Privacy Policy

Your privacy is our priority. This policy describes how the CadaEuro application handles your data, in compliance with the GDPR.

1. Data Controller

Ney Carvalho (ney.carvalho@cadaeuro.pt). Address: Amadora, Portugal.

2. What Data Do We Process?

• Shopping Data (on-device): Items, prices, and quantities are saved only on your iPhone (using SwiftData). They are not copied to our servers.
• AI Features (optional): When you use the scanner, automatic categorization, or price suggestions, the necessary content (recognized text, product names, currency) is sent to our backend and to Google’s Gemini AI model to return a structured result. See section 4.
• Device Identifier (anti-abuse): To limit abusive use of AI features, we generate an anonymous identifier (UUID) on your device, sent in the X-Instance-ID header. It is not linked to your identity or your Apple ID.
• Transactions (Apple): If you purchase the Premium plan, Apple processes the payment. We only receive confirmation that the purchase was valid.
• Support: If you send us an email, we will have access to your address and message to respond to you.

3. Legal Basis and Purposes

• Performance of contract (Art. 6(1)(b) GDPR) — to provide the requested features, including AI when activated.
• Legitimate interest (Art. 6(1)(f) GDPR) — to limit abuse of AI features through the device identifier.
• Consent (Art. 6(1)(a) GDPR) — to enable AI features, which you can revoke at any time in Settings.

4. AI Features

Some features rely on cloud processing:

• List scanner (OCR + parsing): sends recognized text to our backend to convert it into products with prices and quantities.
• Automatic categorization: sends product names to return the corresponding category.
• Price suggestions: sends the product name and currency to return a suggested unit price (non-binding).

How processing works:

• The request is forwarded by our backend (hosted on Fly.io, Paris/EU region) to Google’s Gemini model.
• We do not store requests or responses. Data exists only in memory during processing and is discarded immediately after the response.
• The subprocessor (Google) processes the requests under its own terms. We recommend reading the Gemini API Policy.
• You can disable all AI features in the app’s Settings. With AI off, no shopping data leaves your device.

Important: prices suggested by AI are merely indicative and may be wrong. Always verify the actual price in store.

5. Subprocessors

• Fly.io, Inc. — backend hosting (Paris, EU region).
• Google LLC — Gemini model, for processing AI features.
• Apple Inc. — App Store distribution, processing of in-app purchases and (if enabled by the User) iCloud device backups.

6. Data Sharing

We do not sell or share your data with third parties for marketing. Sharing is limited to the subprocessors listed above, exclusively to deliver the service.

7. Your Rights

Since shopping data resides on your device, you have full control: you can delete, edit, or export data directly in the app. If you uninstall the app, local data is deleted.

You also have the rights set out in the GDPR: access, rectification, erasure, restriction, portability, and objection. You can exercise them by contacting privacy@cadaeuro.pt. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) or your national supervisory authority.

8. Cookies and Web

Our website (cadaeuro.com) does not use tracking or analytical cookies. We only use strictly necessary local storage for preferences.

9. Changes

This policy may be updated. When material changes are made, you will be informed through the app or this page, indicating the new effective date.