Privacy Policy

Depending on the features you use, Pritialab may process:

• Account information: your Supabase user ID and basic Google or Apple profile information (such as name, email address, and profile picture).
• Search and product activity: search queries, selected retailers, region, optional postal code, product interactions, favorites, price watches, target prices, and price history.
• Network and security data: Cloudflare-derived IP address, request timestamps, and routing headers used for security, abuse prevention, rate limiting, and guest search quotas.
• Device, advertising, and notification tokens: platform, app settings, advertising permission status, device identifiers, and an Expo push token when you enable alerts or track a product.
• Diagnostics and analytics: pseudonymous app-instance lifecycle and feature events via PostHog (person profiles and session replay disabled; no account ID or search queries sent); error and performance diagnostics via Sentry, configured not to attach an app account or default personal information.
• Camera access: barcode scanning is processed entirely on-device. A captured product photo is transmitted only when you choose AI product identification.

We use information to:

• Operate and secure the app, enforce rate limits, prevent abuse, and manage search quotas.
• Authenticate users, maintain accounts, and credit rewarded ads via server-side verification.
• Provide localized search results, sync favorites, and manage price watches and alerts.
• Deliver optional AI-powered features, Smart Picks, and translations.
• Monitor performance, diagnose errors, and respond to customer support inquiries.

We share information with service providers solely to perform necessary app functions:

• Supabase: provides authentication and cloud storage for accounts, Pritties, favorites, referrals, price watches, price history, and push tokens.
• Cloudflare: hosts our backend, processes IP addresses for rate limiting and guest quotas, and temporarily caches responses.
• External AI services: power query optimization and Apple semantic search when AI Smart Picks is active, plus optional AI Decide, normalization, summaries, translations, and AI product identification.
• Retailers, search/data providers, and product APIs: receive search or product requests needed to return listings and details.
• Zippopotam.us: receives postal codes and country to determine general areas for localized results.
• PostHog & Sentry: provide privacy-minimized analytics, error reporting, and performance diagnostics.
• Expo: delivers push notifications.
• Google AdMob: delivers ads. When signed-in users watch a rewarded ad, their Supabase user ID is sent for server-side verification to credit Pritties. The AdMob SDK may collect device identifiers, IP addresses, and interaction metrics. Pritialab requests App Tracking Transparency permission on iOS where applicable.

We may also disclose information when required by law, to protect users or service integrity, or during a business transfer. We do not sell personal information.

Search & AI Processing: Queries are sent via our Cloudflare backend to selected retailers, search/data providers, and product APIs. When AI Smart Picks is selected, queries may be processed by external AI for query optimization or ranking. With Algorithm Smart Picks, query cleanup and ranking run locally on your device without sending queries or products to external AI services. Optional AI features (AI Decide, summaries, translations, AI identification) transmit only the specific content needed for that feature and do not intentionally include your name or email address.

Postal Code Localization: Pritialab does not request precise GPS location. If you enter a US ZIP code or Canadian postal code, the code and country are sent to Zippopotam.us and relevant search providers to localize results. We do not transmit your name or email with these lookups.

Caching: Query responses and cache keys may be cached by Cloudflare for approximately 10–15 minutes, summaries for up to 1 day, and translations for up to 30 days.

Barcode scanning processes the live camera feed locally on your device; Pritialab does not record, store, or transmit that feed. When you choose AI product identification, the captured photo is sent securely to our backend and external AI service for identification. Pritialab does not intentionally retain the photo after processing.

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy:

• Account data, Pritties, favorites, referrals, price watches, price history, and push tokens: retained while your account remains active or until you delete individual items or delete your account.
• Customer support records: retained for up to 24 months to address follow-ups and resolve disputes.
• Error and performance diagnostics: Sentry event data is retained for up to 90 days.
• Product analytics: PostHog event data is retained for up to 12 months.
• Local device history: on-device search history is stored for up to 14 days (maximum 100 entries) and can be cleared at any time in Preferences.

Pritialab is strictly intended for users aged 18 and older (or the legal age of majority in your jurisdiction) and is not directed to children. We do not knowingly collect personal information from individuals under 18 (or under 13 under COPPA). If we learn that a minor has submitted personal data, we will promptly delete it. If you believe a minor has provided us with personal information, please contact us.

European Economic Area (EEA) and United Kingdom (UK)

If you reside in the EEA or UK, our legal bases under GDPR/UK GDPR include:

• Performance of a contract: to provide price comparisons, accounts, sync features, and support.
• Legitimate interests: to secure the service, prevent fraud, enforce limits, and maintain reliability.
• Consent: for camera access, push notifications, and advertising tracking where required (revocable anytime via settings).
• Legal compliance: where disclosure is required by applicable law.

You have the right to request access to, correction of, or deletion of your personal data; restriction of or objection to processing; data portability; and to lodge a complaint with your supervisory authority.

Information may be processed in the United States and other countries where we or our service providers operate. Where required, transfers from the EEA or UK rely on an applicable lawful transfer mechanism, such as an adequacy decision or standard contractual clauses made available by the relevant service provider.

California and US State Privacy Disclosures

To the extent the California Consumer Privacy Act (CCPA/CPRA) applies:

• We do not sell personal information.
• Use of third-party advertising services may constitute "sharing" for cross-context behavioral advertising. You may use available iOS tracking controls or contact us to exercise an applicable opt-out right.
• You may request access to, deletion of, or correction of your personal information without discrimination.

• In-App Preferences: disable analytics, crash reporting, cloud saves, and notifications where available, or clear local search history and cache.
• Device Settings: manage camera access, push notifications, and advertising tracking permissions.
• Account Deletion & Data Rights: contact Pritialab+Inquiry@gmail.com for data requests. Signed-in users can request permanent account deletion directly in the app Menu. The app confirms whether the deletion succeeds; an optional feedback survey may be offered afterward and is not required to complete the request.

We may update this policy as the app or legal requirements evolve. We will update the date above and provide notice through the app or another reasonable method when changes are material.

The legal operator and data controller for Pritialab is Kaiwen Du (operating as Pritialab). For questions or privacy requests, contact Pritialab+Inquiry@gmail.com.