Privacy Policy

Last updated: October 28, 2025

At Save&Serve, we take your privacy seriously. This policy explains how we collect, use, and protect your personal data in compliance with GDPR and other privacy regulations.

Data We Collect

Account Information

Name and email address (via Google authentication)
Phone number (optional, for order notifications)
User role (consumer or retailer)
Account creation and last login dates

Transaction Data

Order history and pickup codes
Payment method and transaction status
Pickup window times and locations
Items purchased and prices paid

Location Data

Approximate location (district level) - only when you enable proximity search
Shop addresses (for retailers)
We never track your real-time location in the background

Usage Data

Pages visited and features used
Sustainability stats (items saved, CO₂ reduced)
Review and rating data

How We Use Your Data

Service Delivery: To connect consumers with retailers, process orders, and facilitate pickups.

Communication: Send order confirmations, pickup reminders, and account notifications.

Personalization: Show nearby deals based on your location (only if enabled).

Analytics: Track your sustainability impact and improve our service.

Security: Prevent fraud, protect accounts, and ensure platform safety.

Legal Compliance: Fulfill legal obligations and enforce our Terms of Service.

Your GDPR Rights

Right to Access

Download all your data in JSON format anytime from Settings.

Right to Rectification

Update your information in Settings at any time.

Right to Erasure

Delete your account and all associated data from Settings.

Right to Object

Control marketing communications and data processing.

Data Sharing & Security

Who We Share With

Retailers: Order details (name, pickup code, items) to fulfill your order
Payment Processors: Stripe/PayPal for secure payment processing
Google: For authentication (we don't share additional data)
No one else: We never sell your data to third parties

Security Measures

Industry-standard encryption for data transmission (HTTPS)
Secure database with access controls and monitoring
Regular security audits and updates
Payment data handled by PCI-DSS compliant processors

Data Retention

Active Accounts: We retain your data while your account is active.

Order History: Kept for 7 years for tax and legal compliance.

Deleted Accounts: Most data deleted within 30 days. Some data anonymized for analytics.

Backups: May remain in backups for up to 90 days after deletion.

Cookies & Tracking

Essential Cookies: Required for login and basic functionality.

Analytics: We use minimal analytics to improve our service.

No Advertising: We don't use third-party advertising cookies.

Your Choice: You can manage cookie preferences in your browser.

For privacy-related questions or to exercise your rights:

Email: privacy@saveserve.app

Data Protection Officer: dpo@saveserve.app

Response Time: Within 30 days as required by GDPR

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or prominent notice in the app. Your continued use of Save&Serve after changes constitutes acceptance of the updated policy.