Privacy Policy – Košarica AI
1. Controller
Prowebio, email: zasebnost@kosarica.ai.
2. What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, display name | Account, sign-in, sync | Contract (Art. 6(1)(b) GDPR) |
| Shopping lists, households | Lists and sharing | Contract |
| Receipts (photo if you keep it, recognised text with card numbers masked, line items), purchases | Spending analytics, predictions | Contract |
| Approximate location (rounded to ~100 m) or a town | Nearby stores, travel cost | Consent (Art. 6(1)(a)); remove it at any time |
| Selected loyalty programmes | Correct loyalty prices | Contract |
| Push token, notification settings | Price notifications | Consent |
| AI request metadata (tokens, cost, latency, status – no message content) | Usage limits, cost control | Legitimate interest (Art. 6(1)(f)) |
| Audit log of admin actions | Security | Legitimate interest |
Loyalty card numbers stay on your phone (Keychain); we never receive them. We never ask for your retailer account passwords. We use no advertising or tracking tools.
Anonymous price contributions (off unless you enable them): when you confirm a receipt, only the retailer, product, unit price and date are stored – not linked to you.
AI: assistant messages, list text, recognised receipt text (no image, card numbers masked) and dictation recordings are sent to the AI provider only to process your request. Recordings are deleted from the phone after transcription. AI features are currently switched off; we will name the AI provider here before switching them on.
3. Processors
Supabase Inc. (database, sign-in and file storage; data stored in the EU, in Ireland), Apple (Sign in with Apple, App Store, push notifications), Expo (push delivery) and RevenueCat Inc. (Košarica Plus billing, once available). Sign-in emails are sent from our own mail server, mail.prowebio.com. Transfers outside the EEA use standard contractual clauses.
Product photos are loaded directly from the retailers' image servers (e.g. mercatoronline.si, tus.si, lidl.si, dm-static.com, aldi.cx, eurospin.si, spar.si) and from Open Food Facts (images.openfoodfacts.org, France). Like any web image, this shows them your device's IP address; we send them nothing else.
4. Retention
Account data is kept while the account exists. Deleting the account deletes all personal data, including receipt photos. Sync error logs are kept 90 days, AI metadata 400 days (unlinked from deleted accounts), notifications 180 days.
5. Your rights
In the app (Profile → Privacy & data) you can export all your data, delete all receipts and delete your account. You have the rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may complain to the Slovenian Information Commissioner (www.ip-rs.si).
6. Children
The app is not intended for children under 15.
7. Contact
Questions about personal data: zasebnost@kosarica.ai. Support: podpora@kosarica.ai.