Privacy Policy

Spaarvos is operated by Peter Sonneveld. You can contact us at hallo@spaarvos.nl or via the contact form on the website.

We collect the following data:

• •Account data (only when you register): email address, first and last name, username. Stored in Supabase.
• •Location data: your location is used temporarily to find nearby supermarkets. We do not store your location.
• •Search history: the products you search for are stored in anonymised form to provide better product suggestions.
• •Shopping lists: when logged in, your lists and comparison results are stored so you can access them later.
• •Savings: your calculated savings are stored locally in your browser (localStorage) and, when logged in, also in our database.
• •Newsletter: when you subscribe we store your email address. You can unsubscribe at any time via the link in the newsletter.
• •Price alerts: when you set a price alert we store your email address and alert settings.
• •Error reports: in case of technical errors, Sentry may collect anonymised error information.
• •Receipt and product photos: when you scan a receipt or a product, we send that photo to an AI service to read product names from it. We do not keep the photo afterwards.

We use your data exclusively for:

• •Comparing supermarket prices and displaying results
• •Storing and syncing your shopping lists
• •Sending price alerts and the newsletter (only when you have opted in)
• •Improving product suggestions based on anonymised search data
• •Monitoring the technical functioning of the app (Sentry)
• •Recognising products in a photo you scan yourself

We process your data on the following legal bases (GDPR):

• •Performance of a contract: account management, lists, price alerts
• •Consent: newsletter, push notifications
• •Legitimate interest: anonymised search statistics, error logging

We never sell your data. We work with the following processors:

• •Supabase (auth, database) — GDPR-compliant, servers in the EU
• •Vercel (frontend hosting) — GDPR-compliant
• •Railway (backend hosting) — US-based, standard contractual clauses apply
• •Sentry (error monitoring) — anonymised error data
• •Resend (transactional emails) — for price alerts and confirmation emails
• •Groq (AI) — receives your search terms and product names to normalise and match them
• •Hugging Face (AI) — receives the photo you scan and routes it to the compute partner running the model (Together, Fireworks, DeepInfra or Baseten)
• •OpenStreetMap (Nominatim, Overpass) — receives the address or coordinates you provide, to find nearby stores
• •Upstash (abuse protection) — uses your IP address as a key to rate-limit requests

About the AI services. We use AI models from an external provider for exactly two things: cleaning up the search terms you type, so that "milk" also finds the right cartons, and reading a receipt or product when you scan one. Your search terms go to Groq, the photo goes via Hugging Face to the party hosting the model. No other personal information goes to these models: your address or location, your email address, your account details and your saved lists stay out of it. We do not store that photo: it is processed, the recognised product names come back, and that is where it ends. These parties act as processors for us, under their own data processing terms — what they may do with API data is set out there. The model we use may change when a better one becomes available; the nature of the processing stays the same. Some of these providers operate servers outside the EU; standard contractual clauses apply.

• •Account data: while your account is active + up to 30 days after deletion
• •Shopping lists and comparison results: until you delete them
• •Search history (anonymised): up to 12 months
• •Newsletter data: until you unsubscribe
• •Price alert data: until you remove the alert

Under the GDPR you have the following rights:

• •Access: you can request what data we hold about you
• •Rectification: you can have inaccurate data corrected
• •Erasure: you can delete your account and all associated data via your profile page
• •Objection: you can object to processing based on legitimate interest
• •Portability: you can download an export of your data via your profile page (Settings → Export my data)

For access, rectification, objection or other rights: contact us at hallo@spaarvos.nl.

We use functional cookies for authentication (Supabase session cookies) and local storage (localStorage) for shopping history and settings. We do not place tracking or advertising cookies.

All connections are encrypted via HTTPS. Passwords are never stored — authentication uses email addresses and secure tokens (Supabase Auth). We apply HSTS, CSP and other security headers.

We may update this privacy policy from time to time. For material changes we will notify you via the app or by email. The most current version is always on this page.

Questions or complaints? Email hallo@spaarvos.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).