app contains no third-party advertising, analytics, attribution, or measurement tool, and does not read your device's advertising identifier. Brands that advertise with us see totals only, such as how many times their placement was shown or clicked, never who saw it.

We also use combined data that does not identify you to build our price comparisons: for example, receipt prices combined as described in section 2, and the average rating of each product.

If you ask us to limit how we use your information (section 7), we stop using it to choose sponsored placements and leave your receipts out of the combined store prices.

4. How we share information

We do not sell your personal information, and we do not give it to other companies so they can advertise to you.

We share information only in these situations:

• People in your household. If the person whose subscription created the household shares a list, the people they invited can see that list and its items. Invited members' own lists are not shared with anyone. No one in a household can see another member's cart, saved items, or receipts.
• Brands that advertise with us. Totals only, as described in section 3. They do not receive your name, email address, address, lists, or activity, and are never told which people saw or clicked a placement.
• Referrals. If you use someone's referral code, we do not tell them who you are.
• Service providers. The companies in section 5, which handle information on our behalf under the standard terms each of them offers its customers.
• Legal reasons. When we believe disclosure is required by law, subpoena, or court order, or is necessary to protect the rights, property, or safety of our users or the public.
• Business transfers. If Deal Basket is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Third-party services

The Service relies on the following companies, each handling data under its own privacy policy:

• Railway: hosts our servers and database, and keeps our server logs, which include account identifiers, on its own schedule.
• Stripe: our payment processor. The app does not take payments today. When you pay for something in Deal Basket, your card details go directly to Stripe; we never see or store your full card number.
• Resend: sends our email. It receives your email address and the content of each email we send you.
• Sentry: crash and error reports from the mobile app, so we can find and fix failures. A report is sent only when the app crashes or hits an error, and it is not linked to your account. It contains:
  • the technical error, and where in the app's code it happened;
  • technical details about your device and the app, such as device model, operating system version, app version, memory, screen size, and language setting;
  • a random identifier created when the app is installed, which tells us how many installations an error affects.

  For errors in the app's own code, the app removes email addresses and the search terms in web addresses from the report before sending it. Reports are not designed to include your name, postal address, payment details, or the contents of your lists. We have configured Sentry not to store IP addresses, and to remove passwords, one-time codes, and other sensitive fields from the reports it receives. Reports are stored in the United States and kept for up to 90 days.

• Anthropic: reads receipt photos you scan, and the dinners you describe, so we can turn them into itemized lists. They are sent only when you use those features. Anthropic deletes what we send within 30 days. Content its safety systems flag may be kept for up to 2 years, and the safety classification for up to 7 years.
• Expo: issues your device's push token and delivers our push notifications, including their text.
• Apple: distributes the app and delivers push notifications to your device.
• GitHub: hosts the dealbasket.app website.
• Google: provides the fonts on the dealbasket.app website (section 2).
• Microsoft 365: hosts our support and privacy mailboxes. It receives any email you send us.

Viewing prices in Deal Basket does not share your identity with any store.

6. How long we keep data

We keep your account information, lists, preferences, addresses, receipts, ratings and history for as long as your account is active.

Some information is deleted on a schedule regardless:

• records of the products you look at often are deleted after 24 months without activity;
• records of products you viewed or scanned are deleted 24 months after each view or scan;
• notifications are deleted after 90 days.

Your location is not stored (section 2).

Crash reports are kept by Sentry for up to 90 days. Railway keeps our server logs on its own schedule. Anthropic deletes receipt photos and dinner descriptions we send it within 30 days, except as described in section 5. Resend keeps records of the email it sends on its own schedule.

When you delete your account (section 8), it is removed from our database, usually within a few minutes. A few records are kept with the link to you removed: coupons you redeemed, and records of actions taken on your account. We do not delete the copies our service providers hold. They expire on the schedules above.

7. Your choices and rights

Wherever you live, you can, in the app:

• see and edit your lists, preferences, addresses, display name, phone number, and password;
• choose which notifications you get (More → Notification Settings);
• turn off push notifications and location access in your device settings; and
• delete your account at any time (section 8).

You can also ask us to:

• give you a copy of the personal information we hold about you. The copy contains everything linked to your account, and lists anything we deliberately leave out, with the reason;
• correct information about you that you cannot change yourself in the app;
• delete your account and the information linked to it (section 8); and
• limit how we use your information, with the effect described in section 3.

To make a request, email privacy@dealbasket.app from the address on your account. We will verify your identity before acting on a request, and respond within the time the law where you live requires. We will not treat you differently for making a request.

Some US states, including Texas and California, give their residents rights like these by law. We offer them to everyone who uses Deal Basket.

8. Deleting your account

You can delete your account from inside the app: open More → Account → Delete account, and confirm. Deletion is permanent.

Deleting your account removes your lists, saved items, preferences, addresses, receipts, ratings, the products you viewed or scanned, notifications, household connections, and push token. We start as soon as you confirm, and it usually finishes within a few minutes. The records described in section 6 are kept with the link to you removed.

If you cannot use the app, email privacy@dealbasket.app from the address on your account, and we will delete the account for you.

9. Security

The app and the website use encrypted (HTTPS) connections. Passwords are stored only as a one-way hash. Our database is not reachable from the internet: only our own servers can connect to it, over our hosting provider's private network. Only Deal Basket's owner can log in to our servers, database, crash reports, and email service. No service can promise perfect security, and we will not claim otherwise. If we become aware of a breach affecting your personal information, we will notify you and any required regulator as the law requires.

10. Children

Deal Basket is not directed to children under 13, and we do not knowingly collect personal information from them. We do not ask for anyone's age. If you believe a child under 13 has given us information, email privacy@dealbasket.app and we will delete it.

11. International users

Deal Basket is operated from the United States. Our servers and database are hosted by Railway in its US West region, and app crash reports are sent to Sentry's United States service. If you use the Service from outside the United States, your information is transferred to the United States, where privacy laws may differ from those in your country.

12. Changes to this policy

We may update this policy as the Service changes. When we do, we will revise the "last updated" date above. The current policy is always linked in the app, under More → Resources → Privacy Policy. If a change materially affects how we handle your personal information, we will email you before it takes effect.

13. Contact us

Questions about privacy: privacy@dealbasket.app
General support: support@dealbasket.app
Mail: Deal Basket LLC, 201 E Methvin St #1262, Longview, TX 75601