Privacy Policy

Last updated: 11 August 2026

1. Who we are

Underserved (underserved.app) is a product of Badis Agency Ltd. Badis Agency Ltd is the data controller for the personal data described in this policy. You can reach us at support@underserved.app.

2. What data we collect

• Account data: your email address, your display name, and either a hashed password. We never see or store your password in plain text.
• Usage data: which apps and categories you analyse, your search queries inside the product, your credit balance and credit transactions, and the status of your analysis jobs.
• Technical data: server logs containing IP address, user agent and request path, kept for 30 days for security and abuse prevention.
• Public app-store data: review text, star rating, date, country, language and app version, collected from the public pages of the Apple App Store and Google Play. We do not store the names or profile identifiers of the people who wrote those reviews.

We do not ask for and never receive your App Store Connect or Google Play Console credentials. We only read data that is already public.

3. Why we collect it (legal basis)

• Contract (Art. 6(1)(b) GDPR): to create your account, run the analyses you ask for, and manage your credits.
• Legitimate interest (Art. 6(1)(f) GDPR): to keep the service secure, prevent abuse, and improve the product.
• Legal obligation (Art. 6(1)(c) GDPR): to keep the records that tax and accounting law requires.

4. How long we keep it

• Account data: until you delete your account.
• Analysis results and app data: until you delete them or your account.
• Server logs: 30 days.
• Payment and invoice records: as required by law, normally 7 years.

5. Third-party processors

We share the minimum necessary data with:

• Polar Software Inc. (Polar.sh) — merchant of record. Handles checkout, payment and tax. They receive your email and billing details. We never receive or store your card number.
• DeepSeek — AI analysis of review text. Receives review text only. It never receives your name, email or account data.
• Our hosting provider — runs the servers and database that store your account and analyses.

6. Transfers outside the EU and UK

Our AI processor operates outside the EU and UK. Where data leaves the EU or UK we rely on the European Commission's Standard Contractual Clauses. Only review text is sent — never your identity.

7. Your rights

Under GDPR and UK GDPR you may request access, correction, deletion, restriction, portability, or object to processing. Write to support@underserved.app with the subject "GDPR Request". We reply within 30 days. You can also delete your account yourself at any time in Settings, which removes your account data and your tracked-app list.

8. Cookies

We set one strictly necessary cookie to keep you signed in, and we store your light or dark theme choice in your browser. We do not use advertising or cross-site tracking cookies.

9. No advertising, no selling of data

We do not sell your personal data, we do not share it with advertisers, and we do not use it to train AI models.

10. Complaints

If you believe we have handled your data wrongly you can complain to your local data protection authority.

11. Contact

Badis Agency Ltd — support@underserved.app. See also our Terms of Service and Refund Policy.