Privacy Policy

• Account information: your email address and, if you provide it, your name, phone number, and home/work address, used to sign you in and personalize recommendations.
• Shopping lists and items you create or add by voice or typing.
• Receipt images and extracted data: when you scan a receipt, the image is processed to extract the store, items, prices, and totals. You can choose whether to keep the receipt image itself for training/quality purposes.
• Location data: used only to find nearby stores when you search — either your device's precise location (with your permission) or an approximate location from your network, and any address you type in manually.
• Group information: if you create or join a group (e.g. family, flatmates), we store group membership and any shopping lists or receipts you choose to share with that group.
• Usage and contribution data: such as contribution points, submitted price/quality ratings, and feedback you send us.

• To operate core features: shopping lists, receipt scanning, store recommendations, and spending insights.
• To build a shared, crowdsourced price database that helps all users find better prices (receipt data contributes anonymized price points, not your personal identity, to this database).
• To generate personalized spending insights and store recommendations for you.
• To improve the accuracy of our receipt-scanning and store-search features.
• To communicate with you about your account or respond to feedback/support requests.

We rely on the following processors to operate the app. None of them are permitted to sell your data:

• Supabase — database, authentication, and file storage.
• Google Gemini, Groq, and OCR.space — used to process receipt images into structured text and data (OCR). Receipt images/text are sent to these providers solely to extract your purchase data.
• OpenStreetMap — used to find nearby stores based on coordinates; no personal account data is sent to it.
• Vercel — hosts the application.
• Upstash — used for rate-limiting infrastructure; does not receive personal data.

We do not sell your personal data. Data is shared only: with the third-party processors listed above (to operate the app), with other members of a group you explicitly choose to share a list or receipt with, and in anonymized/aggregated form (e.g. crowdsourced item prices) to power store recommendations for other users.

From the Profile tab in the app, you can at any time:

• Export your data as a JSON or CSV file.
• Delete your account, which permanently removes your bills, shopping lists, and personal data.
• Control camera, microphone, location, and notification permissions from your device settings.

If you are in the EU/UK, you have rights under GDPR including access, rectification, erasure, and data portability. Contact us using the details below to exercise these rights.

We retain your account and activity data for as long as your account is active. If you delete your account, your personal data is permanently removed, though anonymized contributions to the shared price database (which cannot be traced back to you) may be retained.

BestBasket is not directed at children under 13, and we do not knowingly collect personal data from children under 13.

We use industry-standard measures (encrypted connections, access controls, row-level database security) to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information.

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

For privacy questions or to exercise your data rights, contact us at mehranzareh@gmail.com.