Privacy Policy

The short version

Shopy DunDun is a grocery price-comparison tool for South African shoppers. You can build lists and compare prices without giving us any personal information — those lists stay on your device. We show no ads and run no third-party trackers or analytics. We don't sell your data, and we never share it with the retailers. If you sign in, you can delete your account and all its data at any time — from inside the app (Account → More → Delete account) or by emailing us.

Who we are (the data controller)

Shopy DunDun ("we", "us") is an independent grocery price-comparison service and a trading name of Gotiptap Ltd, a company registered in England and Wales (company no. 10802803), registered office 170 Avenue Road, Erith, England, DA8 3AZ, United Kingdom (VAT no. GB 363162902). Gotiptap Ltd is the data controller. For any privacy question or to exercise your rights, contact us at shopy@godundun.com. Because we operate from the UK, we act as a data controller under the UK GDPR and the Data Protection Act 2018; as our service is aimed at South African users, we also apply South Africa's POPIA. These laws are closely aligned and this policy is written to meet both.

What we collect, and why

• Nothing, if you stay signed out. Guest lists are stored only on your own device; they never reach our servers.
• When you sign in with Google: we receive your Google account's email address and display name, and a Firebase user ID. We use these to sync your lists across your devices, let you share a list with people you invite, and manage your plan (free / trial / premium).
• Your lists & preferences (items, quantities, chosen stores, favourites, price alerts) are stored in our database (Google Firebase) against your account so they sync and can be shared.
• Notifications (optional): if you turn on price-drop push notifications, we store your device's push token so we can send the alert. If you turn on email alerts/digests, we use your email address to send them. Both are off by default and you can turn them off anytime.
• Payments (Premium): if you subscribe, payment is handled by Stripe. We never see or store your card details — we hold only a Stripe customer reference and your subscription status, to manage your plan.

Our legal basis for using your data

What	Why	Legal basis
Account, lists, sync, sharing	To provide the service you asked for	Performance of a contract
Payments & subscription	To take payment and manage Premium	Performance of a contract
Price-drop push & email alerts	To send alerts you switched on	Your consent (withdraw anytime)
Weekly deals / digest emails	To send the newsletter you opted into	Your consent (unsubscribe anytime)
Keeping the service secure & working	Fraud/abuse prevention, reliability	Our legitimate interests

What we do NOT do

• We don't sell or rent your data to anyone.
• We don't share your data with the retailers we compare.
• We don't show third-party ads, and we run no analytics or tracking — no cookies beyond what's strictly needed to keep you signed in.
• We don't access your contacts, photos, location, or files.

Service providers (sub-processors) & where your data goes

We rely on a small number of trusted providers to run the app. Some process data outside South Africa and the UK (for example in the EU or United States) — where that happens it's covered by appropriate safeguards (such as the providers' Standard Contractual Clauses / UK transfer terms and their own data-processing agreements):

• Google Firebase / Google Cloud — sign-in, database, hosting, notifications, and server functions (EU/US).
• Stripe — payment processing for Premium (US/EU).
• SiteGround — sends our alert/digest emails and hosts the public price data (no account data).

Prices & product images

Prices are gathered from each retailer's own public sources and shown for comparison only — they're indicative and can differ in-store. Product images load directly from the retailers' own image servers when you view a product.

Sharing a list

If you share a list, the people you invite (and who join via your link) can see and edit that list and see your display name on it. You can stop sharing or remove the list at any time.

Data retention & how to delete your account

We keep your account data for as long as your account is active. Deleted lists go to a Trash and are permanently removed after 30 days.

To delete your account and all associated data, either:

• In the app: Account → More → Delete account — this permanently removes your account, lists, alerts, notification tokens and (if you subscribed) cancels your subscription; or
• Email shopy@godundun.com and we'll delete it for you.

Deletion is permanent and can't be undone. We may retain the minimum records we're legally required to (for example, payment/tax records held by Stripe) for as long as the law requires.

Your rights

Under the UK GDPR and POPIA you have the right to access your data, have it corrected or deleted, restrict or object to certain processing, withdraw consent (e.g. turn off alerts/emails), and receive a copy of your data (portability). To exercise any of these, email shopy@godundun.com — we'll respond within the time the law allows (one month under UK GDPR).

Complaints

If you're unhappy with how we handle your data you can complain to a regulator:

• UK: the Information Commissioner's Office (ICO) — ico.org.uk.
• South Africa: the Information Regulator — inforegulator.org.za.

We'd appreciate the chance to put things right first, so please contact us too.

Children

Shopy DunDun isn't directed at children under 13 and we don't knowingly collect their data.

Changes

We'll update this page if our practices change, and revise the date above.

Contact

Questions about your data? Email shopy@godundun.com.