We only collect what the product actually uses. We do not invent extra profiles or sell your data.

Account. Email address, username, password (stored as a hash by Convex Auth — we cannot read your password), optional display name, and email-verification / password-reset codes that expire after a short time. We record when your email was verified.

Preferences you set. Email-update opt-in, font size (Small / Medium / Large), hide casino & spins, hide NHS/Forces or student discount chips, goal-tracker visibility, ending-reminder and Switch renewal alerts, onboarding completion, time-out end date, and per-flow “less help” choices for comps, Blueprint phases, and guides.

Tracker logs. Offers and comps you mark as entered or complete, including title, URL, category, dates, amounts you type in, shopping / cashback / receipt details you add, matched-betting notes, and stacking-session notes. We also store competition entry stamps and flags you raise on listings (expired, not free, and similar).

Switch reminders. Renewal categories and dates you save (for example energy or insurance), optional provider names, and savings amounts you log. Older accounts may still hold a mortgage lender / fixed-rate end date if you entered one.

Coupons & store flags. Coupon balance, lifetime earned, level-related fields, and whether an ad-free pass is active. In-app ads are not currently shown; paid in-app purchases are not live.

Feedback. If you use Send feedback while logged in, we store the type, subject, message, your email/username, app version, and platform (iOS, Android, or web) so we can reply and fix bugs.

Outbound click records. When you open a partner offer from the app, we log the partner, the URL we opened, the listing, a timestamp, and your user id if you are signed in. This is for our own attribution (which links were used). We do not run advertising cookies or send that log to the partner as a data sale.

Website waitlist. If you join the store-release waitlist on freewins.uk, we store that email and send a confirmation so we can tell you when anyone can download from the public stores.

Community votes. Expiry-date votes and “not free” reports are stored against the listing with your user id so we can prevent duplicates and keep lists honest.

Device push tokens. If you allow notifications on iOS or Android, we store an Expo push token for that device so we can send Tracker ending / reminder alerts and Switch renewal dates. Tokens are account-scoped. We remove them if you turn Ending reminders off, delete your account, unregister the device, or Expo reports the device is no longer registered. Web does not store a push token.

Contract. To create your account, keep you signed in, show your Tracker, preferences, coupons, and the listings you use.

Consent. Optional email updates (the checkbox at sign-up, which you can clear in Preferences). Waitlist emails if you submit the website form. You can withdraw consent by turning the toggle off or emailing us.

Legitimate interests. To hide casino content when you ask, honour a time-out, keep listings accurate from your flags, understand which partner links were opened, and improve the app from feedback.

Legal obligation. To respond to a valid data-rights or law-enforcement request.

App and account data live in Convex, our hosted database and backend. Transactional and newsletter emails are sent with Resend from freewins.uk addresses. The public website is hosted on Netlify. We scrape publicly available offer pages (via Firecrawl) to refresh listings — that process does not send your account data to those sites.

Convex and email infrastructure may process data outside the UK. Where that happens we rely on appropriate UK GDPR safeguards from those providers.

We do not sell your personal data to bookmakers, banks, or competition hosts. If you tap a listing, you leave FreeWinsUK and that site’s own privacy policy applies to whatever you type there. Some links are affiliate or referral links so we may be paid if you complete their offer. The partner sees a normal website visit — not an export of your Tracker.

We do not use third-party advertising cookies. On the website we use the browser’s localStorage to keep an auth session if you sign in (for example the admin portal). In the app we use SecureStore on the device for the same purpose. Appearance (light/dark) is stored locally by the app. Font size is stored on your account so it follows you.

FreeWinsUK is for people aged 18 or over in the UK. We do not knowingly create accounts for children. If you believe a minor has registered, email liam@freewins.uk and we will delete the account.

We keep account and Tracker data while the account exists. Short-lived verification and reset codes expire automatically. Waitlist emails are kept until you ask us to remove them or we close the list. After you delete your account we erase the data listed in section 8 from our live database.

You can delete your account in the app: tap your name in the header → Your Data → Delete Account. That permanently removes your profile, login, Tracker logs, competition entries, listing flags, switch reminders, Expo push tokens, scheduled ending-reminder and renewal-reminder jobs, in-app feedback you sent, outbound click rows tied to you, waitlist row for that email, and your votes on listings.

You can also request deletion on the web (no app required) at freewins.uk/delete-account, or email support@freewins.uk from the address on the account. We will complete email requests as soon as we can verify they come from you.

You can ask to access, correct, or erase your personal data, restrict or object to certain processing, and request a copy. Withdraw email-update consent in Preferences at any time. To use these rights, email liam@freewins.uk.

You can complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk.

Data protection and privacy: liam@freewins.uk. Support: support@freewins.uk. Operator: Liam Doyle, United Kingdom.