Zero Personal Data Policy

What we never collect

• Your real name — a nickname or email prefix is plenty.
• Your phone number — we don't ask, ever.
• Background location — nothing is tracked unless you explicitly tap a check-in button.
• Your contacts, photos, or anything else on your device.
• Search history tied to your identity — searches are counted for quota enforcement only.

The basic search bar works with no account at all.

Anonymous check-ins (Waze-style)

Foot-traffic check-ins are active, never passive. When you tap “I'm here spying prices”, we store an anonymous count against that store — no GPS coordinates, no identity. Other shoppers only ever see how busy a store is, never who is there. Check-ins expire automatically after 90 minutes.

What we do store (only if you sign in)

• Account: your email address (via email sign-up or Google sign-in).
• Search quota: a count of searches used to enforce the free and paid tiers.
• Subscription: your Stripe subscription status and renewal date.

Receipt rewards & the Data Dividend

Receipt scanning is opt-in and pays you cash. When you upload a receipt we read the printed item lines, barcodes, prices, store and city — and nothing else. Before any data is aggregated for brands we drop your name, card number, loyalty number and street address, and the resulting market data is grouped by store, city and region, never by person.

• You choose to scan — nothing is collected from you automatically.
• You can switch data sharing off at any time from the Rewards page; earning pauses and no further item data is aggregated.
• Brands buy anonymized regional demand — units sold per product, per chain, per city. They never receive shopper identities.
• You get paid for it: per-receipt cash back plus brand-funded bonuses, redeemable as a gift card at the store you choose.
• Receipt photos are held in private storage for verification only and are deleted with your account.
• Retention limit: receipts and the anonymized item statistics built from them are automatically deleted after 3 years. Cash back is paid on purchases from the last 90 days; anything older is archived as trend data only, without payout.

The optional household panel

You may volunteer an age band, gender, household size and whether children live at home. It is entirely optional, it is stored as coarse bands only — never a birthday, a name or a street address — and it earns a small bonus on every receipt because banded data is worth more to brands.

• Reporting is aggregate only: item, brand, chain, country, region, town, year, plus the coarse household bucket.
• Any cohort with fewer than 25 receipts is withheld from reports instead of shown, so a small town cannot be narrowed down to a person.
• Delete your household details from the Rewards page at any time; the bonus stops and nothing further is bucketed.

Shopping Buddy lists

Lists you type or photograph are priced against live retailers and are not sold. A photographed list is read for line items and is not kept as an image.

Your controls

Delete your check-ins, or request full account deletion by contacting support from your account email. Deletion removes your profile, search quota, subscription records, and check-ins.