Privacy Policy

1. Information We Collect

Account Information (when you register)

• Username — your chosen display handle
• Full Name — used for your public profile and wrist check posts
• Email Address — used for account communications and marketing (if opted in)
• Phone Number — optional, used only if you choose to provide it
• Country — used to personalize content and dealer recommendations
• Password — stored in hashed form (bcrypt); we never store or see your plaintext password
• Watch Collection Preferences — favourite brands, collection size, and collector level (beginner / enthusiast / collector) that you optionally provide

Content You Create

• Wrist Check Posts — photos, watch brand/model, location (city and country), and captions you post publicly to the social feed
• Portfolio Watchlist — watches you choose to track in the Market Trends section

Information Collected Automatically

• Usage Data — features accessed, searches performed, and content viewed, used to improve the Service
• Device & App Information — device type, operating system version, app version, and crash reports for compatibility and debugging
• Log Data — IP address, access times, and referring URLs recorded by our servers
• Authentication Tokens — a secure JWT token stored locally on your device to keep you signed in
• Push Token — if you turn on notifications, a device token used only to deliver them; you can turn this off at any time in Settings

Location

• Only when you ask. SubDyL reads your device location in two places and only when you tap the control: “Near me” on the Dealers screen, and “Use my location” when composing a Wrist Check. It is never read in the background.
• Dealers. Your coordinates are sent to our server to find watch dealers near you. They are used for that request and are not stored against your account.
• Wrist Checks. Your coordinates are converted to a city and country, and only that city and country are saved and shown publicly on the post. Your coordinates are not stored.
• You can refuse. Declining the permission leaves both features working; the Dealers screen falls back to search, and a Wrist Check simply carries no location.

Information We Do NOT Collect

• We do not collect payment or financial information (SubDyL is free to use)
• We do not access your contacts or calendar
• We do not track your location in the background, or at any time you have not asked us to
• We do not use cross-app tracking identifiers for advertising

2. How We Use Your Information

We use the information we collect to:

• Create and manage your SubDyL account
• Display your wrist check posts and profile to other users
• Personalise your content feed, dealer recommendations, and watch finder results
• Provide market price trends and portfolio tracking features
• Power the AI Watch Finder recommendations based on your stated preferences
• Send transactional communications (account confirmation, password reset)
• Send marketing communications if you have opted in (see Section 3)
• Detect, prevent, and address fraud, abuse, and technical issues
• Analyse aggregate usage trends to improve the Service
• Comply with legal obligations

3. Marketing Communications

When you register for a SubDyL account, you will have the opportunity to opt in to marketing communications. If you opt in, we may send you:

• Watch news digests and featured articles
• New feature announcements
• Community highlights and wrist check features
• Marketplace deal alerts
• Watch industry event news and brand launches

If you opt in, your name, email address, and phone number (if provided) will be added to our marketing contacts list. We will never sell this data to third parties.

How to Opt Out

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email
• Contacting us at [email protected]

Please note that opting out of marketing communications does not affect transactional emails related to your account (e.g., account verification or important service updates).

4. How We Share Information

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

• Public Posts: Wrist check posts you create are displayed publicly to all SubDyL users, including your username, photo, watch details, and location (if provided)
• Service Providers: We use Firecrawl (a web scraping service) to search for live watch listings. Search queries are sent to their API. We also use Railway for hosting and infrastructure. These providers process data only as needed to deliver our Service
• Legal Requirements: We may disclose your information if required by law, court order, or governmental authority
• Business Transfers: If SubDyL is acquired or merges with another company, your information may be transferred as part of that transaction

5. Photos & Camera Access

SubDyL requests access to your device's photo library solely to allow you to upload photos for Wrist Check posts. We do not access your camera roll except when you explicitly choose a photo to share.

• Photos you upload are stored on our servers and displayed publicly in the Wrist Check social feed
• We do not use photos to train AI models
• We do not scan, analyse, or read metadata from photos beyond what is required for display
• You can delete your Wrist Check posts (and the associated photos) at any time

5a. Community Content & Moderation

Wrist Check posts and comments are public to everyone using SubDyL. We do not tolerate harassment, spam, counterfeit sales or illegal content. Every post and comment can be reported from its menu, and you can block any member so that neither of you sees the other's content. Reports are reviewed by a moderator within 24 hours; content that breaks our Terms of Use is removed and repeat offenders are banned.

6. Third-Party Content & Services

SubDyL aggregates content from third-party sources including:

• RSS feeds from watch publications, forums, and YouTube channels
• Marketplace listings searched via Firecrawl from Chrono24, eBay, and WatchRecon
• Reddit (WatchExchange, r/Watches) for community content
• YouTube for watch video content

When you tap a link to a third-party article, listing, or video, you leave SubDyL and are subject to that site's own privacy policy. We encourage you to read the privacy policies of any third-party websites you visit.

7. Data Storage & Security

Your account data, wrist check posts, and watchlist are stored in a secure PostgreSQL database hosted on Railway infrastructure. We implement the following security measures:

• All passwords are hashed using bcrypt before storage — we never store plaintext passwords
• Authentication is handled via short-lived signed JWT tokens
• All API communications use HTTPS encryption
• Access to our database is restricted to our application servers

While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your account information and content for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it by law. Anonymised aggregated usage data may be retained indefinitely.

9. Children's Privacy

SubDyL is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected] and we will delete that information promptly.

10. Your Rights & Choices

You have the following rights regarding your personal information:

• Access: You can view the information associated with your account within the app
• Correction: You can update your profile information at any time
• Deletion: You can permanently delete your account and all of your content from inside the app: Profile → Account → Delete account. Deletion is immediate and cannot be undone. You can also email [email protected] and we will delete it within 30 days.
• Opt-out of Marketing: See Section 3 above
• Data Portability: You can request a copy of your data in a machine-readable format

11. GDPR & CCPA Rights

European Economic Area (EEA) Users — GDPR

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
• Right to Restrict Processing: Ask us to limit how we use your data
• Right to Object: Object to processing for direct marketing or legitimate interests
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Our legal bases for processing personal data include: performance of a contract (account registration and service delivery), legitimate interests (improving the Service, preventing fraud), consent (marketing communications), and compliance with legal obligations.

California Users — CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we have collected from you
• The right to opt-out of the sale of personal information — We do not sell personal information
• The right to non-discrimination for exercising your CCPA rights

To exercise any of these rights, contact us at [email protected].

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you within the app and update the "Last Updated" date at the top of this page. Your continued use of SubDyL after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

← Back to SubDyL