Privacy Policy

1. Who We Are

Orif-Trolley is operated by Orifiel Digital, a grocery budget-optimisation app designed for Irish families. We are committed to protecting your personal data and being transparent about how we use it. Our servers and database run on Google Cloud in Dublin, Ireland (europe-west1 region).

2. Age Restriction

Orif-Trolley is intended for users aged 16 and over. The Irish Digital Age of Consent under the Data Protection Act 2018 is 16. By creating an account you confirm you meet this requirement. If you believe a child under 16 has registered, please contact us at cs-support@orif-trolley.com so we can remove their data.

3. Data We Collect

We collect:

• Your account: your email address, display name and optional profile photo, and how you sign in (a password, or Google or Apple sign-in, from which we receive your name and email address).

• Your household: household name, size, monthly budget, savings target, county and area, and the stores you prefer.

• Your receipts: the store, date, items, prices and discounts read from each receipt, and the full text read from it. We keep the text so receipts can be read again as our receipt reading improves.

• What you add in the app: shopping lists, including their notes and sections; products you track, and your price alerts; personal and household expenses you log, and your personal budget if you set one; loyalty schemes you tell us you belong to; your last 10 searches.

• Settings and consents: your notification settings, and a device token used to send push notifications; your acceptance of these terms and its date; your choice about marketing emails.

• Location: optional coarse location (county and area only). Your precise GPS coordinates are never stored, and you can clear your location at any time in Settings.

• Messages to us: your name, email address and message when you use our website's contact form or account-deletion page.

Receipt images are transmitted securely and processed by the Google Cloud Vision API for text extraction only. Images are deleted immediately after processing and are never stored.

This data is kept with your account or your household, which are linked to your email address. That means it can be traced back to you, so we protect all of it as personal data.

4. Legal Basis for Processing (GDPR Art. 6)

(a) Contractual necessity: to provide core features: account management, receipt scanning, price comparisons, shopping lists and budgets.

(b) Legitimate interests: to maintain service security, detect fraud, and improve product quality using anonymised aggregated data.

(c) Consent: to send you marketing emails (optional). You can withdraw this consent at any time with the Marketing Emails switch in Settings → Preferences, or by contacting cs-support@orif-trolley.com. Withdrawal does not affect the lawfulness of processing before it.

5. Aggregate Analytics & Insights

We analyse shopping history and receipt data in aggregate to understand usage patterns and improve Orif-Trolley. Examples are average grocery budgets by household size, the stores our community shops at most, and periods of higher shopping activity.

This analysis is performed on data aggregated across many households. Its outputs do not identify any individual user or household. We do not share or sell these insights to retailers, advertisers or other third parties. Any statistic we publish, for example on our website, is shown only once at least 20 households contribute to it, so that no single household can be singled out.

6. What Other Users See

• Prices and product names read from receipts form a shared price catalogue. Other users see them without any identifying information: no other user can see who submitted a price or which household it came from.

• Words typed in shopping lists help suggest products to other households. A suggestion is only used once at least two households have made the same choice, and never shows who typed it.

• Members of your household can see its shared shopping lists and their notes, receipts, budget, savings and household expenses. Expenses you mark as personal are visible only to you.

• Coupons and personal offers printed on your receipts count in your own savings. They are never shown to other users as deals.

7. Third-Party Processors & Data Sharing

We use the following processors, each under a Data Processing Agreement:

• Google Cloud (europe-west1, Dublin): hosting, database and profile photo storage

• Google Cloud Vision API: reading receipt text

• Firebase (Google LLC): push notifications

• Resend Inc.: emails (verification, password reset, invitations, reminders)

• Google and Apple: sign-in, if you choose it

Firebase and Resend are US companies and may process data outside the EU. Where they do, the transfer is protected by the safeguards in their Data Processing Agreements, such as the EU Standard Contractual Clauses.

We do not sell your personal data, and we do not share identifiable personal data with any third party except the processors above or as required by law. Internally, each price observation stays linked to the receipt and household that reported it. We use that link to verify accuracy and investigate suspected fraud or misuse; it is never shown to other users or made public.

8. Data Retention and Deletion

We keep your account data for as long as your account is active. You can delete your account at any time from Settings → Delete Account:

• Always deleted: your account, profile photo, personal expenses, search history, loyalty memberships, alerts and notification settings, and messages you sent us from your account's email address.

• If you are your household's only member: its receipts, shopping lists, tracked products, household expenses and budget are deleted too.

• In a shared household: the household's shared receipts, lists and household expenses stay for the remaining members, without your name.

• Accounts that are never verified and hold no data are removed 21 days after sign-up.

Prices and product names you contributed stay in the shared price catalogue, without any link to you.

9. Your Rights (GDPR)

Under the GDPR you have the right to access, correct, erase, object to, restrict processing of, and port your personal data. To exercise any of these rights, contact us at cs-support@orif-trolley.com. You also have the right to lodge a complaint with the Data Protection Commission (Ireland) at dataprotection.ie.

10. Security

We use TLS encryption for all data in transit and secure hashing for passwords. Our servers and database are in the EU (Google Cloud, Dublin); section 7 lists the services that may process data outside the EU. We will notify you of any breach that affects your personal data.

11. Changes to This Policy

We may update this policy from time to time. We will notify you in the app when material changes are made, and continued use of the service will require fresh acceptance of the updated policy.

Contact

Orifiel Digital is the data controller for your personal data. For privacy-related questions or to exercise your GDPR rights, contact us at cs-support@orif-trolley.com.