Space27 Limited ("we," "us," or "our") operates the Price27 mobile application (the "App"). This Privacy Policy explains how we collect, use, share, and protect your information when you use Price27.
By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect
1.1 Information You Provide
- Account Information: When you create an account, we collect your name, email address, and authentication provider (Google, Apple, or email/password).
- Profile Settings: Preferences such as language, currency, location type, dark mode, and notification settings.
- Purchase Information: When you purchase credits, transaction records are stored (but payment details are processed by Apple/Google, not us).
1.2 Information Collected Automatically
- Device Location (with your permission): GPS coordinates and city, used solely to find nearby stores. Location data is included in each AI request but is not stored on our servers.
- Device Information: Device type, OS version, app version, language, and time zone for analytics and crash reporting.
- Usage Data: Number of searches performed, credit balance, ad views (for daily limit enforcement).
- App Check Tokens: Anonymous device attestation tokens (Apple DeviceCheck / Google Play Integrity) used to verify requests originate from a legitimate, unmodified Price27 app and to prevent abuse of our AI quota.
1.3 Search Queries
- Your search queries (text or image) are sent directly from your device to Google Gemini AI via the Firebase AI Logic SDK. Queries do not pass through our own servers.
- We do not store your search queries or images on our servers.
- AI responses are cached locally on your device (in AsyncStorage) for up to 7 days to improve performance and reduce duplicate AI calls. This cache is stored only on your device and can be cleared at any time.
- Google Gemini AI does not use your data to train AI models (per Google's Gemini API terms).
- When Google Search grounding is used to enrich results, Google Search may receive your query to return suggested sources, which are displayed in the App.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the App's core features (price search, AI recommendations)
- Authenticate your account and manage credits
- Detect your location to find nearby stores (with your permission)
- Process in-app purchases via Apple App Store / Google Play Store
- Display relevant advertisements via Google AdMob (free mode users only)
- Send transactional notifications (e.g., price drop alerts, if enabled)
- Improve the App through anonymized analytics
- Detect and prevent fraud, abuse, and unauthorized access
- Comply with legal obligations
3. Third-Party Services
We use the following third-party services. Each has its own privacy policy:
4. Data Storage & Security
- Where: Your account data is stored on Google Firebase servers (Asia-Southeast1 region: Singapore).
- Security: We use industry-standard encryption (HTTPS/TLS) for all communications. Firebase Security Rules restrict data access. Firebase App Check is used to verify that AI and credits requests originate from a legitimate Price27 app instance.
- Search Data: Your search queries are sent directly from your device to Google Gemini AI via the Firebase AI Logic SDK and are not stored on our servers. AI responses are cached locally on your device (AsyncStorage, up to 7 days) and never uploaded to our servers.
- Retention: Account data is retained as long as your account is active. You may request deletion at any time (see Section 7).
5. Sharing of Information
We do not sell your personal information. We share information only in these limited cases:
- Service Providers: With third parties listed in Section 3, only as needed to provide the App.
- Legal Compliance: When required by law, court order, or government request.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred (with notice to you).
- Aggregate/Anonymized Data: We may share anonymized, aggregated statistics that cannot identify you.
6. Your Rights & Choices
6.1 General Rights
- Access, update, or delete your account information via the App's Settings page
- Opt out of optional notifications
- Disable location permissions via your device settings
- Disable personalized ads via your device settings (iOS: Limit Ad Tracking; Android: Opt out of Ads Personalization)
6.2 GDPR Rights (EU/EEA/UK Users)
If you are in the European Economic Area or UK, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability (receive your data in a portable format)
- Lodge a complaint with your local data protection authority
To exercise these rights, contact us at the address in Section 11.
6.3 CCPA Rights (California Users)
California residents have the right to:
- Know what personal information is collected, used, and shared
- Request deletion of personal information
- Opt out of the sale of personal information (we do not sell your data)
- Non-discrimination for exercising your rights
6.4 Account Deletion
You can delete your account at any time from the Settings page. Upon deletion, all your account data will be permanently removed from our servers within 30 days.
7. Children's Privacy
Price27 is not intended for children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it promptly. Parents who believe their child has provided us with personal information should contact us.
8. International Data Transfers
Your information may be processed and stored in countries other than your country of residence, including Singapore (Firebase region), the United States (Google services), and other jurisdictions where our service providers operate. We ensure adequate protection through standard contractual clauses and other legal mechanisms required by applicable law.
9. Geographic Availability
Price27 is available in Europe, the United States, and most of Asia. The App is not officially available in mainland China. We do not actively distribute or market the App in China, but we cannot prevent users from accessing it via VPN or other means.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted within the App and the "Last Updated" date will be revised. Material changes will be communicated via in-app notification or email. Continued use of the App after changes constitutes acceptance of the updated policy.
The current Privacy Policy is stored on our servers and accessible via the App's Settings → Privacy Policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us at:
For GDPR inquiries, you may also contact our Data Protection Officer at: dpo@space27.dev
12. Cookies & Similar Technologies
The Price27 mobile app does not use browser cookies. However, our backend services may use device identifiers (IDFA on iOS, GAID on Android) for:
- Ad delivery and frequency capping (AdMob)
- Analytics
- Fraud prevention
You can reset or limit these identifiers via your device settings.
By using Price27, you acknowledge that you have read and understood this Privacy Policy.