Privacy Policy

1. Who We Are

Trollyy is a shopping list and community deals application. The operator identified in the app store listing is the data controller for personal information processed through the Service, unless we state otherwise.

2. Information We Collect

Account information: When you register, we collect your email address and authentication credentials (stored in hashed form by our auth provider). You may also provide a username, display name, avatar preset, optional profile photo, and profile visibility preference.

Shopping data: Trollyy names, item names, quantities, prices, VAT flags, sale status, sale end dates, discount amounts, store names, and approximate store coordinates when you choose to tag a sale item with location.

Group and sharing data: Group memberships, trollyy shares, activity logs (such as who edited items), and loyalty card images you upload to a group, including the image file and a label you assign.

Explore and community data: When you publish sale information, we store listing metadata (item name, price signals, store name, location bucket, sale end date, visibility window, and your user identifier for attribution when your profile is public).

Preferences: Theme, currency display code, and optional default VAT percentage stored in your account or on your device.

Guest mode data: If you use guest mode, trollyy data and preferences are stored locally on your device using on-device storage and are not sent to our servers unless you sign in and import or sync.

Device permissions: With your permission, we access device location (foreground) to suggest store names and photo library to set profile or loyalty card images. We do not collect precise location continuously in the background unless we clearly disclose that in the app.

Advertising and device data: When ads are shown, our advertising partners (including Google AdMob) may collect or receive device and advertising identifiers (such as the Apple Identifier for Advertisers or Google Advertising ID, where available), IP address, device type and OS version, app version, approximate location derived from IP, and information about how ads are served and interacted with (such as impressions and clicks). We do not send your shopping-list contents, loyalty card images, or email address to ad networks for ad targeting.

Technical data: Our infrastructure providers may process IP addresses, device type, app version, and diagnostic logs needed to deliver the Service, prevent abuse, and fix errors.

3. How We Use Information

Provide and maintain the Service, including syncing trollyys, enabling sharing, displaying Explore listings, and formatting prices in your chosen currency.

Authenticate you and secure accounts, including password reset flows.

Show attribution on Explore and public profile pages when you contribute content and keep your profile public.

Display third-party advertisements that help support the free Service, including measuring ad performance and preventing ad fraud.

Enforce our Terms, protect users, and comply with legal obligations.

Improve reliability and understand aggregate usage patterns. We do not sell your personal information.

4. Legal Bases (EEA, UK, and Similar Regions)

Where applicable, we process personal data based on: (a) performance of a contract (providing the Service you request); (b) legitimate interests (security, fraud prevention, product improvement, and serving and measuring ads in the free Service, balanced against your rights); (c) consent (for optional permissions such as location or photos, for App Tracking Transparency where required on Apple devices, and for personalized advertising or similar choices where required by law, which you may withdraw in device or app settings); and (d) legal obligations.

5. How We Share Information

With other users you authorize: When you share a trollyy, join a group, or upload a group loyalty card, members of that group (or users you share with) can see the relevant content according to in-app rules.

Public community features: Explore listings and public profile fields may be visible to other signed-in users. Private profiles limit what others can see when your content appears in community views.

Service providers: We use cloud hosting, authentication, database, storage, and related vendors (such as Supabase) that process data on our behalf under contractual safeguards.

Advertising partners: We share device and advertising-related data with Google (AdMob / Google Mobile Ads) and, through Google, with demand partners that fill ad inventory. Those partners process data under their own privacy policies to deliver, personalize (where permitted), and measure ads.

Legal and safety: We may disclose information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, or the integrity of the Service.

Business transfers: If we are involved in a merger, acquisition, or asset sale, your information may transfer as part of that transaction, subject to this Policy.

We do not share your email address with other users unless you choose to disclose it. We do not sell your personal information.

6. Advertising

The free Trollyy Service displays ads provided by Google AdMob (Google Mobile Ads). Ads may appear as banner units, interstitial screens, or other formats we enable in the app.

Google and its partners may use cookies, mobile advertising identifiers, and similar technologies to show ads, limit how often you see the same ad, combat fraud and abuse, and measure ad performance. Where personalized ads are allowed under applicable law and your choices, ads may be based on interests inferred from your activity across apps and sites.

On iOS, Apple may ask for your permission under App Tracking Transparency before we or our partners access certain data used for tracking across apps and websites owned by other companies. You can change that choice later in your device Settings. On Android, you can reset or limit your advertising ID in your device settings.

For more information about how Google uses data in advertising products, see Google's privacy policy and ads help resources (including options to manage ads personalization). You may also use platform controls such as Limit Ad Tracking / personalized ads settings on your device.

If we offer a paid subscription or other paid options that remove ads, those features will be described in the app at the time of purchase.

7. Data Retention

We retain account and synced data while your account is active. If you delete your account or ask us to delete data, we will delete or anonymize personal information within a reasonable period, except where we must retain it for legal, security, or backup purposes.

Explore sale listings expire automatically after the sale end date you set or after a short visibility window (typically 48 hours from the last bump when no end date is set), after which they are removed or no longer shown.

Trollyys with no updates for an extended period may be archived automatically; archived trollyys remain stored until you restore or delete them.

Guest data on your device persists until you clear app data, uninstall the app, or exit guest mode in a way that clears local storage.

Advertising partners retain ad-related data according to their own retention policies.

8. Security

We use industry-standard measures including encrypted transport (HTTPS), access controls, and row-level database security so users can access only data they own or that has been shared with them.

No method of transmission or storage is completely secure. You are responsible for choosing a strong password and keeping it confidential.

Loyalty card images may contain barcodes or account numbers. Share them only with groups you trust.

9. Your Choices and Rights

Profile: Edit your username, display name, avatar, and public/private visibility in Settings.

Permissions: Revoke location or photo access in your device settings at any time.

Advertising choices: Use device settings (such as App Tracking Transparency on iOS, or advertising ID / ads personalization controls on Android) and Google ads settings to limit personalized advertising. Limiting personalization does not necessarily mean you will see no ads; you may still see contextual or non-personalized ads.

Access and deletion: Signed-in users can permanently delete their account in Settings → Delete account. That removes your account and associated personal data from our systems, subject to limited retention needed for legal, security, or backup purposes. You may also contact support for other data requests; we may need to verify your identity.

Depending on where you live, you may have rights to correct, port, restrict, or object to certain processing (including profiling for advertising where applicable), or to lodge a complaint with a supervisory authority.

Optional product emails: We do not currently send optional marketing emails. If we introduce them later, we will provide unsubscribe or opt-out controls.

10. Children's Privacy

The Service is not directed to children under 13 (or the applicable age in your region). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

11. International Transfers

We and our service providers (including advertising partners) may process data in countries other than where you live. Those countries may have different data protection laws. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

12. Third-Party Links and Services

The Service may reference third-party stores, advertisers, or services, and may open or display content from advertising partners. We are not responsible for their privacy practices. Review their policies before interacting with them. Google's privacy practices for AdMob and related products are described in Google's privacy policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy in the app and update the effective date. Material changes may be communicated through the app or other reasonable means. Continued use after changes take effect means you accept the updated policy.

14. Contact Us

For privacy questions or requests, contact us via the support channel listed in the Trollyy app store listing or any in-app support option we provide. Please include enough detail for us to verify your account and respond.