Privacy Policy
Last updated: September 2026
Dealzone, operated by CraftnTech, connects you with discounts from local businesses. This policy explains what we collect, why, and what control you have over it. We do not sell your personal data, we do not share it with advertisers, and we do not use it to serve ads.
What we collect
- Account details — your name, phone number and address. We need these to create your account and to let a business recognise you when you redeem an offer.
- Location — only with your permission, and only to sort offers by how near they are to you and to name the area you are in. Your coordinates are sent with that search and are not stored against your account. Naming the area, and finding an area you type, uses Google Maps. We never track your location in the background, and you can use the app without granting it at all — you can type an area instead.
- Activity — the offers you save, redeem and review, and your coin balance.
- Photos you choose to upload — a profile picture, and, if you run a business, your storefront and offer images. We only ever read the pictures you pick from your gallery; the app never opens your camera and never scans your library.
- Device notification tokens — so we can send the alerts you asked for. Removed as soon as you sign out or delete your account.
- Diagnostics — if the app crashes, we receive an anonymous crash report (device model, OS version, and where in the code it failed) so we can fix it. It carries no name, number or address.
Who can see it
When you redeem an offer, the business you redeemed it with sees that redemption and the name on your account — they have to, in order to honour the deal. Reviews you post are public and shown with your name. Reports you file about a business are private: they go only to our moderators, and the business you reported never sees the report or learns who filed it.
These service providers process data on our behalf, only to run Dealzone:
- Supabase — our database, sign-in and photo storage. Holds your account, activity and uploaded photos.
- Vercel and Cloudflare — host the website and the app’s server, and see your IP address as your requests pass through.
- HSPSMS — delivers sign-in codes by SMS. Receives your phone number and the code.
- Upstash — counts requests so the service can block abuse. Receives your IP address and, when you ask for a sign-in code, your phone number.
- Google Maps — names your area and finds an area you type. Receives the coordinates or the text you searched for.
- Expo and Google Firebase Cloud Messaging — deliver notifications. Receive your device’s notification token and the notification text.
- Sentry — receives the anonymous crash reports described above.
Nobody else receives your personal data unless the law requires it.
Deleting your account
You can delete your account yourself, at any time, from Profile → Delete my account in the app or on the web. It is immediate and cannot be undone. Full details are on the account deletion page.
Deletion erases your name, phone number, address, profile photo, email, password, saved offers, notifications, reviews, coin balance and device notification tokens.
We retain a record of redemptions and coin transactions, with your personal details stripped out so the record can no longer identify you. We keep it because a redemption is a transaction between you and a local business: it is that business’s sales and tax record as much as it is yours, and their coin budget is reconciled against it. Erasing it would corrupt another party’s accounts. This is the standard transaction-record exception under the Google Play and App Store deletion policies and under India’s DPDP Act.
Your rights
You can view and correct your details in the app at any time, and delete your account as described above. To ask a question, request a copy of your data, or raise a complaint about how we handle it, email roypathik8@gmail.com or contact us on WhatsApp. That address is also our grievance contact under India’s DPDP Act; we aim to respond within 30 days.
Security
Data is encrypted in transit. Access to your records is enforced in the database itself, so one user’s data cannot be read by another, and we restrict internal access to what is needed to run the service.
Children
Dealzone is not intended for children under 13, and we do not knowingly collect their data.
Changes
If we change this policy we will update the date above, and for significant changes we will tell you in the app.