1. Introduction
DealBreaker ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website at dealbreakerportal.com, and related services (collectively, the "Services").
Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by all terms of this Privacy Policy. If you do not agree with our policies and practices, do not use our Services.
Important: DealBreaker is intended for users aged 16 and older. By using our Services, you confirm that you are at least 16 years old.
2. Information We Collect
2.1 Personal Information
We may collect personal information that you voluntarily provide when you register for an account, subscribe to our services, or contact us. This information may include:
- Name and username - For account identification and personalization
- Email address - For account creation, login, and notifications
- Phone number - For M-Pesa payments and account verification
- Profile photo - For account identification
- Location information - For finding local deals (with your consent)
- Payment information - Processed securely through M-Pesa or payment processors
2.2 Automatically Collected Information
When you use our Services, we may automatically collect certain information, including:
- Device information - Device type, operating system, unique device identifiers
- Log information - IP address, browser type, access times, pages viewed
- Location information - With your consent, for local deals
- Usage data - Features used, actions taken, session duration
- Advertising ID - For analytics and app improvement
2.3 User-Generated Content
As a marketplace, we collect content you create:
- Product listings - Items you post for sale
- Product photos - Images of items you're selling
- Chat messages - Communications between buyers and sellers
- Reviews and ratings - Feedback on transactions
2.4 M-Pesa Transaction Data
When you make payments via M-Pesa, we collect and store:
- M-Pesa phone number
- Transaction code
- Transaction amount
- Transaction date and time
- Transaction status
We do not store your M-Pesa PIN or other sensitive authentication credentials.
3. How We Use Your Information
We use the information we collect for various purposes, including to:
3.1 Service Delivery
- Provide, maintain, and improve our Services
- Process transactions and send related confirmations
- Create and manage your account
- Allow you to post and manage product listings
- Connect buyers with sellers
3.2 Communication
- Send technical notices, updates, security alerts, and support messages
- Respond to your comments, questions, and requests
- Send promotional emails (only with your consent)
- Send push notifications (you can opt out in device settings)
3.3 Analytics and Improvement
- Monitor and analyze trends, usage, and activities
- Personalize your experience with our Services
- Improve app features and user experience
- Fix bugs and optimize performance
3.4 Security and Fraud Prevention
- Detect, investigate, and prevent fraudulent transactions
- Protect against unauthorized access
- Ensure compliance with terms of service
- Verify user identity when needed
4. Data Sharing and Disclosure
We may share your information in the following circumstances:
4.1 With Your Consent
We may share your information when you have given us explicit consent to do so.
4.2 Service Providers
We may share your information with third-party vendors, service providers, and contractors who perform services on our behalf:
- Payment Processing: Safaricom (M-Pesa), Google Play, Stripe, PayPal
- Analytics: Google Analytics, Firebase
- Hosting: Cloud hosting providers
- Email Delivery: SMTP servers
- Customer Service: Support platforms
4.3 With Other Users
When you post a listing or communicate with other users:
- Your username and profile photo are visible
- Your location (city/region) is visible on listings
- Your phone number may be shared for transaction purposes
- Your messages are visible to the recipient
4.4 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
4.5 Business Transfers
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
4.6 Aggregated Data
We may share aggregated or de-identified information that cannot reasonably be used to identify you.
5. Data Retention and Deletion
5.1 Retention Periods
| Data Type |
Retention Period |
Reason |
| Account Information |
Active account + 30 days |
Account management |
| Product Listings |
Active listing + 30 days |
Marketplace functionality |
| Chat Messages |
Active chat + 30 days |
Communication history |
| Transaction Records |
7 years |
Legal and tax requirements |
| Backup Data |
Up to 90 days |
Disaster recovery |
| Analytics Data |
26 months (Google Analytics) |
Trend analysis |
5.2 Account Deletion
When you delete your account:
- ✅ Account information is deleted within 30 days
- ✅ All listings are removed
- ✅ Chat history is deleted
- ✅ Profile photo is removed
- ⚠️ Transaction records are kept for 7 years (legal requirement)
- ⚠️ Backup data is deleted within 90 days
5.3 How to Delete Your Account
You can delete your account at any time:
6. Data Security
We implement appropriate technical and organizational security measures designed to protect your personal information.
6.1 Security Measures
- Encryption: SSL/TLS encryption for all data in transit
- Secure Storage: Encrypted databases with access controls
- Password Protection: Passwords are hashed and salted
- Access Control: Limited employee access to user data
- Regular Audits: Security assessments and updates
M-Pesa Security: All M-Pesa transactions are processed directly through Safaricom's secure payment gateway. We do not store your M-Pesa PIN or other sensitive authentication credentials on our servers.
6.2 Your Responsibility
While we strive to protect your information, you are responsible for:
- Keeping your login credentials secure
- Using strong passwords
- Logging out after each session
- Not sharing your account with others
7. Your Rights and Choices
7.1 Account Information
You may update, correct, or delete your account information at any time by logging into your account settings.
7.2 Location Information
You can enable or disable location services through your device settings at any time.
7.3 Marketing Communications
You may opt out of receiving promotional emails or SMS messages by:
- Clicking the "Unsubscribe" link in emails
- Updating your account settings
- Contacting us directly
7.4 Data Access and Portability
You have the right to request access to the personal information we hold about you and to receive it in a structured, commonly used, and machine-readable format.
7.5 Deletion Requests
You have the right to request that we delete your personal information, subject to certain exceptions (e.g., where we are required to retain information for legal compliance).
7.6 Delete Account
To delete your account, visit: https://www.dealbreakerportal.com/delete-account.html
8. California Privacy Rights (CCPA/CPRA)
8.1 Your Rights
If you are a California resident, you have the following rights:
- Right to Know: Request information about the categories and specific pieces of personal information we collect
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale of your personal information (we do not sell data)
- Right to Correct: Request correction of inaccurate personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
8.2 How to Exercise Your Rights
Contact us at: privacy@dealbreakerportal.com
9. GDPR Rights (EU Users)
9.1 Your Rights
If you are in the European Economic Area (EEA), you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion ("Right to be Forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive data in a portable format
- Right to Object: Object to certain processing activities
9.2 Data Protection Officer
Contact our DPO at: dpo@dealbreakerportal.com
10. Children's Privacy
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.
If you believe we might have any information from or about a child under 16, please contact us.
11. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Services and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
12. Third-Party Services
Our Services may contain links to third-party websites or services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.
Third-Party Services We Use
- Google (Firebase, Analytics, AdMob) - App analytics and infrastructure
- Safaricom (M-Pesa) - Payment processing
- Stripe/PayPal - International payments
- SMTP - Email delivery
13. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
14. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Effective Date: August 17, 2026