Privacy Policy

Saveoury · Version 2.0 · Effective 23 October 2026

About This Policy

This Privacy Policy explains how Elevate Labs PTY LTD (ACN 703 177 002, ABN 20 703 177 002), trading as Saveoury, collects, uses, stores and protects your personal information.

We are based in Victoria, Australia. We voluntarily comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

In this policy, "Saveoury", "we", "us" and "our" refer to Elevate Labs PTY LTD.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address - for account creation, login, password reset, and service notifications
• Name and profile photo - when you sign in with Google, Apple or Facebook (we receive this from the provider)
• User ID - a unique identifier assigned to your account
• Age confirmation - confirmation that you are 18 years or older (we do not store your date of birth)

1.2 Shopping Lists and Watchlist

To provide the core service, we store:

• Shopping lists - list names, items, quantities, check status, completion history
• List groups - how you organize your lists
• Shared lists - when you share a list, we store the owner, recipients, and share status. Recipients can see the list owner's name and/or email address
• Watchlist items - products you're tracking for price drops and your target prices
• Savings history - records of money saved when you complete a list
• Product searches - search queries you enter when looking for products (stored temporarily to improve search results; included in analytics if analytics are enabled)

Some of this is also kept on your device so the app works quickly. It is stored per account and removed from the device when you delete your account.

1.3 Usage Analytics

To understand how people use the app and improve it, we collect (via PostHog EU):

• App events - actions like "list completed", "product searched", "watchlist item added"
• Product searches - the search terms you enter, product names you interact with, and which results you add to lists
• Screen views - which screens you visit (no content, just screen names)
• Device information - device model, operating system version, app version
• Account context - your internal user ID, whether you have Premium, and how you sign in (for example "Google")

Analytics are linked to your internal user ID. We never send your email address or name to our analytics provider. Before you sign in, events are linked to a random device identifier instead. Like any internet service, our analytics provider sees your IP address when events are sent and uses it to work out your approximate location (such as country or city). We do not record your screen - session replay is turned off.

You can switch analytics off at any time in Settings → Privacy & data → Analytics (see section 6.3). Analytics are disabled in development builds.

We also record when you were last active, so we can understand retention and let recently active people know when the service recovers from an outage.

1.4 Crash Reports and Error Monitoring

When the app crashes or encounters an error, we collect (via Sentry EU):

• Stack traces - technical details about what went wrong
• Your user ID - to identify patterns affecting specific users
• Device and OS information - to reproduce and fix device-specific issues

What we do NOT send to Sentry: your email, name, IP address, or any personal identifiers beyond user ID. We scrub this data before sending.

Crash reports are essential for keeping the app stable, so they cannot be disabled. They carry only your internal user ID, never your email or name.

1.5 Feedback and Support

When you submit feedback or report a problem:

• Your message - the issue description or suggestion
• Email address - so we can follow up if needed
• App version, device model, platform - to diagnose technical issues
• Screenshots - if you attach them (optional)
• Optional diagnostic IDs - PostHog session ID and/or Sentry event ID, if available and relevant to the issue

Feedback is stored in our database and a copy is posted to a private team channel (Discord) so we see it quickly. Both are deleted when you delete your account.

1.6 Push Notification Tokens

If you enable notifications, we store your Expo push token to send price alerts and shared list updates. You can disable notifications in your device settings at any time.

1.7 Anti-Abuse and Rate Limiting

To prevent abuse, we use Cloudflare Turnstile (a CAPTCHA service) on account registration, email login, and password reset. Turnstile may collect device and browser information to verify you are human. We do not store CAPTCHA responses ourselves.

We also track rate limits and free trial redemptions (using internal IDs only, no personal information) to prevent abuse of trial offers.

1.8 Payment Information

When you subscribe to Saveoury Premium, payment processing is handled by Apple App Store or Google Play. We never see or store your credit card details. We only receive:

• Transaction ID (to verify your purchase)
• Subscription status (active/expired)
• Purchase date and expiry date
• Subscription type (monthly or annual)

Payment processing is managed by our subscription management service, RevenueCat, which connects to Apple and Google on our behalf. RevenueCat receives only the information listed above, never your credit card details.

