← Back to DealRank

Privacy Policy

Last updated: June 8, 2026

1. Introduction

DealRank ("we," "our," or "us") is a used-car deal ranking app for iOS and Android. This Privacy Policy explains what data we collect, what we don't, and how the data you create inside the app, your account, your searches, and your saved listings, flows between your device and our backend (Firebase).

DealRank is built by one developer. We don't sell ads, we don't track you across other apps, and we don't sell your data.

2. How Your Data Flows

• Device ↔ Firebase (your account and saved data): Your account, search preferences, and saved or bookmarked listings are stored in Google Firebase under your user ID, governed by security rules scoped to your account.
• Device ↔ vehicle listings: DealRank shows used-car listings and dealer information and ranks them with a deal score. We request the listing data needed to show and rank results; we do not publish your identity to dealers as part of browsing.
• Device ↔ Apple / Google (sign-in): You sign in with Apple or Google. The provider authenticates you and returns a token to Firebase Auth. We never see your Apple or Google password.
• On device ↔ Face ID: If you enable the app lock, authentication happens entirely on your device through Apple Face ID / Touch ID or Android biometrics. Your biometric data never leaves your device and is never sent to us.
• Device ↔ RevenueCat ↔ Apple / Google: When you subscribe, the purchase is processed by the App Store or Google Play. RevenueCat reports whether your subscription is active and receives an anonymous user ID we generate plus the store receipt data. We never see your payment method.
• Device ↔ PostHog (product analytics):The app sends anonymous behavioral events (e.g. "search run," "listing saved") keyed to your user ID so we can understand which parts of the app work. Session recording / replay is disabled.

3. Information We Collect

Account information

• Email address (Apple may relay a private address)
• A Firebase Authentication user ID (UID)
• The sign-in provider you used (Apple or Google)

Your activity in the app

• Search criteria and preferences (e.g. make, model, price range, mileage)
• Listings you save, bookmark, or compare

Location

• Approximate location, only while the app is in use and only if you allow it, so DealRank can find dealers and listings near you. You can decline and still use the app by searching manually.

Subscription state

• Whether your subscription entitlement is active and its expiry, as reported by RevenueCat / the app store

Product analytics (PostHog, anonymous events)

• Event names and coarse metadata (which screens you used, whether a search was run) keyed to your user ID
• Crash and error reports without the content that triggered them

What we do NOT collect

• No advertising identifier (no IDFA-based tracking)
• No camera, photos, contacts, calendar, or microphone access
• No biometric data (Face ID / Touch ID stays on your device)
• No third-party ad networks, ad SDKs, or retargeting trackers
• No cross-app or cross-site tracking of any kind
• No session recording or screen replay

4. Tracking & Advertising

DealRank does nottrack you across other companies' apps or websites, and does not use Apple's IDFA. The app does not present an App Tracking Transparency prompt because no cross-app tracking occurs.

5. Third-Party Services

• Google Firebase (Authentication, Firestore): hosts your account and saved data.
• Apple: Sign in with Apple, App Store distribution, and billing.
• Google: Google Sign-In, Google Play distribution, and billing.
• RevenueCat: reports your subscription status. Receives an anonymous identifier and store receipt data. Processes data in the United States.
• PostHog: product analytics and error monitoring. Anonymous events only. Session recording disabled.

6. Data Retention & Deletion

Your account, preferences, and saved listings live in DealRank so you can return to them. You can remove saved listings in the app, and you can delete your account from settings, which removes your data from our backend and deletes your authentication record. This is irreversible.

7. Legal Basis for Processing (GDPR)

• Contractual necessity (Art. 6(1)(b)): account creation and storing your searches and saved listings, necessary to provide the app.
• Consent (Art. 6(1)(a)): location access, which you grant and can withdraw.
• Legitimate interest (Art. 6(1)(f)): basic operation and abuse prevention.

8. International Data Transfers

Firebase, RevenueCat, and PostHog process data in the United States. If you use DealRank from outside the U.S., your data is transferred there. These providers offer Standard Contractual Clauses for cross-border transfers.

9. Your Rights

• EEA/UK (GDPR): access, portability, restriction, objection, and the right to complain to your data protection authority.
• California (CCPA/CPRA): the right to know, delete, and opt out of "sale" or "sharing." We do not sell or share your personal information.

10. Children's Privacy

DealRank is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect data from children. If you believe a child has signed up, contact us and we will delete the account.

11. Security

Authentication tokens are stored securely in the device keychain (Expo Secure Store), and you can add a biometric app lock. All traffic uses HTTPS, and Firestore security rules restrict your data to your own account.

12. Changes to This Policy

We may update this Privacy Policy. Material changes will be announced on this page and, if significant, in the app.

13. Contact

Questions or requests, write to support@moetalaat.com.