Privacy policy

1. What data we collect

Account: your email address, your password stored as a one-way hash (argon2 — the password itself is never stored and cannot be recovered), your interface language and the account's status.

Profile, all of it optional: display name, nickname, city, address, preferred branch, profile photo, date of birth, gender, food type, dietary preferences, shopping trips per month, preferred shopping days, and the number and ages of children in the household. None of these fields is required to use the service.

Shopping lists: the product names as you typed them or as we recognised them, quantities and units, and the comparisons you ran — including the total each chain showed at that moment.

Photographs of receipts and lists: the image is sent for processing, read, and the items extracted from it. The image itself is deleted the moment processing finishes and is never retained — including when the read failed.

Technical usage data: your IP address is checked for rate limiting and guest counting. It is not stored as a separate record linked to your account.

Guests: you can build a list and compare prices without an account. In that case we store only the list itself and an anonymous session identifier in a cookie.

2. What we use it for

To run the service: keep your list, price the basket and show you the result.

To identify you and protect the account — sign-in, email verification, password reset.

To improve product matching: free text we could not match to a product is stored with no identifier of who typed it, so matching can be added later.

Aggregate measurement of how the service is used — only if you have accepted the analytics category.

Showing advertising — only if you have accepted the marketing category.

We do not sell personal information and we do not pass it to advertisers.

3. Legal basis for processing

Processing the data required to deliver the service rests on performance of our agreement with you — without an email address and a password there is no account, and without your list there is nothing to compare.

Analytics and advertising rest on consent alone. It is asked for in advance, explicitly, and can be withdrawn at any time from the cookie preferences at the foot of this page.

Profile fields, including the demographic ones, are provided voluntarily. Withholding them does not prevent you using the service.

4. Sharing with third parties

Cloud provider (Amazon Web Services), in the il-central-1 region in Israel — hosting and storage.

Outbound email provider — sending verification codes and service messages. Receives your email address only.

Google Analytics — loaded only after you accept the analytics category. Before that the script is not loaded at all.

Google AdSense — loaded only after you accept the marketing category. Before that no request reaches the ad network.

Google Places and Geocoding — for address completion and branch locations. These calls are made from our server, so your browser does not contact Google directly.

Ad impression measurement is stored by us with no personal identifier at all: the banner's id, the event type and the time — and the table has no column that could hold an identity.

Information will be disclosed to an authority only where the law requires it.

5. Retention and deletion periods

Account: for as long as it is active. A deletion request marks the account deleted and blocks access immediately; full removal from the database happens after 30 days.

Guest session and the list built in it: 30 days from last activity, then deleted automatically.

Verification codes and reset links: 7 days, and each is single-use.

Revoked sign-in tokens: 30 days, for security and abuse investigation.

Receipt photographs: deleted when processing finishes, with no retention at all.

Comparison history: kept while the account exists so you can return to it. Deleted with the account.

6. Your rights

Access: you are entitled to know what information is held about you. Some of it is visible directly in your profile and your lists.

Correction: every profile field can be edited or cleared at any time.

Deletion: account deletion is available from your own screen and starts the process described under retention.

Withdrawing consent: the cookie preferences at the foot of this page turn analytics or marketing off at any moment. Withdrawal applies immediately to future loads.

Contact: any privacy request is answered at the address in the contact section.

You may also complain to the Israeli Privacy Protection Authority if you are unhappy with how we handled your request.

7. Cookies and tracking technologies

We use a small number of cookies, and every one of them is listed in the table below. The service sets no cookie that does not appear there.

Strictly necessary cookies are required to operate and cannot be switched off — without them there is no sign-in and no saved list.

Analytics and marketing cookies are off by default. They are set only if you accept them explicitly, and can be switched back off at any time.

Your choice is stored in a strictly necessary cookie called savesmart_consent, because otherwise we would have to ask again on every page load.

8. Information security

Traffic is HTTPS only, and every authentication cookie is HttpOnly and Secure — meaning it is not reachable from client-side code.

Passwords are stored as argon2 hashes with a unique salt. We do not hold your password and cannot recover it.

Photographs uploaded for processing are held in a private bucket, reachable only through a short-lived signed URL, and deleted when processing finishes.

The system has been through a security review and is rate limited at its sensitive endpoints.

No system is completely secure. If we discover a breach likely to affect you, we will act on the reporting duties the law places on us.

9. Use by minors

The service is not intended for children under 16 and we do not ask them to register.

The household children field in the profile refers to members of the registered user's household, for sizing the basket. It does not create an account for a child and collects nothing from the child.

If we learn that an account was opened by someone who does not meet the age condition, we will delete it.

10. Changes to this policy

This policy may be updated. A material change — a new purpose for the data, or a new third party — will be brought to your attention in the app before it takes effect.

The date of the last update appears at the top of this page.

Adding a new consent category re-asks the consent question rather than relying on an acceptance given previously for a different category.

11. Privacy contact

For any question or request about your information: privacy@kliksave.ai

We answer privacy enquiries as promptly as we can.

SaveSmart, Israel.