Privacy Policy

Seeker ("Seeker", "we", "us", "our") operates the Seeker mobile app (iOS bundle ID com.getseekerapp.ios) and the website seekerflips.com. Seeker helps people find vehicle listings already published on public marketplaces and track their own car flips. Seeker is not a dealership and is not a marketplace — it surfaces listings from other public sources so you can spot underpriced deals and record your flip activity.

For any privacy question or request, contact us at hello@seekerflips.com. We operate primarily from the UAE and serve users in multiple countries. Seeker is intended for users aged 18 and over.

We collect only the information needed to run Seeker and improve it:

• Account information: your name and email address when you create an account with Apple, Google, or email.
• Watchers and preferences: country, city or market area you watch, vehicle preferences, watchers, and alert settings.
• Location: approximate or precise location only when you grant permission, used to set your search or market area. Seeker works without it; you can pick a city manually.
• Photos: images you choose to attach to your own Flips journal entries. These are optional and not required to use Seeker.
• Device and push tokens: a push notification token (via Firebase Cloud Messaging / APNs) and basic device information such as device type, OS version, and app version, used to deliver alerts and keep the app working.
• Purchase and subscription status: purchase and entitlement status from the Apple App Store via RevenueCat, including trial and subscription events. We never receive or store full payment card numbers.
• Usage and diagnostics: in-app interactions, screens viewed, feature use, crashes, unhandled errors, and failure states (such as API or feature failures). Diagnostics may include technical details like device and app information, the screen you were on, and truncated error messages. They are not intended to include passwords or payment card data.
• Advertising identifiers: on iOS, Apple's IDFA is collected only if you allow tracking in the App Tracking Transparency prompt. This is described in detail in section 4. If you deny tracking, we do not collect IDFA.

We do not sell your personal data. Payment card numbers are never collected by us or sent to our processors — purchases are handled by Apple and RevenueCat.

• Provide and operate Seeker, including finding listings, watchers, and Flips.
• Personalize deal results, watchers, and market context.
• Send optional push notifications when a watcher or alert matches a listing.
• Activate and manage your subscription entitlements.
• Measure and optimize our own Facebook and Instagram advertising, as described in section 4.
• Run product analytics, crash reporting, and surveys to improve reliability, fix bugs, and provide support.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

Where GDPR or UK GDPR applies, we rely on contract to create your account and deliver the features you request, on your consent for optional permissions (such as location, notifications, photos, and tracking), on legitimate interests to keep Seeker secure, reliable, and improving, and on legal obligation where we must retain or disclose information by law.

On iOS, Seeker shows Apple's App Tracking Transparency (ATT) prompt at launch. The prompt uses this exact purpose string: "Seeker uses this identifier to measure ads and send app events to Meta."

Tracking is optional. The app works if you tap "Ask App Not to Track," and it works if you tap "Allow." There is no in-app tracking toggle.

If you allow tracking

• We collect Apple's IDFA.
• We set Meta's Advertiser Tracking Enabled flag.
• We may send that identifier together with the app events listed below to Meta (Facebook) to measure and optimize our own ads on Facebook and Instagram.

If you deny tracking

• We do not collect IDFA.
• The app still works normally.
• Meta may still receive aggregated or anonymized events and SKAdNetwork data without IDFA, as permitted by Apple's framework.

Meta app events we send

We send the following app events to Meta on iOS:

• App Launch
• Watcher Created
• Trial Started (StartTrial)
• Subscription Purchased (Subscribe / Purchase), including amount, currency (USD), and product_id

Automatic Meta app events may also fire. We do not currently send your name, email, or phone number to Meta — we do not use Meta Advanced Matching. This applies to iOS only; Android does not currently initialize the Facebook SDK. We do not show third-party ads inside the Seeker app. This measurement is for Seeker's own Meta marketing.

You can change your tracking choice later in iOS Settings → Privacy & Security → Tracking → Seeker.

We do not sell your personal data. We share information only with the service providers listed here, acting on our instructions to operate Seeker, and only as needed for that purpose.

• Apple (Sign-In, App Store, StoreKit) — authentication and in-app purchases.
• Google (Sign-In) — authentication.
• RevenueCat — subscription management and entitlement status.
• Firebase / APNs (Firebase Cloud Messaging) — push notification delivery.
• Mapbox — maps and location interface.
• Cloud hosting and backend infrastructure — running the Seeker API, database, and file storage.
• Meta / Facebook — advertising measurement and ad optimization. We share the app events listed in section 4 and, only if you allow tracking, Apple's IDFA. See facebook.com/privacy/policy.
• PostHog (PostHog Inc., US Cloud) — product analytics, surveys, crash reporting, and session replay. Text you type into inputs is masked; images, including marketplace listing photos, may appear in a replay as shown on screen. After you sign in, PostHog identifies you with your user ID and may associate email, name, profile location (country and city), and subscription status. See posthog.com/privacy.
• Third-party marketplace listing sources — publicly available listing data. We do not access your private messages or accounts on those marketplaces.

We may also disclose information when required by law or valid legal process, to protect the safety, rights, or property of users or the public, or with your consent or at your direction.

We keep your information while your account is active and for as long as needed to provide the service. Analytics, replay, crash, and survey data handled by PostHog is retained according to our and PostHog's retention settings, and is then deleted or anonymized. IDFA and Meta app events are retained by Meta according to its retention practices. When you delete your account, we delete or anonymize your personal data, except where we must retain limited records for legal, accounting, fraud-prevention, or backup purposes for a reasonable period.

• Access, correct, or export your personal data.
• Delete your account and data in the app: Settings → Delete account, or by emailing hello@seekerflips.com. See our account deletion page. Deleting your account deletes or resets your analytics identity going forward; previously collected analytics may be retained in aggregated or anonymized form where permitted by law.
• Change your tracking choice in iOS Settings → Privacy & Security → Tracking → Seeker. There is no in-app tracking toggle.
• Withdraw consent for location, notifications, or photo access at any time in your device settings.
• Manage or turn off alert notifications in Seeker Settings.
• Opt out of marketing emails using the unsubscribe link in any email.

To exercise any right, email hello@seekerflips.com. We respond within a reasonable timeframe and may need to verify your identity.

Seeker operates internationally, and your information may be processed and stored in countries where we or our service providers operate. Both Meta and PostHog are based in the United States, and data shared with them may be processed in the US. Where required, we rely on appropriate safeguards such as standard contractual clauses with our providers.

Seeker is not directed to children. We do not knowingly collect personal data from anyone under 13 (or under 16 where local law requires). Seeker is intended for users aged 18 and over. If you believe a child has provided us data, contact us and we will delete it.

We use industry-standard safeguards such as encryption in transit, access controls, and hosted infrastructure with security protections. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

We may update this policy as Seeker evolves. Material changes will be posted on this page with a new "Last updated" date. Continued use of Seeker after an update means you accept the revised policy.

Privacy questions, requests, or concerns: hello@seekerflips.com.