YellowTag is operated by me more cool Pty Ltd ("we", "us"). This policy explains what we collect and how we use it.
What we collect
Location — your device location shows deals near you, and every deal you post carries a pin that is public. The two apps get that pin differently, so both are described here. On Android, the pin is the location your phone reported at the moment you posted, and the app will not publish if your phone is more than 500 m from where the photo was taken. On iPhone, you can also post a photo from your library; when you do, we read the location and capture time your camera stored in that photo, and the pin is where and when the photo was taken — which may be somewhere you are not now. Either way the pin is meant to be the shop, so check it before you post. We do not track your location in the background.
Photos — deals are photos of price tags and products. On Android they are taken through the app's camera. On iPhone you can also choose one from your photo library, and we then read the location and capture time stored in it (see Location above). Photos are stored securely and shown to other users. Product recognition runs entirely on your phone — Vision on iPhone, a model that ships inside the app on Android — and nothing about the photo is uploaded for it.
What you write — the product name, store, notes and category you enter, and any comments you leave, are shown to everyone who opens that deal, alongside your display name.
Account details — if you sign in with Apple or Google we receive your name and email address. Browsing works without an account; posting and commenting require one.
Preferences — your chosen store chains and wishlist keywords, used to filter the map and target notifications you asked for. Your wishlist, saved deals and notification area are visible only to you.
Push token — if you enable notifications, we store a device token and your notification area to deliver alerts (max 2 instant alerts per hour plus an optional daily digest).
Where it lives
Data is stored with Supabase in Sydney, Australia (AWS ap-southeast-2). Photos are served through short-lived signed URLs. We also keep daily operational backups on secure, access-restricted equipment we control in Australia, plus an encrypted offsite copy that only we can decrypt. Backups are kept for 30 days.
What we don't do
We don't sell your data.
We don't use third-party advertising or tracking SDKs.
We don't process payments.
Retention & deletion
Deals expire from the map automatically (48 hours to 7 days depending on the store). You can delete your own posts and comments in the app. To delete your account and associated data, email sunmorning@gmail.com and we will action it within 30 days.
Deleting your account removes your profile and display name, your saved deals, your wishlist keywords, your notification area, your blocked-author list, and your votes. Deals you have posted and comments you have left stay where they are, with your name taken off — we keep them so that the conversations other people took part in stay readable, and because removing a deal would also remove the comments other people left on it. Nothing is kept for marketing. Where we are required to keep a record — for example a report you or someone else made about content — we keep only that record, and no longer than the law requires.