Privacy Policy

1. Who We Are

SaleOye is an independent platform that aggregates publicly available sale and discount listings from brands and retailers in Pakistan. We do not sell products, take payments, or handle deliveries ourselves. In the App you can ask SaleOye to place an order with a brand on your behalf, as described in §2.5; the order, its payment and its delivery are then between you and that brand. We are not affiliated with any brand or vendor listed on the Service.

2.1 Information You Provide Voluntarily

We collect personal information only when you choose to provide it:

• Account credentials — when you create an account, we collect your email address (email / password sign-in) or your Google account profile data (name, email, profile photo, and Google user ID) if you choose Google Sign-In.
• Saved items — products you save are stored on your device, and — when you are signed in — also synced to Google Cloud Firestore under your Firebase user ID so your saved edit follows you across devices and survives a re-install. Guest (signed-out) saves stay on the device only.
• Profile details — your name, and optionally the city you are in, who you shop for (Women, Men and/or Kids), and a mobile number. All of these are optional and exist so the sales we tell you about are ones you might actually want; leaving them blank simply means less relevant alerts. Stored under your Firebase user ID and synced across the App and the website.
• Delivery addresses — optional, and only if you want to order through the App: up to three addresses, each with a first and last name, phone number, optional email address, address lines, city, province and postal code. Stored under your Firebase user ID so they are ready at checkout on any device. Used only to fill in the checkout of a brand you order from (§2.5).
• Support messages — when you contact us by email, we receive your email address and the contents of your message.

2.2 Information Collected Automatically by the App

When you use the App, the following data is collected:

• Crash and diagnostic data — via Firebase Crashlytics, including device model, operating system version, app version, and stack traces when the App crashes or hits an error. This is collected only in release builds and is used solely to diagnose and fix App stability issues.
• Push notification token — an anonymous, device-specific Firebase Cloud Messaging token, generated only after you opt into notifications. We use this token solely to deliver the announcements we describe in §3 below. When you are signed in, the token is also stored under your Firebase user ID so an announcement can reach your account's devices (see §6). You can turn notifications off at any time from Profile → Sale alerts, which immediately stops future delivery.
• Usage analytics — via Google Firebase Analytics, covering the screens you open, products you view (with their price and discount), brands and products you save or follow, prices you track, searches you run and whether they found anything, filters you apply, how far you get through the welcome screens, whether you allow notifications and which ones you open, when you tap through to a brand’s own store, and — when you use the cart — items you add or remove, checkouts you start, whether a brand’s checkout could be completed for you, and orders placed (the brand, the items and their prices, and the brand’s order number; never your address or phone number). When you are signed in these events are associated with your SaleOye account identifier so we can understand complete journeys rather than isolated taps. The App does not collect the Android Advertising ID: that identifier is explicitly removed from the App, so this data cannot be linked to your activity in other apps or used for cross-app advertising.
• Profile details in analytics — alongside those events, Analytics records a few facts about your account: whether you are signed in, whether notifications and your sale alerts are on, roughly how many brands you follow, and — only if you entered them (§2.1) — your city and who you shop for. They let us see which alerts and features are useful to which people. They are never used for advertising, and removing them from your profile removes them from Analytics from then on.

2.3 Information Collected Automatically by the Site

When you visit the Site, we and our third-party partners may automatically collect:

• IP address and approximate geographic location.
• Browser type, version, language, and operating system.
• Pages visited, time on page, and navigation path.
• Referring URL (the page you visited before the Site).
• Anonymous, aggregated traffic metrics via Cloudflare Web Analytics (no cookies, no cross-site tracking).
• Usage analytics — via Google Analytics (through Firebase), covering the pages you open, products you view (with their price and discount), brands and products you save or follow, prices you track, searches you run and whether they found anything, filters you apply, sign-ins, and when you tap through to a brand’s own store or to the App’s Play Store page. When you are signed in these events are associated with your SaleOye account identifier, as in the App, along with the same profile facts described for the App in §2.2. Google Analytics uses first-party cookies to recognise a returning browser; see §5.

2.4 Information from Third-Party Services

We plan to display advertisements on the Site via Google AdSense. Where AdSense is enabled, Google and its partners may independently collect data about your activity across the web to serve relevant ads, governed by Google's own Privacy Policy. The App does not currently display advertising.

2.5 Orders You Place Through the App

The App has a cart. Its contents are kept on your device only. When you choose to order, the App shows each brand's order and its total, and asks you to authorise each order and choose how to pay:

• Cash on delivery — once you tick to authorise an order, the App opens that brand's own checkout in the background, fills in your name, delivery address, phone number and email address, chooses cash on delivery, and submits the order for you at the total you authorised. If anything is different (a price change, an item sold out, a check the store asks you to complete), the App stops and shows you that brand's checkout to finish yourself.
• Pay online — the App opens that brand's own checkout with your items and delivery details filled in, and you complete it, including any payment details, on the brand's page.
• SaleOye never sees, collects or stores card or other payment details. Before you authorise an order, the App checks that each item is still in stock at the brand's store; that check sends the store only which product is being looked up.
• Once an order is placed, the brand holds your order and the details sent with it under its own privacy policy. SaleOye does not keep a copy of the order beyond the analytics described in §2.2.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide core features — account sign-in, your saved edit (synced across your devices), search and filtering, and product discovery.
• To send opt-in announcements about notable sales, flash drops, or curated deal lists. These are authored by SaleOye and delivered via Firebase Cloud Messaging. Some are sent to every device that has opted in; others are addressed to a group defined by what you told us in your profile — your city, or who you shop for — so that an announcement about, say, a Lahore sale is not sent to people elsewhere. Grouping uses only the profile details you chose to enter, never your browsing history or behaviour, and messages are addressed to the group, not to you individually.
• To measure how the App and the Site are used, so we can see which brands and products are worth featuring and where the experience is failing people. This is described in §2.2 and §2.3.
• To place the orders you authorise with the brands you choose, and to fill in their checkouts for you (§2.5).
• To respond to your enquiries and support requests.
• To diagnose App crashes and improve stability.
• To display relevant advertisements on the Site via Google AdSense (when enabled). The App does not display advertising.
• To comply with applicable laws and regulations.

