Privacy policy
Last updated: July 11, 2026
This policy describes how the FlashDeal mobile app and the getflashdeal.com website collect, use and protect your personal data, in accordance with the EU General Data Protection Regulation (GDPR).
1. Data controller
The data controller is Benjamin Pons, publisher of the FlashDeal app (see the legal notice). For any question about your data, use the contact form.
2. Data we collect
FlashDeal only collects the data needed to run the service:
| Data | Status | Purpose |
|---|---|---|
| Email address | Required | Account creation and security, sign-in, service communications |
| Username | Required | Public identification towards other users |
| Phone number | Optional | Making contact easier between buyer and seller during a transaction |
| GPS location | Required while using the app | Showing nearby deals, computing distances, geolocated publication of offers |
| Deal photos | Provided by the seller | Illustrating published offers |
| Chat messages | Generated by usage | Connecting buyer and seller within the app |
| Notification token (FCM) | Technical | Push notifications (reservations, messages, deal expiry) |
No banking data is collected: payments are made exclusively in person, outside the app, using whatever means the users freely choose.
3. Geolocation
Your GPS location is used to show you nearby deals and to place your own listings. It is only collected while the app is in use, after your explicit permission through the Android system. You can withdraw this permission at any time in your phone settings; some features (nearby discovery, map) will then no longer be available.
4. Legal bases
- Performance of the contract (Terms of use): account, publishing and reserving deals, chat, geolocation of offers.
- Consent: optional phone number, geolocation permission, push notifications.
- Legitimate interest: service security, fraud and abuse prevention.
5. Hosting and recipients
- App data (accounts, deals, photos, messages) is hosted by Supabase on servers located in the European Union.
- Push notifications are delivered through Firebase Cloud Messaging (Google Ireland Ltd). A technical device token is processed by Google for this purpose; this transfer is governed by the European Commission's standard contractual clauses and the Data Privacy Framework.
- This website is hosted by Cloudflare (see legal notice). The site is fully static and sets no tracking cookies. The contact form is protected by Cloudflare Turnstile, which may process technical data (IP address, browser characteristics) solely for bot detection.
Your data is never sold or rented to third parties. Other app users only see: your username, your published deals (photos, description, approximate location) and, if you provided and shared it, your phone number.
6. Retention periods
- Account: while the account is active, then deleted within 30 days of a deletion request.
- Expired deals: kept for a limited time for history and abuse prevention, then deleted or anonymised.
- Messages: kept as long as both users' accounts exist.
- GPS location: no location history is kept; only the location attached to a published deal is stored for the deal's lifetime.
- Contact form messages: kept while your request is handled, then deleted after 12 months at the latest.
7. Your rights
Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability of your data. You can exercise these rights at any time:
- through the website's contact form;
- directly in the app to delete your account, or through the dedicated Delete my account page.
You also have the right to lodge a complaint with your supervisory authority (in France, the CNIL — cnil.fr).
8. Security
Exchanges between the app and our servers are encrypted (TLS). Data access is restricted and protected by database-level authorisation rules (Row Level Security).
9. Minors
FlashDeal is restricted to people aged 18 or over, or 15 or over with the permission of their legal guardians.
10. Changes to this policy
This policy may be updated to reflect changes in the app or in regulations. The last-updated date appears at the top of this page; users will be notified in the app of any substantial change. In case of discrepancy between language versions, the French version prevails.