Privacy Policy

1. Who We Are

SaleOye is an independent platform that aggregates publicly available sale and discount listings from brands and retailers in Pakistan. We operate solely as a discovery tool. We do not sell products, process payments, or handle deliveries. We are not affiliated with any brand or vendor listed on the Service.

2.1 Information You Provide Voluntarily

We collect personal information only when you choose to provide it:

• Account credentials — when you create an account, we collect your email address (email / password sign-in) or your Google account profile data (name, email, profile photo, and Google user ID) if you choose Google Sign-In.
• Saved items — products you save are stored on your device, and — when you are signed in — also synced to Google Cloud Firestore under your Firebase user ID so your saved edit follows you across devices and survives a re-install. Guest (signed-out) saves stay on the device only.
• Profile details — your name, and optionally the city you are in, who you shop for (Women, Men and/or Kids), and a mobile number. All of these are optional and exist so the sales we tell you about are ones you might actually want; leaving them blank simply means less relevant alerts. Stored under your Firebase user ID and synced across the App and the website.
• Support messages — when you contact us by email, we receive your email address and the contents of your message.

2.2 Information Collected Automatically by the App

When you use the App, the following data is collected:

• Crash and diagnostic data — via Firebase Crashlytics, including device model, operating system version, app version, and stack traces when the App crashes or hits an error. This is collected only in release builds and is used solely to diagnose and fix App stability issues.
• Push notification token — an anonymous, device-specific Firebase Cloud Messaging token, generated only after you opt into notifications. We use this token solely to deliver the broadcasts we describe in §3 below; we do not store these tokens in our own database. You can turn notifications off at any time from Profile → Sale alerts, which immediately stops future delivery.
• Usage analytics — via Google Firebase Analytics, covering the screens you open, products you view, brands and products you save, searches you run, and when you tap through to a brand’s own store. When you are signed in these events are associated with your SaleOye account identifier so we can understand complete journeys rather than isolated taps. The App does not collect the Android Advertising ID: that identifier is explicitly removed from the App, so this data cannot be linked to your activity in other apps or used for cross-app advertising.

2.3 Information Collected Automatically by the Site

When you visit the Site, we and our third-party partners may automatically collect:

• IP address and approximate geographic location.
• Browser type, version, language, and operating system.
• Pages visited, time on page, and navigation path.
• Referring URL (the page you visited before the Site).
• Anonymous, aggregated traffic metrics via Cloudflare Web Analytics (no cookies, no cross-site tracking).

2.4 Information from Third-Party Services

We plan to display advertisements on the Site via Google AdSense. Where AdSense is enabled, Google and its partners may independently collect data about your activity across the web to serve relevant ads, governed by Google's own Privacy Policy. The App does not currently display advertising.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide core features — account sign-in, your saved edit (synced across your devices), search and filtering, and product discovery.
• To send opt-in announcements about notable sales, flash drops, or curated deal lists. These are authored by SaleOye and delivered via Firebase Cloud Messaging. Some are sent to every device that has opted in; others are addressed to a group defined by what you told us in your profile — your city, or who you shop for — so that an announcement about, say, a Lahore sale is not sent to people elsewhere. Grouping uses only the profile details you chose to enter, never your browsing history or behaviour, and messages are addressed to the group, not to you individually.
• To measure how the App is used, so we can see which brands and products are worth featuring and where the experience is failing people. This is described in §2.2.
• To respond to your enquiries and support requests.
• To diagnose App crashes and improve stability.
• To display relevant advertisements on the Site via Google AdSense (when enabled). The App does not display advertising.
• To comply with applicable laws and regulations.

4.1 Infrastructure and Service Providers

SaleOye does not sell, rent, or trade your personal information to any third party. We rely on the following providers to operate the Service. Each processes only the data needed for its function and is bound by its own privacy terms:

• Google Firebase — Authentication (email / password sign-in), Cloud Firestore (saved-item and profile sync for signed-in users), Cloud Messaging (opt-in announcements), Crashlytics (crash reporting), and Analytics (App usage measurement, as described in §2.2).
• Google Sign-In — used when you choose to sign in with a Google account.
• Cloudflare — static site hosting, content delivery, and aggregate web analytics for the Site, plus the Worker / D1 database that serves the public sale catalogue shown in the App.

4.2 Advertising Partners

The Site plans to use Google AdSense to serve advertisements. When AdSense is active, Google may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising via Google's Ads Settings at adssettings.google.com.

4.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of SaleOye, our users, or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice before your information is transferred and becomes subject to a different privacy policy.

5. Cookies and Similar Technologies

Website: the Site itself does not set first-party advertising or tracking cookies. When Google AdSense is enabled, AdSense and its partners may set cookies to deliver and measure ads. Cloudflare Web Analytics is cookie-free.

App: the App does not use browser cookies. It stores small amounts of preference data on your device (such as your onboarding state, sort preference, and notification preference) using Android's local storage. Once you are signed in, the App uses Firebase SDK identifiers (your Firebase user ID and, if you opt into notifications, your Cloud Messaging token) to operate saved-item sync and notification delivery.

You can control browser cookies through your browser settings. For more information on Google advertising cookies, visit policies.google.com/technologies/ads.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy:

• Account credentials — retained by Firebase Authentication until you delete your account from Profile → Delete account in the App, from the Delete Your Account page on the website, or by emailing us. Account deletion removes your Firebase user record and your synced saves. See Delete Your Account for the full steps.
• Saved items — stored on your device, plus (when signed in) under your Firebase user ID in Cloud Firestore. Retained until you remove items, sign out, uninstall the App, clear App storage, or delete your account.
• Push notification token — held by Firebase Cloud Messaging while notifications are on, and stored under your Firebase user ID so we can send an announcement to your account rather than to an anonymous audience. Signing out removes that device's token; deleting your account removes all of them. Turning the switches off in Profile → Sale alerts unsubscribes the device from the corresponding alerts.
• Support messages — retained for up to 12 months for reference.
• Crash data — retained by Firebase Crashlytics under Google's default retention window (typically up to 90 days for individual crash reports).
• Web analytics data — retained in aggregated form by Cloudflare under its own retention policy.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request erasure of your personal data and account. Account deletion is also available from within the App settings.
• Withdrawal of Consent — turn off push notifications at any time from Profile → Sale alerts; sign out to stop saved-item sync; or delete your account to remove all of the above. We do not send marketing emails.
• Objection — object to certain types of data processing.

8. Data Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration. These include:

• HTTPS / TLS encryption for all data transmitted between your device and our servers, and between our App and Firebase.
• Firebase Security Rules restricting access to user data so that, by default, only the signed-in owner of the data can read or write it.
• Restricted access to production systems — only authorised team members can access them.
• Regular review of our data collection and storage practices.

9. Children's Privacy

SaleOye is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child under 13, please contact us at hello@saleoye.com and we will delete the data promptly.

10. Third-Party Links and Vendor Websites

The Service contains links to external brand and vendor websites. Once you tap or click a product link and leave SaleOye, this Privacy Policy no longer applies. Any purchase, account, or data handling on a vendor's site is governed by that vendor's own policies. We are not responsible for the privacy practices or content of those websites.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

For significant changes, we will post an in-App or in-Site notice before the change takes effect.

12. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, contact us:

• Email: hello@saleoye.com
• Subject Line: Privacy Enquiry
• Response Time: Within 14 business days
• Location: Rawalpindi, Punjab, Pakistan