Privacy Policy

Effective date: 10 April 2026

This Privacy Policy explains how HashCoreAI ("we", "us", "our") collects, uses, stores and shares personal data when you use the UKPrice mobile application (the "App"). It is written to be clear and readable, and to satisfy our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as well as the EU General Data Protection Regulation where applicable.

If anything in this policy is unclear, please email us at contact@hashcoreai.com and we will do our best to explain it in plain language.

1. Who we are

UKPrice is operated by HashCoreAI, a sole proprietorship based in the United Kingdom.

For the purposes of UK GDPR, HashCoreAI is the data controller for the personal data described in this policy. Where we rely on third-party service providers (such as Google Firebase), those providers act as data processors on our behalf, or as independent controllers for their own platform data, as explained below.

2. Scope of this policy

This policy applies to personal data we collect through the UKPrice app on iOS and Android. It does not apply to:

3. What data we collect

We try to collect as little personal data as possible. The categories below describe everything the app touches.

3.1 Account data (via Firebase Authentication)

If you sign in with an account, we receive:

If you use Anonymous sign-in, we only create a random UID. No email, name or photo is attached to it.

If you use Sign in with Apple, Apple may give us a relay email address rather than your real email — that is fine and we treat it the same way.

3.2 App content data (via Firebase Realtime Database)

When you use the app, we store:

This data is stored against your UID so we can show you your own favourites and trigger your own alerts.

3.3 Location data

If you grant location permission, the app uses your current device location to:

  1. Show nearby petrol stations on the map and sort them by distance.
  2. Evaluate radius-based price alerts on the server when prices update.

We do not continuously track your location, and we do not store a history of your movements. The only time a location is written to our database is when you create a price alert and tell us where that alert should apply — in that case, the alert's lat/lng is stored as part of the alert configuration until you delete it.

Location is never sold, shared with advertisers, or sent to any third party other than Google Maps SDK (which processes location locally on your device to render map tiles, subject to Google's own privacy policy).

3.4 Device and diagnostic data

3.5 Network data (via Cloudflare Worker proxy)

The app fetches fuel price data through a Cloudflare Worker that proxies the gov.uk Fuel Finder scheme. Cloudflare may briefly log your IP address as part of its standard edge logging, in line with its own privacy practices. We do not store IP addresses ourselves.

3.6 Push notification tokens (FCM)

To deliver price alert notifications, we store the Firebase Cloud Messaging (FCM) token issued to your device. The token is linked to your UID. If you sign out or uninstall the app, the token becomes invalid and is no longer used.

4. What we do not collect

To be explicit, UKPrice does not collect:

5. Why we collect data and our legal basis

Under Article 6 of the UK GDPR, we must have a lawful basis for processing personal data. Here is the basis for each category:

Data Purpose Legal basis (UK GDPR Art. 6)
Account data (email, name, photo, UID) Let you sign in, sync favourites and alerts across devices, manage your account Contract — Art. 6(1)(b), needed to provide the service you requested
Favourites and alerts Save your choices so the app works as you expect Contract — Art. 6(1)(b)
Location Show nearby stations, evaluate radius alerts Consent — Art. 6(1)(a); you may withdraw consent any time by revoking the permission
Push tokens (FCM) Deliver the notifications you opted into Consent — Art. 6(1)(a); you may disable notifications any time
Firebase Analytics Understand which features are used, fix usability problems Legitimate interests — Art. 6(1)(f); improving the app
Firebase Crashlytics Diagnose crashes and fix bugs Legitimate interests — Art. 6(1)(f); keeping the app stable
Cloudflare edge logs Keep the proxy stable and prevent abuse Legitimate interests — Art. 6(1)(f); security

Where we rely on legitimate interests, we have considered your rights and believe our processing is proportionate and would be reasonably expected. You may object to processing based on legitimate interests at any time (see section 9).

6. Who we share data with

We do not sell your personal data. We share it only with the providers we need in order to run the app.

6.1 Google (Firebase, Google Maps, Google Sign-In)

6.2 Apple

6.3 Cloudflare

6.4 UK Government (gov.uk Fuel Finder)

We do not share your data with advertisers, data brokers, analytics resellers, or social networks.

7. International transfers

Google, Apple and Cloudflare are US-headquartered companies and may process data outside the United Kingdom or the European Economic Area. Where data is transferred outside the UK, we rely on:

You can read more in each provider's privacy policy linked in section 6.

8. How long we keep your data

If you delete your account via the in-app "Clear & sign out" option, your profile, favourites and alerts are removed from our Realtime Database. Residual copies may exist briefly in backups and will age out on normal backup rotation cycles.

9. Your rights under UK GDPR

You have the following rights in relation to personal data we hold about you:

How to exercise your rights

Email contact@hashcoreai.com with a clear description of what you'd like us to do. We will respond within one month as required by UK GDPR. We may ask you to confirm your identity before we act on a request, to protect your data.

Complaints to the ICO

If you are unhappy with how we have handled your data, you can contact the ICO:

We would appreciate the chance to resolve your concern directly first, but contacting the ICO is always your right.

10. Children

UKPrice is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please email contact@hashcoreai.com and we will delete it.

Users aged 13–17 should review this policy with a parent or guardian before signing in.

11. Security

We take the security of your data seriously. Measures include:

No system is perfectly secure. If you suspect a security problem, please email us immediately at contact@hashcoreai.com.

12. Data breach notification

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

  1. Notify the ICO within 72 hours of becoming aware, as required by UK GDPR Article 33.
  2. Notify affected users without undue delay where the breach is likely to result in a high risk, under Article 34. Notifications will be sent via in-app message and/or the email address linked to your account.

13. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

14. Changes to this policy

We may update this Privacy Policy from time to time, for example if we add a new feature or change a provider. When we do, we will:

The current version is always available at the URL linked from inside the app.

15. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Thank you for using UKPrice.

← Back to home