Privacy policy
Last updated 6 October 2026
This policy explains what personal data the AlertFlip app collects, why, who it is shared with, how long it is kept and the rights you have. It covers the AlertFlip app for iPhone and Android and alertflip.com.
Who we are
AlertFlip is run by ALERTFLIP LTD, a company registered in England and Wales (company number 17442266), registered office 82a James Carter Road, Mildenhall, IP28 7DE, United Kingdom. We are the controller of your personal data.
Questions or requests about your data: support@alertflip.com.
What we collect
| Data | What it is |
|---|---|
| Account | Your name, email address, a verified mobile number and your password (stored only as a secure hash). If you sign in with Apple or Google, the identifier they give us, and the email they share (Apple can give a private relay address). |
| Searches | What you ask AlertFlip to watch for: item keywords, models, price limits and filters, and the area to search: a place you choose, or your phone’s location if you allow it. |
| Alerts | Listings we found for your searches (these are public listings from marketplaces), which alerts were sent, and listings you save. |
| Inventory | Items you track, what you paid, costs, sale prices, profit, notes and photos you add. |
| Community feed | Posts, comments, photos, likes and follows. Posts, comments and your display name are visible to other AlertFlip users. Also any reports you make and people you block. |
| Subscription | Which plan you have, trial and renewal dates. Payments are taken by Apple or Google; we never see your card details. |
| Device and settings | A push-notification token for your phone, your alert settings (sounds, steal-deal margin, quiet hours and your time zone), and app version. If the app crashes, error details are saved on your phone only. |
| Messages | Emails you send to support, and messages you send through the contact form on alertflip.com: your name, email address, topic and message, with a scrambled (hashed) version of your internet address that we use only to stop spam. |
We do not use your data for advertising, we do not sell it, and the app contains no advertising or tracking tools. The website sets no cookies and uses no analytics.
Why we use it, and our legal basis
- To provide AlertFlip (your account, searches, alerts, inventory, feed and subscription): necessary to perform our contract with you.
- To answer you when you write to support or through the contact form: our legitimate interest in running a helpful service, and yours in getting a reply.
- To keep accounts secure (phone verification, password resets, preventing fraud and abuse) and to keep the community safe (filtering banned words, handling reports, blocking, suspending accounts that break the rules): our legitimate interests, and yours, in a safe and working service.
- Your phone’s location and notifications: only with your permission, which you can withdraw at any time in your phone’s settings.
- Records we must keep by law, such as for tax: legal obligation.
Who we share it with
We use these service providers to run AlertFlip. They process data only on our instructions:
| Provider | What for |
|---|---|
| Supabase | Database, sign-in and file storage, including contact-form messages |
| Twilio | Sending phone verification codes by SMS |
| Resend | Sending account emails (sign-up confirmation, password reset) and delivering contact-form messages to us |
| RevenueCat | Managing subscriptions with Apple and Google |
| Expo | Delivering push notifications and app updates |
| Hetzner | Our servers in Germany that run searches and send alerts |
| Cloudflare | Hosting our websites and forwarding email |
| Zoho | Our support mailbox |
| Apple and Google | Sign in with Apple / Google, app distribution, payments and delivering notifications |
Places and maps. When you type a place name in a search, or use your phone’s location, that text or position is sent to Photon (komoot), a public location-search service, to find or name the place. Maps in the app are drawn by Apple Maps (iPhone) or Google Maps (Android). These services receive your device’s internet address, but not your name or account.
Marketplaces. To find listings we query eBay, Gumtree and Facebook Marketplace with your search’s keywords, price limits and area. We do not send them your name, email, phone number or any other detail that identifies you.
We may also disclose data if the law requires it, or to protect our users, our rights or others from harm.
International transfers
Some providers store or process data outside the UK, including in the European Economic Area and the United States. Where data leaves the UK, it is protected by UK adequacy regulations (including the UK–US data bridge) or by the UK’s approved contract terms (the International Data Transfer Addendum).
How long we keep it
- Your account data, searches, inventory, posts and comments: until you delete them or your account.
- Listings found for your searches: listings that matched nothing are deleted after 7 days, and alerts after 14 days.
- Reports: deleted 12 months after they were made.
- Emails to support and contact-form messages: kept for up to 12 months.
Deleting your account
In the app: Settings › Delete account. It straight away deletes your account and sign-in details, your searches and alerts, inventory, saved listings, posts, comments, likes, follows, the reports you made, the people you blocked, your photos and your alert settings. You can also ask by email; see alertflip.com/delete-account. Deleting your account does not cancel a subscription: cancel it in your App Store or Google Play settings.
What is kept after deleting: reports other people made about your posts or comments (deleted 12 months after they were made), emails and contact-form messages you sent to support (up to 12 months), sign-in and security logs our providers keep for a limited time, copies in backups (removed within 30 days), and the purchase records Apple or Google keep under their own policies.
Your rights
Under UK data protection law you can ask to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy to move elsewhere. Where we rely on your permission, you can withdraw it at any time. Email support@alertflip.com; we reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.
Age
AlertFlip is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has an account, tell us and we will delete it.
Security
Data is encrypted in transit, access is limited to what each part of the service needs, and passwords are stored only as secure hashes. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.