2. How We Use Your Information

3. How We Store and Protect Your Data

3.1 Infrastructure Providers

Your data is stored with trusted third-party providers:

• Supabase (Sydney, Australia) - database for lists, watchlist, account data, notifications. Data is encrypted at rest and in transit. Backups are stored in the same region.
• Sentry (EU region, de.sentry.io) - crash reports and error monitoring
• PostHog (EU region, eu.i.posthog.com) - product analytics
• Cloudflare - website hosting, anti-abuse protection (Turnstile), uptime monitoring, and the service that relays feedback to our team
• Resend (United States) - delivery of account emails (verification, password reset, deletion confirmation)
• Discord (United States) - private team channel where feedback is posted
• Expo (United States) - push notification delivery service (relay to Apple and Google)
• RevenueCat (United States) - subscription management for Apple and Google in-app purchases

3.2 Security Measures

• Row-Level Security (RLS) - database policies ensure you can only access your own data
• HTTPS/TLS - all data is encrypted in transit
• Secure authentication - passwords are hashed and never stored in plain text
• Recent sign-in for deletion - deleting your account requires signing in again, so a phone left unlocked can't be used to delete it
• Rate limiting and CAPTCHA - to prevent abuse and spam
• No export compliance issues - the app uses only standard encryption (HTTPS/TLS), not custom cryptography
• Admin access logging - any administrative access to accounts is logged for accountability

3.3 Data Retention

• Active accounts: data is retained as long as your account is active
• Deleted accounts: your account data is removed from our live database immediately when you delete in the app, or within 30 days of a verified emailed request. Copies in encrypted backups are overwritten within 30 days. A few limited records are kept - see section 6.2
• Crash reports: retained for up to 90 days for debugging, then automatically deleted
• Analytics: our analytics provider keeps events for 1 year; older events are no longer used. If you delete your account, we send a deletion request for your analytics profile and its events straight away, and our provider then removes them in the background
• Subscription records: transaction records may be kept for as long as tax and accounting law requires (currently 7 years in Australia)

4. Third-Party Services

4.1 Sign-In Providers

When you sign in with Google, Apple or Facebook:

• We receive your email, name, and profile photo from the provider (Apple may give us a private relay email instead of your real one)
• Your password stays with the provider - we never see it
• Read Google's privacy policy: policies.google.com/privacy
• Read Apple's privacy policy: apple.com/legal/privacy
• Read Meta's privacy policy: facebook.com/privacy/policy

4.2 Product Data

Grocery product names, prices, images, and details are sourced from third-party data providers. We do not share your personal data with retailers. They do not know what you add to your lists. Saveoury is not affiliated with Coles, Woolworths or ALDI.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information.

We share data only in these limited cases:

• With you - when you share a list, recipients see the list name, items, and owner's name and/or email address
• With service providers - the providers in section 3.1, only to operate the service. We require service providers to protect your data and use it only for the purposes we specify
• If required by law - to comply with legal obligations, court orders, or government requests
• To protect rights - to prevent fraud, abuse, or security threats
• Business transfers - if Saveoury is acquired or merged, your data may transfer to the new entity (you will be notified)

Overseas Disclosure (APP 8)

Some of our service providers are located outside Australia:

• European Union: Sentry (Germany), PostHog
• United States: Resend, Discord, Expo, RevenueCat, Cloudflare

We take reasonable steps to ensure overseas recipients comply with Australian privacy standards. Where required, we use standard contractual clauses or similar mechanisms. By using Saveoury, you consent to this overseas disclosure.