4.1 Infrastructure and Service Providers

SaleOye does not sell, rent, or trade your personal information to any third party. We rely on the following providers to operate the Service. Each processes only the data needed for its function and is bound by its own privacy terms:

• Google Firebase — Authentication (email / password sign-in), Cloud Firestore (saved-item and profile sync for signed-in users), Cloud Messaging (opt-in announcements), Crashlytics (crash reporting), and Analytics (App and Site usage measurement, as described in §2.2 and §2.3).
• Google Sign-In — used when you choose to sign in with a Google account.
• Cloudflare — static site hosting, content delivery, and aggregate web analytics for the Site, plus the Worker / D1 database that serves the public sale catalogue shown in the App.

4.2 Brands You Order From

When you place or start an order through the App (§2.5), SaleOye shares your name, delivery address, phone number, email address and the items you are ordering with that brand only, through the brand's own checkout, so it can process and deliver your order. Nothing is shared with a brand you do not order from. The brand handles this data under its own privacy policy.

4.3 Advertising Partners

The Site plans to use Google AdSense to serve advertisements. When AdSense is active, Google may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising via Google's Ads Settings at adssettings.google.com.

4.4 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of SaleOye, our users, or the public.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice before your information is transferred and becomes subject to a different privacy policy.

5. Cookies and Similar Technologies

Website: the Site sets Google Analytics cookies (such as _ga) to measure usage, as described in §2.3. When Google AdSense is enabled, AdSense and its partners may set cookies to deliver and measure ads. For visitors in the European Economic Area, the United Kingdom and Switzerland, Google Analytics cookies are not set; only cookieless, aggregate measurements are sent. Cloudflare Web Analytics is cookie-free.

App: the App does not use browser cookies. It stores small amounts of preference data on your device (such as your onboarding state, sort preference, notification preference and the contents of your cart) using Android's local storage. A brand's checkout opened inside the App may set its own cookies, as it would in a browser. Once you are signed in, the App uses Firebase SDK identifiers (your Firebase user ID and, if you opt into notifications, your Cloud Messaging token) to operate saved-item sync and notification delivery.

You can control browser cookies through your browser settings. For more information on Google advertising cookies, visit policies.google.com/technologies/ads.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy:

• Account credentials — retained by Firebase Authentication until you delete your account from Profile → Delete account in the App, from the Delete Your Account page on the website, or by emailing us. Account deletion removes your Firebase user record, your profile details and delivery addresses, and your synced saves. See Delete Your Account for the full steps.
• Saved items — stored on your device, plus (when signed in) under your Firebase user ID in Cloud Firestore. Retained until you remove items, sign out, uninstall the App, clear App storage, or delete your account.
• Push notification token — held by Firebase Cloud Messaging while notifications are on, and stored under your Firebase user ID so we can send an announcement to your account rather than to an anonymous audience. Signing out removes that device's token; deleting your account removes all of them. Turning the switches off in Profile → Sale alerts unsubscribes the device from the corresponding alerts.
• Profile details and delivery addresses — retained under your Firebase user ID until you remove them or delete your account.
• Cart — kept on your device until you remove the items, place their orders, clear App storage or uninstall the App. It is not stored on our servers.
• Orders — once placed, held by the brand you ordered from under its own policy. SaleOye keeps no order record beyond analytics (§2.2).
• Support messages — retained for up to 12 months for reference.
• Crash data — retained by Firebase Crashlytics under Google's default retention window (typically up to 90 days for individual crash reports).
• Web analytics data — retained in aggregated form by Cloudflare under its own retention policy. Event-level Google Analytics data, from the App and the Site, is retained for up to 14 months, after which only aggregated reports remain.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request erasure of your personal data and account. Account deletion is also available from within the App settings.
• Withdrawal of Consent — turn off push notifications at any time from Profile → Sale alerts; sign out to stop saved-item sync; or delete your account to remove all of the above. We do not send marketing emails.
• Objection — object to certain types of data processing.

8. Data Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration. These include:

• HTTPS / TLS encryption for all data transmitted between your device and our servers, and between our App and Firebase.
• Firebase Security Rules restricting access to user data so that, by default, only the signed-in owner of the data can read or write it.
• Restricted access to production systems — only authorised team members can access them.
• Regular review of our data collection and storage practices.

9. Children's Privacy

SaleOye is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child under 13, please contact us at hello@saleoye.com and we will delete the data promptly.

10. Third-Party Links and Vendor Websites

The Service contains links to external brand and vendor websites. Once you tap or click a product link and leave SaleOye, this Privacy Policy no longer applies. Any purchase, account, or data handling on a vendor's site is governed by that vendor's own policies. We are not responsible for the privacy practices or content of those websites.

In the App, a brand's checkout may open inside the App (§2.5). What you enter there, or what the App fills in at your request, goes to that brand under its policy. The App only follows which page that checkout is on, to know when an order is confirmed and to read its order number.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

For significant changes, we will post an in-App or in-Site notice before the change takes effect.

12. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, contact us:

• Email: hello@saleoye.com
• Subject Line: Privacy Enquiry
• Response Time: Within 14 business days
• Location: Rawalpindi, Punjab, Pakistan