Privacy Policy

DealIt is operated by BLOOBLES - F.Z.E, a company registered in Ajman Free Zone, United Arab Emirates. We decide how and why your data is processed, which makes us the data controller. In this policy, "we", "us" and "our" mean that company.

Registered address: FL.H-01381, First floor of the building, Ajman Free Zone, Sheikh Rashid Bin Saeed Al Maktoum St, Ajman, United Arab Emirates.

For anything about your data, write to dealit@bloobles.com. We read every message sent there.

It covers the DealIt app on every platform and the dealitapp.com website. Our Terms and Conditions govern how you may use DealIt; this policy governs what happens to your data while you do.

• Your account — Your email address, username, avatar picture and the identifier our identity provider assigns you when you sign in. Sign-in runs through that identity provider, so we never see or store a password.
• What you post — Deals (title, description, prices, coupon code, link, photos, category, store and availability), comments, votes, favorites, reports, and the alerts you configure (keywords, price bounds, vote threshold and whether you want push or email for them).
• Points, tickets and affiliate tags — Your points ledger and ticket balance in each marketplace, the affiliate tags you register, and the conversions affiliate networks report for deals you posted with your own tag.
• Device and technical data — A push-notification token for each device you enable notifications on, the marketplace and language you pick, your IP address, request identifiers and the server logs that go with them. We use the IP address for rate limiting and abuse prevention only.
• App diagnostics — When the app crashes, a crash report (the error, device model, operating system and app version). The app also sends usage events to Google Firebase, such as app opens, screen views and actions like voting or publishing a deal (never what you wrote), tied to a random identifier for the app installation. Neither carries your name or email. You can turn usage events off at any time in Settings → Share anonymous usage statistics; crash reports stay on.
• What we do not collect — Your precise location (in-store locations are picked by hand from a list), your contacts, advertising identifiers or payment details. DealIt never asks you to pay for anything.

• To run DealIt: sign you in, show your deals and comments under your name, keep your favorites, points and tickets, and rank deals by the community's votes. This is necessary to provide the service you signed up for.
• To send the notifications you asked for: a push or an email when a deal matches one of your alerts. This rests on your consent, which you can withdraw per alert and per device at any time.
• To keep DealIt safe and fair: rate limits, report thresholds that hide abusive content, duplicate-deal detection and the handling of reports. This is our legitimate interest in running a community people can trust.
• To attribute affiliate commissions to the deal that earned them — the network pays you directly — and to keep the revenue records that go with them.

Deal links on DealIt carry an affiliate tag, either DealIt's own or, when you post with a ticket, yours. The merchant's affiliate network sees the click and any purchase that follows, and reports the commission to us with a reference to the deal and, for deals posted with your tag, to your account. That is how we know a commission is yours.

We keep those conversion records as revenue records. They tell us that a purchase happened through a deal; they do not tell us who bought or what.

We do not sell personal data, and we do not share it with anyone for their own marketing. The providers below process data on our behalf, under contracts that limit what they may do with it:

• Identity provider — Authentik, hosted by us, handles sign-in and stores your email and the sign-in method you chose.
• Amazon Web Services — Stores deal photos and our database backups in the eu-west-1 region (Ireland).
• Hosting — Our hosting provider runs the API server and this website.
• Push notifications — Delivered through Apple and Google to the devices you enabled them on.
• Email — Alert emails you enabled are sent through our SMTP provider.
• Link extraction — When you paste a deal link, Zyte fetches that page to extract the title, price and images. Only the link is sent, never anything about you.
• Translation — When you tap Translate on a deal or a comment, its text is sent to OpenAI to be translated. Only that text is sent, never anything about you.
• Google Firebase — Crashlytics receives the app's crash reports and Analytics its usage events, as described above.
• Affiliate networks — Amazon Associates and the other networks listed in the app receive clicks and purchases through affiliate links, as described above.
• Monitoring — An uptime and log-monitoring service (Better Stack) receives technical events from our servers so we know when something breaks.

We may also disclose data when the law requires it, or to protect the rights and safety of DealIt and its members.

What you post stays yours. To run DealIt we need permission to use it, so by posting you grant us a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, translate, adapt for display and publish your content on DealIt and in material promoting DealIt, together with the username it was posted under.

That licence lasts as long as the content is posted, and for the backup period described below afterwards. Deals and comments are public by nature: every member and every visitor can read them. Your votes only count towards a deal's public score; who voted is never shown.

Your username is licensed to you for as long as your account exists; it is not sold to you and cannot be transferred. We may rename an account without notice where its username is offensive, hateful, obscene or misleading, impersonates a person or an organisation, is claimed by the holder of a trademark, or wrongly suggests an official connection with DealIt. You then pick another name.

Your deals and comments are linked to your account, not to the name, so a rename applies to everything you posted at once. A name you give up may be claimed by someone else.

We keep your data for as long as your account exists. When you delete your account, in the app or by email as described on our Data Deletion page, this happens straight away:

• Your email address and username are replaced with anonymous values, your account with the identity provider is deleted and every session is signed out.
• Your alerts, favorites, push-notification tokens, points, tickets and affiliate tags are deleted.
• Your deals, comments and votes stay, re-attributed to an anonymous account, because other members' conversations and rankings depend on them.
• Conversion records are kept as anonymised revenue records.

Backups of our database are kept for up to 90 days and then expire, so deleted data can persist in a backup for that long. Comment rate-limit tallies expire within 48 hours. Sessions expire after 7 days.

• Access and portability — Settings → Download my data gives you a machine-readable file with everything listed above. You can also request it by email.
• Correction — Change your username in Settings. For anything else, write to us.
• Deletion — Settings → Delete account, or the steps on our Data Deletion page.
• Withdrawing consent — Turn push or email off per alert in the app, or revoke the notification permission on your device.
• Objection and complaints — Write to us and we will answer. You may also complain to the UAE Data Office or, if you live in the European Union or the United Kingdom, to your local data-protection authority.

We are based in the United Arab Emirates. Deal photos and database backups are stored in the European Union (Ireland). The providers listed above may process data in other countries; where they do, we rely on the contractual safeguards they offer.

Every connection to DealIt is encrypted. The app identifies itself with signed tokens, sessions expire, backups are private and our cloud credentials carry only the permissions they need. No system is perfectly secure, so we cannot promise absolute safety, but we do work at it.

You must be at least 13 to use DealIt, and 18 to earn through your own affiliate tag. We do not knowingly collect data from anyone under 13; if we learn that we have, we delete the account.

When this policy changes, the new version is published here with a new effective date. If a change matters to you, we announce it in the app as well.

Questions, requests, complaints: dealit@bloobles.com.