Privacy policy

1 General information

Cenu Depo is a grocery price comparison platform that operates as a mobile app on iOS and Android devices and as a website. Our service helps users find the best prices for food products in various shops in Latvia.

Data controller: Cenu Depo
Contact information: azsoftwarehub@gmail.com
Jurisdiction: Republic of Latvia

This privacy policy applies to all Cenu Depo services and has been prepared in accordance with the European Union General Data Protection Regulation (GDPR) and Latvian data protection legislation.

2 What data we collect

2.1 Data collected automatically

• Device information: device type, operating system, app version
• Usage data: app usage statistics, use of features
• Technical information: IP address, browser type, language
• Analytics data: session length, sections visited, error reports

2.2 Information provided by the user

• Product prices: price information photographed and entered by users
• Receipt scanning (beta): the text of a purchase receipt scanned in the app (shop, date, items, quantities, prices, discounts and total). The phone reads the receipt itself and sends only the text, without payment or loyalty card numbers, never the photo
• Cart data: products added to the comparison cart
• Search queries: product search history
• Reviews: comments and ratings on products or shops

2.3 Location data

If you allow the app to use your location, it uses it only on your phone: to show the shops nearest you and, if you choose, to compare only shops within the distance you pick. Your location is not sent to us or to anyone else: the phone downloads every shop's address and works out the distances itself, and the last known location stays on the phone for up to 7 days. When you limit comparisons by distance, the app sends us only the names of the shop chains to compare, never your location. The app asks for permission only when you use one of these features and uses your location only while the app is open; you can withdraw the permission at any time in your phone's settings. Shop addresses come from OpenStreetMap (© OpenStreetMap contributors, ODbL).

2.4 Advertising data in the app

• Our own ads: which ad was shown to an app identifier, on which screen and platform, whether it was seen and whether it was tapped, and whether it was personalised
• Preferences for personalised ads: the gender, price level and interests set in the app, only if the user agrees to personalised ads
• Google AdMob: device identifiers, according to the choices made in the consent dialog (Google UMP)

3 How we use your data

3.1 Providing the service

• Comparing and analysing product prices
• Providing personalised recommendations
• Providing the cart functionality
• Searching for shops and products

3.2 Improving the service

• Analysing and optimising the user experience
• Developing new features
• Identifying and fixing errors
• Improving performance

3.3 Security and compliance

• Preventing fraud and misuse
• Monitoring compliance with the terms of service
• Providing technical support
• Meeting legal requirements

3.4 Advertising in the app

In the free version of the app we show Google AdMob ads and may also show ads that companies buy directly from us. We choose our own ads by the screen, the category it shows, the app's language and the platform. We use the preferences set in the app (gender, price level, interests) to choose them only for users who have agreed to personalised ads; consent can be changed in the consent dialog or in the app under “About this ad” → “Ad settings”. We do not use health data or other special category data for ads. Pro users see no ads. There are no ads on the cenudepo.lv website. More: Advertising terms.

4 Sharing data with third parties

We do not sell your personal data to third parties. Data may be shared only in the following cases:

4.1 Service providers

• Cloud service providers: storing and processing data
• Analytics services: analysing the user experience
• Technology partners: providing the app's functionality

4.2 Partner shops

With partner shops we share only aggregated, anonymised data on:

• Product popularity
• Price trends
• Market analysis

4.3 Legal requirements

We may disclose data if this is required by:

• A lawful court order
• A request from government institutions
• The need to protect legal rights

4.4 Advertisers and Google AdMob

Advertisers who buy advertising from us receive only totals (how many times an ad was shown, seen and tapped), never users' personal data. An ad that is tapped opens the advertiser's page, and the advertiser is responsible for the data processed on that page. Google AdMob (Google Ireland Limited) shows ads in the app and processes data in accordance with its own privacy policy and the choices made in the consent dialog.

5 Data security

We implement comprehensive security measures to protect your data:

5.1 Technical measures

• Encryption: all data is encrypted both in storage and in transit
• Access control: strict authentication and authorisation
• Regular backups: automatic data backup and recovery
• Security audits: regular checks of security systems

5.2 Organisational measures

• Staff training in data protection
• Strict internal data processing rules
• Regular review of security policies
• Incident response plan

5.3 Data breaches

If a data breach occurs, we:

• Immediately assess the extent of the breach
• Notify the supervisory authority within 72 hours
• Inform the affected persons where necessary
• Take all necessary action to remedy the breach

6 Your rights

Under the GDPR you have the following rights in relation to your personal data:

6.1 Right of access

You can request information about which of your data we process.

6.2 Right to rectification

You can request the correction of incorrect or outdated data.

6.3 Right to erasure ("right to be forgotten")

You can request the erasure of your data in certain circumstances. In the app you can delete your account and all data linked to it yourself (Profile → Delete account): it is deleted from our servers at once, including the shopping lists you shared, and a household you made ends. These stay without your name or anything else that identifies you: the prices you sent, product photos and the products you added, product reports, and published ideas that other users voted on; a few other records with nothing that identifies you stay too (ad views and ad reports, a friend's invite record). Of the app install only a one-way fingerprint is kept, without any user id, so that the invite bonus cannot be claimed twice; it is deleted after 2 years. Analytics and subscription data held by Amplitude, Google Firebase and Adapty is not deleted by this step; write to us and we will ask them to delete it. More: the app's privacy policy.

6.4 Right to restriction of processing

You can request that the processing of data be restricted in certain cases.

6.5 Right to data portability

You can receive your data in a structured, machine-readable format.

6.6 Right to object

You can object to the processing of data based on legitimate interests.

6.7 Withdrawal of consent

You can withdraw your consent to data processing at any time.

7 Cookies

Our website and app use cookies and similar technologies:

7.1 Necessary cookies

• Maintaining the session
• Security features (including the cd_js cookie: it only shows that the page was opened in a browser rather than an automated tool and holds no identifier)
• Basic functionality

7.2 Analytics cookies

• Usage statistics
• Performance measurements
• Identifying errors
• On the cenudepo.lv website, only if you agree to analytics: Amplitude (Amplitude, Inc., USA) for statistics on pages visited and clicks, with a random browser identifier. We do not collect names, email addresses or purchases.

7.3 Managing cookies

You can control cookies through:

• Browser settings
• The “Cookie settings” link at the bottom of every page of the website
• The app's privacy settings
• Our cookie policy section

8 Children's privacy

Cenu Depo services are not intended for children under the age of 16. We do not knowingly collect personal data from children under the age of 16.

If we learn that we have collected personal data from a child under the age of 16, we will immediately take steps to delete that data.

If you are a parent or guardian and believe that your child has provided us with personal data, please contact us.

9 Changes to this policy

We may update this privacy policy periodically. Significant changes will be communicated in the following ways:

• A notice in the app's interface
• An email notice (if available)
• An updated date at the top of the policy
• Dedicated information on our website

We recommend reviewing this policy regularly to stay informed about how we protect your information.

10 Contact information

If you have any questions about this privacy policy or our data processing practices, please contact us: