Privacy Policy
Last updated: 25 October 2026
What changed on 7 October 2026: we now explain how businesses' product and price lists are used (section 3 — we never sell or share them), and what happens to data if Deengle is sold (section 7). Nothing changed about customers' personal data: we still never sell it.
Deengle Limited (“Deengle”, “we”, “us”), company number 17424739 — the operator of deengle.com and the Deengle apps, reachable at support@deengle.com — is the data controller for personal data processed through the Service. This policy explains what we collect, why, and your rights under the UK GDPR and the Data Protection Act 2018.
1. What we collect
| Who | Data | Why |
|---|---|---|
| Business owners | Email address, password (hashed by our provider), business name and card content (logo, offers, prices) | To operate your account, publish your card, and contact you about the Service |
| Customers | A pseudonymous device identity (created automatically — no name, email or phone number is required), the businesses whose cards you save, and your check-ins: which business, date and time, stamps and rewards | To run the loyalty programme: count your visits, award stamps and rewards, credit referrals, and give the business visit statistics |
| Customers who enable backup (optional) | The email address from your Apple or Google account, and the list of businesses whose cards you saved | To let you restore your cards and stamps on a new device. Backup is optional — every feature works without it. Sign in with Apple lets you hide your real email. |
| Business owners | Your shop's location (the map pin you set when publishing) | Shown publicly on your card so customers can find you and discover you nearby |
| Business owners | Your Stock & menu list: item names, prices, descriptions, sections, photos, barcodes, quantities, best-before dates and private notes, and whether it is shown on your card | To back up and restore your list, send expiry reminders, show it on your card if you choose, and provide features inside Deengle (see section 3) |
| Business owners | Which version of our Terms you accepted, when, and from which account | A record of your agreement |
| Everyone | Basic technical logs (IP address, browser type) generated by our hosting provider | Security, abuse prevention and service operation |
Your location in the app
The app can show shops near you and notify you when you are next to a shop with a live offer. This works by downloading a public list of shop locations and comparing it with your position on your device. Your location is never sent to Deengle, never stored by us, and never shared with businesses — we could not tell you where you have been, because we do not know. If you grant "Always" location access, this same on-device check can also run in the background so you can be notified with the app closed. Location access is optional: the app asks first and works fully without it, access is controlled by your phone's iOS or Android permissions, and the feature can be switched off any time in the app's Settings under "Nearby offers".
Offers from shops
A shop whose card you have saved can post offers (for example "2-for-1 on Tuesdays"), which appear on its card and may be sent to your phone as a notification. You only receive offers from shops whose cards you saved, and you can mute a shop, turn notifications off, or remove the card at any time. Offers are sent to every holder of that shop's card alike — they are not chosen for you based on your behaviour or profile, and we show no adverts from anyone else.
2. What we don't do
- No advertising trackers, no analytics cookies, no selling or sharing of personal data or of businesses' product and price lists — to anyone, ever.
- We use browser storage (localStorage) only for strictly necessary purposes: keeping your saved cards, drafts, sign-in state and choices you make on your device. That is why there is no cookie banner.
- One exception, by consent only: if you arrive through a Deengle partner's link, we ask whether to remember that partner on your device for 60 days so they get credit if you sign up. Nothing is stored unless you say yes, and you can clear it any time by clearing your browser's site data.
- Customers can use loyalty cards without giving us their name or contact details.
3. Businesses' product and price data
A business's product and price list is business information. Each business chooses in Stock & menu whether its list is shown on its card or hidden. We use lists only to provide and improve the Service — backups, reminders, the card, and features inside Deengle such as comparing prices across shops in the app. We do not sell, license or share them with other companies (except as part of a sale of Deengle — section 7). See section 5 of our Terms.
4. Lawful bases
- Contract — operating the accounts, cards, check-ins and rewards you ask us to provide.
- Legitimate interests — service security, fraud prevention and improving the Service, balanced against your rights.
- Legal obligation — where we must retain or disclose information by law.
- Legitimate interests — if Deengle is sold or reorganised, transferring the Service and its data to the new owner so the Service can continue (see section 7).
5. Who processes your data
Deengle runs on Google Firebase (Google Cloud). Our databases and functions are hosted in Google's London region (europe-west2) where available. Google acts as our processor under its Data Processing Addendum, which includes UK-approved safeguards for any international transfers. Businesses see visit statistics and pseudonymous member records for their own shop only — never your activity at other shops.
6. Other services involved
- Sign in with Apple / Google sign-in — if you choose them, Apple or Google confirm your identity to us; we receive only your email address (or Apple's private relay address). Their own privacy policies apply to their side of the sign-in.
- Instagram — if you comment on one of our Instagram posts with a keyword such as "CARD", or send us a direct message, we use Instagram's official messaging API (Meta) to reply under your comment and send you a direct message with our setup link. To do that we receive and store your Instagram username, Instagram's ID for your account, the text of that comment or first message, and when it was sent — only so we can reply once and see which posts bring enquiries. We never use it for advertising, never sell or share it, and never message you again unless you write to us. Meta's own privacy policy applies to Instagram itself.
- Partner programme — if you apply to become a Deengle partner, we store your name, email, phone (optional), town or city, website or social link (optional) and what you tell us in your application, so we can review it. Once approved, we store the businesses that subscribed with your code and what you earned, and the payout details you give us (UK bank account, IBAN/SWIFT and address, or a Wise or PayPal email). Payout details are visible only to Deengle and used only to pay you.
- Email — account emails (verification, password reset) are sent via Google Workspace from noreply@deengle.com. If you start setting up a business but don't publish it, we may send up to two reminder emails about finishing; you can refuse these when you sign up, and every one has an unsubscribe link. We send no other marketing email.
7. If Deengle is sold
If Deengle, or all or part of its business or assets, is sold, merged or reorganised, personal data and businesses' data (including product and price lists) may transfer to the new owner so they can keep providing the Service. They must use it in line with this policy, and we will tell you before any change to how your personal data is used.
8. Retention
- Account and card data: kept while your account is active, deleted within 90 days of account deletion.
- Check-in codes: expire within minutes and are routinely purged.
- Visit records and statistics: kept while the related business account is active, as part of its loyalty ledger.
- Stock & menu lists: kept while the business account is active, deleted within 90 days of account deletion.
- Backup documents (your saved-card list): kept until you ask us to delete your account — email us and it goes within 30 days.
- Partner records (application, earnings, payouts and payout details): kept while you are a partner and for 6 years after your last payment, because UK tax law requires us to keep payment records.
- Instagram enquiries (username, comment or first message, time): kept for up to 12 months, then deleted automatically. Email us to have yours deleted sooner.
- Cards saved on your device stay on your device — clear your browser data or delete the app to remove them.
9. Your rights
You have the right to access, correct, delete and port your personal data, to object to or restrict processing, and to withdraw consent where processing is based on consent. Customers can delete their account and all associated data directly in the app (Settings → Account → Delete my account), or email support@deengle.com — we respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
10. Children
You must be at least 13 to use Deengle with a backup account, and 18 to hold a business account; we do not knowingly process personal data of children under 13, and we do not support parental-consent sign-ups. Customers who simply save cards and collect stamps are anonymous by design — we hold no name, contact details or date of birth for them and do no profiling. The only promotions they see are offers from shops whose cards they chose to save (see "Offers from shops" above), which they can mute at any time, and we show no third-party advertising. Location is off until they choose to turn it on. The app asks anyone connecting a backup account to confirm they are 13 or over. This data-minimised design is how we approach the ICO Children's Code.
11. Changes
We will post any changes to this policy here and update the date above. Material changes will be highlighted on the site and shown in the app, and business owners will be asked to accept them.
12. Contact
Data controller: Deengle Limited (company no. 17424739) · support@deengle.com