Privacy Policy

Last updated: 14 September 2026

CheapestFuel ("we", "our", or "the app") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, how it is used, and your rights regarding that data.

1. Data We Collect

Anonymous device session

• The app does not require you to create an account or provide an email address to use it.
• We create a pseudonymous Supabase session identifier on your device. It lets price alerts, price confirmations, and purchases work with our existing security rules without identifying you by name or email.

Location Data

• We request foreground location permission to centre the map on your current position and show nearby fuel stations.
• Your location is processed on-device only to centre the map. We do not store your location on our servers or track your movements.
• Location access is entirely optional — the app works without it, defaulting to a UK-wide view.

Fuel Interaction Data

• Favourite stations — stored on your device. They are not synced between devices.
• Price confirmations — when you confirm a fuel price, we record the station, fuel type, and price alongside the pseudonymous session identifier.
• Notification preferences — stored on your device. If you enable an alert, the relevant station and preference are also sent to our server, associated with the pseudonymous session identifier, so that we can send the alert.

Vehicle details

• Vehicle make, model, year, fuel type, tank size, consumption, and fuel level are stored on your device to calculate route fuel costs.
• If you choose registration lookup, the registration number is sent to our secure lookup service and the DVLA solely to retrieve vehicle details. We do not retain the registration number after the lookup.
• To show an optional vehicle image, we send make, model, and year to Car Images API. We do not send a registration number to that service.

Subscription & Purchase Data

• Subscription status (free or premium annual/lifetime) is managed via RevenueCat and synced to our database.
• We do not process or store payment card details. All payments are handled by Apple (App Store) or Google (Play Store) through RevenueCat.

Device & Technical Data

• Product analytics data — PostHog receives pseudonymous app usage events such as app opens, screens viewed, station selections, favourites, directions requests, notification settings, and premium conversion events.
• Analytics events are associated with the pseudonymous session identifier. We do not send email addresses, handles, station addresses, registration numbers, or precise location to PostHog.
• PostHog may receive standard app and device details such as platform, app version, operating system, and an anonymous device/session identifier. Geo-IP enrichment and session replay are disabled.
• Push notification token — an Expo push token registered when you enable notifications, stored on our servers to deliver price drop alerts.
• Platform (iOS/Android) — stored alongside your push token for delivery purposes.
• We do not use advertising IDs or fingerprinting for our own analytics.

2. Data We Do Not Collect

• We do not use analytics for advertising, sell analytics data, or use it to track you across unrelated apps or websites.
• We do not sell, rent, or share your personal data with data brokers or advertisers.
• We do not collect precise location history, registration numbers after lookup, or screen contents.
• We do not store your precise location history.

3. Third-Party Services

We use the following third-party services, each with their own privacy policies:

Supabase (authentication & database)

• Provides anonymous authentication and stores alert preferences, price confirmations, and subscription status where needed to operate the service.
• Hosted in the EU. Supabase Privacy Policy

Map providers (map rendering and directions)

• The native app uses Apple Maps on iOS and Google Maps on Android; the web app uses Mapbox. Your approximate location may be sent to the selected map provider when the map is displayed.
• We do not send personal identifiers to a map provider beyond what its SDK or operating system provides. See the Apple Privacy Policy, Google Privacy Policy, and Mapbox Privacy Policy.

DVLA and Car Images API (optional vehicle lookup and images)

• The DVLA receives a registration number only when you choose registration lookup. Car Images API receives only make, model, and year to return an optional vehicle image.

RevenueCat (subscription management)

• Receives a RevenueCat app-user identifier and purchase events to manage entitlements.
• Does not receive your email address from the current anonymous flow. RevenueCat Privacy Policy

PostHog (product analytics)

• Helps us measure installs, app engagement, feature usage, and premium conversion.
• We configure PostHog without touch autocapture, session replay, or Geo-IP enrichment. PostHog Privacy Policy

Google AdMob (advertising — free tier only)

• Displays non-personalised ads only. We have configured AdMob to request non-personalised ads exclusively.
• AdMob may collect device advertising identifiers as per Google's policies. Premium users see no ads. Google Privacy Policy

Expo (push notifications)

• Delivers push notifications via Apple/Google push services using an anonymous push token.
• Expo Privacy Policy

4. How We Use Your Data

• Provide the service — display fuel prices, save favourites on your device, calculate route costs, and deliver notifications you enable.
• Improve accuracy — aggregate upvote data to surface the most reliable prices.
• Manage subscriptions — determine your entitlements (free vs premium).
• Improve the app — use aggregated product analytics to understand which features are useful and where the experience can be improved.
• Operational alerts — we may send an internal notification when a premium purchase is completed, containing a pseudonymous identifier and purchase event. This is for operational monitoring only and is not shared externally.

5. Data Storage & Security

• All data is stored on Supabase infrastructure with row-level security (RLS) policies ensuring users can only access their own data.
• All data transmission uses HTTPS/TLS encryption.
• Authentication tokens are stored securely on-device using AsyncStorage with Supabase's session management.
• Cached subscription status is stored locally on your device for faster loading.

6. Data Retention

• Data associated with an anonymous session is retained only while needed to provide price alerts, process purchases, prevent fraud, or meet legal obligations.
• Push notification tokens are retained while an alert is enabled and are removed when the token becomes invalid or the associated alert is disabled.
• Fuel price history data (upvotes, tracked prices) is retained indefinitely in aggregated form to improve price accuracy for all users.

7. Your Rights

• Access — you can view and remove favourites and vehicle details stored on your device within the app.
• Deletion — you can remove local data by clearing your favourites and vehicle details or uninstalling the app. Disable an alert to stop its server-side alert preference. Users with a legacy account can delete it from the Account screen. You may also contact us to request deletion of data associated with a pseudonymous identifier.
• Notification control — you can enable or disable price drop notifications per station, or revoke notification permissions at the OS level at any time.
• Location control — you can revoke location permission at any time via your device settings. The app continues to function without it.

8. Children's Privacy

CheapestFuel is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy or your data, please contact us at:

Email: support@cheapestfuel.app