Privacy Policy

Effective 8 October 2026 · Latviski

This policy describes how the Cenu Grozs app handles your data: what the service needs to work and improve, and what we use to measure our own advertising - and nothing more.

What data we process

• Account data. When you sign in with a Google or Apple account, we receive your email address, name, and profile picture from the identity provider. We never see or store your password.
• Basket data. Your picked stores, basket categories and products, and the app language are stored with your account so your basket is available on all your devices.
• Technical data. While serving requests, our servers briefly process your device's IP address. We don't use it to identify you and don't keep it long-term.
• Usage statistics and crash reports. The app sends anonymous events about how you use it: when it is opened, how first-time setup is going (for example "subscription screen shown"), changes you make to your basket (for example "product added" or "category switched off" - never which product or category), how you use the shopping list (for example "list opened", "product ticked off" or "list shared" - never which product, store or item), whether notifications are allowed, and whether you opened the app from one. If the app crashes, it sends a crash report (what went wrong, plus the device model, operating system version, and app version). These events and crash reports also note the language the app is set to. On Android, they also note where the install came from (for example an ad link), as Google Play reports it. If you delete your account, the app sends one more such event: whether a subscription was running and, only if you choose to give it, why you are leaving, including anything you type there. These are tied to a random identifier, not to your account - we can't tell which user they came from. The Meta software in the app (see ad measurement below) also sends its maker a crash report: what went wrong, the device model, and the operating system and app versions.
• Ad measurement. To see whether our advertising works, the app tells Meta (the company behind Facebook and Instagram) when it has been installed and opened, and RevenueCat, our subscription service, tells Meta when a free trial starts and when a subscription is bought. These signals carry a random identifier that Meta's software creates for the app, your device model and IP address, on Android your device's advertising identifier, and on iPhone the identifier Apple gives our app - never your name, email or basket. Meta matches them against the ads it has shown, so we can see which ad led to an install. On iPhone this happens only in Apple's aggregated form (SKAdNetwork), which never identifies a device. On Android you can reset or delete the advertising identifier in the system settings.

Location

If you let the app access your location, it is used only on your device - to sort the nearest stores. Your location is never sent to our servers or stored.

What we don't do

• We don't show ads in the app.
• We don't sell your data, and we don't share it for anyone else's marketing. The only ad-related sharing is the ad measurement described above, for our own ads.
• We don't collect data beyond what this policy describes.
• We don't link usage statistics, crash reports or ad measurement to your account or identity.

Why and on what basis

We process data to provide the service you asked for - comparing prices for your basket (Article 6(1)(b) of the General Data Protection Regulation - performance of a contract). Anonymous usage statistics and crash reports are processed on the basis of our legitimate interest in keeping the app working and improving it (Article 6(1)(f)). Ad measurement, and the crash reports that Meta's software sends along with it, are processed on the basis of our legitimate interest in knowing whether our advertising reaches people who use the app (Article 6(1)(f)); you can object at any time by writing to info@moosesoft.lv.

Where data lives and who helps us

• Supabase - database and sign-in infrastructure; data is stored in the European Union (Germany).
• Google / Apple - verifying your sign-in identity.
• Our server in the European Union - delivering product images.
• PostHog - anonymous usage statistics and crash reports; data is processed in the European Union (Germany).
• RevenueCat - managing subscriptions and free trials; it also forwards trial starts and purchases to Meta for ad measurement, and records your device identifiers and IP address so Meta can match those events to an ad.
• Meta Platforms Ireland - ad measurement, as described above, and the crash reports its software sends; Meta processes these under its own privacy policy.

How long data is kept

As long as your account exists. Deleting your account (Settings → Account → Delete account) permanently deletes everything - the account, your basket, and your picked stores. All deletion paths are described on the Delete your account page. Usage statistics and crash reports are not connected to your account and can't be traced back to you, so they are unaffected by account deletion. Ad measurement signals and the crash reports Meta receives are kept by Meta under its own retention rules; we can't connect them to your account either.

Your rights

You have the right to access your data, correct it, delete it, restrict its processing, and receive it in a portable format. Write to info@moosesoft.lv and we'll respond. You also have the right to lodge a complaint with Latvia's Data State Inspectorate.

Changes to this policy

If the app gains new features that change how data is processed (for example push notifications), we'll update this policy first.