6. Your Privacy Rights

6.1 Access and Export

You can export your data at any time:

• Go to Settings → Privacy & data → Export my data
• Receive a JSON file with your profile, shopping lists, list items, list groups, watchlist, savings history, and shared lists you own

What is not included in the export: notifications, feedback submissions, crash reports, analytics events, or shared lists where you are a member (not owner). These are system records or managed by third parties.

6.2 Delete Your Account

You can permanently delete your account and the data linked to it - in the app, or by email if you no longer have the app. Step-by-step instructions are also at saveoury.net/account-deletion.

In the app (immediate):

• Go to Settings → Privacy & data → Delete account
• Review what will be deleted, then confirm it's you by signing in again with Apple, Google, Facebook or your password
• Your account and data are removed from our live database straight away, you are signed out, and Saveoury's data is cleared from your device. We email you a confirmation

Without the app (by email):

• Email [email protected] from the email address your account uses, with the subject "Saveoury account deletion request"
• We confirm the request came from the account owner, then delete the account. Verified requests are completed within 30 days

What is deleted:

• Profile and account information (name, email, profile photo)
• All shopping lists, list groups and list items
• Watchlist and price alerts
• Savings history
• Notifications, push notification tokens and in-app settings
• Feedback submissions, including the copy posted to our team channel
• Your usage analytics profile and events at PostHog
• Sign-in records, including linked Apple, Google or Facebook sign-in. When you delete in the app, Saveoury's access to your Apple ID is revoked too
• Your membership of lists others shared with you. Lists you own are removed for the people you shared them with, and they are notified

What we keep, and why:

• Abuse-prevention records - rate-limit and free-trial records that carry only an internal ID (no name, email or lists), kept so that deleting an account cannot be used to reset free-trial or usage limits
• Billing records - store transaction records may be kept for as long as tax and accounting law requires (currently 7 years in Australia)
• Crash reports - held by Sentry under an internal ID only, and deleted automatically within 90 days (see section 3.3)
• Backups - encrypted database backups may hold a copy for a short time and are overwritten within 30 days

Before you delete:

• Subscriptions are not cancelled automatically. If you subscribe to Saveoury Premium, cancel it first in your Apple App Store or Google Play subscription settings, or the store will keep billing you
• If you signed up with Apple and asked us to delete your account by email, remove Saveoury under Settings → your name → Sign in with Apple on your iPhone
• People you shared lists with will lose access to them
• You can download a copy first with Settings → Privacy & data → Export my data (see 6.1)

6.3 Opt Out of Analytics

Analytics help us improve the app, but you can opt out at any time:

• Go to Settings → Privacy & data and switch off Analytics
• From then on the app stops sending usage events and stops linking analytics to your account
• Crash reports stay on because they keep the app stable. They carry only your internal user ID, never your email or name

6.4 Disable Push Notifications

Turn off notifications in your device settings (iOS: Settings → Saveoury → Notifications; Android: Settings → Apps → Saveoury → Notifications).

6.5 Correct Your Information

Update your email or name in Settings → Account.

6.6 Complaints

If you have a privacy complaint, please contact us first at [email protected]. We will investigate and respond within a reasonable time (usually 30 days).

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au/privacy/privacy-complaints
• Phone: 1300 363 992
• Email: [email protected]

7. Children's Privacy

Saveoury is not directed at children. You must be at least 18 years old to use the app. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with data, contact us at [email protected] and we will delete it.

8. Data Breaches

If we experience a data breach that is likely to result in serious harm to you, we will notify you and the OAIC as required by the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

9. Changes to This Policy

We may update this privacy policy from time to time. When we do:

• The "Effective" date at the top will change
• For significant changes, you'll see an in-app notification
• Continued use of the app after changes take effect means you accept the updated policy

Previous versions are archived and available on request.

10. Contact Us

Questions, concerns, or requests about your privacy?

• Business name: Saveoury
• Legal entity: Elevate Labs PTY LTD (ACN 703 177 002, ABN 20 703 177 002)
• Location: Victoria, Australia
• Email: [email protected]
• In-app feedback: Settings → Help & feedback
• Website: saveoury.net