1. Who we are
Slippy is a community-powered grocery price service for Namibia, available as a website and installable app (together, the “Service”). It is operated by Slippy Inc (“Slippy”, “we”, “us”), which is responsible for your personal data as described in this policy.
This policy explains what we collect, why, who we share it with, and the choices you have. It applies to everyone who visits the Service or creates an account. Our Terms of service explain the rules for using Slippy.
2. Our promise
Slippy is built around one simple promise: help shoppers find better prices, then fund the Service with the price intelligence that activity creates, while your identity stays out of it.
- When a price from your receipt is published, it is stored without any link to your account. Other users see the product, store, price and date, never who paid it.
- The price intelligence we offer to businesses is built from these anonymous prices only. It never includes names, email addresses, receipt photos, your area or anything else that identifies you.
- We do not sell, rent or trade personal data.
3. What we collect
Information you give us
- Account details: your email address, a password (stored only as a secure hash by our authentication provider) and, if you choose, a display name.
- If you continue with Google: Google shares your name, email address and profile picture link with us. We use your name as your display name, which is never shown next to prices and which you can change or remove on your account page. Google never shares your password with us.
- Receipt photos: the images you upload. A receipt can show more than prices, for example the store, date and time, a till or cashier number, a loyalty or account number, or the last digits of a payment card. Please cover anything you don't want to share before taking the photo.
- Item photos (optional): after you share a receipt, we may ask for a photo of an item we couldn't recognise. We remove the photo's hidden details (such as location) when we store it. Please photograph just the product.
- Receipt details: what we read from the photo and what you check or correct: store and branch, purchase date and time, currency, totals and line items (description, quantity, price, discounts). When reading receipts we are instructed to leave out payment details, card numbers, loyalty or account numbers and cashier names.
- Your area (optional): a location you choose to filter prices to nearby stores, either by searching for a place, picking a point on a map, or using your device's location once. We store it rounded to about 100 metres, with a name and a distance. We never track your location in the background.
- Shopping lists and watchlist: the products you add, quantities and what you tick off.
- Price checks: whether you confirmed or flagged a price, the reason and any note you add.
- Product ratings: the stars (1 to 5) you give products.
- Messages to us: anything you send us by email.
Information collected automatically
- Sign-in data: session cookies that keep you signed in, and technical logs kept by our hosting and authentication providers (such as IP address, browser type and the time of a request), used for security and to keep the Service running.
- Usage needed to run the Service: for example how many receipts you uploaded recently (to apply fair-use limits) and the processing status of each receipt.
- Notifications (optional): if you turn on price-drop alerts, your browser gives us a push subscription (an address at your browser's push service and encryption keys) and we store it with your browser's name.
- Preferences on your device: your light or dark theme choice is stored in your browser, not on our servers.
We do not use analytics, advertising or social-media trackers, and we do not buy data about you from others.
4. How we use your data
- To provide the Service (performing our agreement with you): create and secure your account, read your receipts, let you check them, publish the prices, show prices near you, keep your lists and watchlist, and send the alerts you ask for.
- To show product ratings (performing our agreement with you): combine everyone's stars into an average, a breakdown and a count of verified buyers (people who have the product on one of their own receipts).
- To keep prices accurate (our legitimate interest in a reliable Service): match receipt lines to products, spot unusual prices, handle community flags, and let our administrators review a receipt photo when a price is disputed.
- To protect the Service (legitimate interest): prevent abuse such as fake or duplicate receipts, apply upload and voting limits, and investigate security problems.
- To build anonymous price intelligence (legitimate interest): see section 5.
- To communicate with you: answer your messages and send essential account emails (for example confirming your address or resetting your password). We don't send marketing email without your consent.
- To comply with the law and respond to lawful requests.
Where we rely on your consent, such as for your device location or notifications, you can withdraw it at any time in your browser or in the app.
5. Anonymous prices and price intelligence
When you confirm a receipt, each product line becomes a price observation: product, store branch, price paid, quantity, unit price and purchase date (and time, where printed). Observations are stored without your account, so they stay published even if you delete your account, as anonymous community data.
Slippy is funded by offering price intelligence built from these observations to retailers, brands, suppliers, researchers, media and public bodies. This may include average and lowest prices, price changes over time, comparisons between stores and areas, how often products are seen, and average product ratings. It may be provided as reports, dashboards or data feeds, for a fee.
To keep that anonymous, we:
- share only price observations, combined ratings and statistics derived from them, never account details, receipt photos, display names, your area, lists, watchlists, votes or anyone's individual ratings;
- do not share which observations came from the same receipt or the same person, and report store and area figures at a level where individual shoppers cannot be singled out;
- contractually prohibit recipients from trying to identify any individual from the data.
Aggregated or anonymised data that cannot reasonably identify you is not personal data, and we may use it for any lawful purpose, including after you leave Slippy.
7. Where your data is stored
Our database and file storage are hosted in the European Union (Ireland). Some service providers, including AI providers and hosting, may process data in other countries, such as the United States. When data leaves Namibia or the EU, we rely on our providers' contractual safeguards to protect it to a comparable standard.
8. How long we keep data
- Account data, lists, watchlist and area: until you delete your account.
- Receipt photos: up to 12 months after upload, so that disputed prices can be checked, then deleted. The details read from them stay with your account until you delete it.
- Item photos: until you delete the receipt or your account. A copy used as a product's picture stays in the catalogue, without any link to you.
- Raw output from the AI provider (kept for diagnosing errors): up to 90 days.
- Votes, ratings and alerts: until you delete your account. Notification subscriptions are removed when you turn alerts off or when your browser reports them as expired.
- Published prices: kept indefinitely as anonymous data (see section 5).
- Security logs kept by our providers: for their standard periods, typically a few weeks.
When you delete your account, we delete your profile, receipts, receipt and item photos, lists, watchlist, votes, ratings, alerts and notification subscriptions. Copies in backups are deleted when those backups expire.
9. Security
Data is encrypted in transit (HTTPS) and at rest by our hosting provider. Receipt and item photos are stored privately and can be opened only by you and, when needed to check a price or a product, by our administrators. Database rules make sure each user can read only their own receipts, lists, watchlist and votes. Passwords are stored as secure hashes. No system is perfectly secure; if a breach affects your personal data, we will tell you and the relevant authorities as the law requires.
10. Your rights and choices
Wherever you live, you can ask us to:
- give you a copy of the personal data we hold about you, in a portable format;
- correct data that is wrong or incomplete;
- delete your account and personal data;
- stop or limit a particular use of your data, or object to it;
- withdraw a consent you gave.
Email privacy@slippy-save.com from the address on your account. We will respond within 30 days and may need to confirm your identity. Because published prices are anonymous, we cannot find or remove individual prices by person once they are published, except prices from receipts still in your account.
In the app you can also, at any time:
- change or clear your area under Account;
- turn price-drop alerts on or off for each device;
- edit or delete your lists and watchlist, take back a price vote, and change or remove a product rating;
- withdraw a price from your own receipt if it was wrong.
If you are unhappy with how we handled your data, please contact us first. You may also complain to a data protection authority where you live.
12. Children
Slippy is not intended for children under 16, and they may not create an account. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy as Slippy evolves or the law changes. We will change the “last updated” date above and, for important changes, tell you in the app or by email before they take effect. We will never weaken our promise that published prices are anonymous and that we do not sell personal data without first asking for your consent.
14. Contact us
Slippy Inc
Email: privacy@slippy-save.com