Version 2026-11-04.
1. Who we are. Shkelik is a service that compares grocery and pharmacy prices in Israeli chains. This policy explains what data the app and the server handle and why. Contact: connect@shkelik.com.
2. Without sign-in (guest). To work, the app creates a random device ID, which does not identify you by name, and sends it to the server with the platform (iOS/Android), the interface language and the last-visit time. Shopping lists, favorites, search history and settings (city, theme, Shabbat mode) stay only on your phone and are not sent. We do not collect your name, phone number or advertising ID.
3. After sign-in by e-mail (optional). We store your e-mail address, your lists, favorites and price alerts (product and area), the city and Shabbat-mode setting of your device so that alerts arrive correctly, and the push token if you enable notifications. One-time sign-in codes are stored only as a hash.
4. Location. Only if you allow it. The phone sends your exact position with the request to find your city and nearby stores and to calculate distances. It is not saved in the database and is not linked to your account, but may appear in technical server logs, which are kept for a limited time.
5. Camera. Only for scanning barcodes. Pictures are not saved or sent; only the barcode number is sent to find the product.
6. Purposes. To show prices, sync your lists and alerts, send sign-in codes and price-drop notifications, and protect the service from abuse. We do not sell data and send no marketing e-mails.
7. What is required. The device ID is needed for the app to work. Sign-in, location, camera and notifications are optional; without sign-in there are no price alerts and no sync between devices.
8. Who receives data; transfer abroad. Data is processed only to run the service: Amazon Web Services (hosting and backups, Stockholm, Sweden); Amazon SES (sign-in code e-mails: your address and the code); Expo Push and Google (Android) or Apple (iOS) push services (push token and notification text with product name and price); Google Maps (store map on Android; Google receives technical data such as IP address; on iOS the map is Apple Maps); Telegram, only if the operator enables manual approval of new e-mail addresses (the address is sent to the operator). These providers work outside Israel (Sweden and other countries, including the USA), so your data is transferred abroad.
9. Retention. The device ID and last-visit time are kept while you use the app. Account data, lists and alerts are kept until you delete the account. A sign-in code is deleted after use and in any case within an hour. Technical records used to limit code requests are deleted after about a day. Technical server logs are kept for a limited time; e-mail addresses are masked in them.
10. Your rights. You may ask to see, correct or delete your data: write to connect@shkelik.com, we answer within 30 days. If you signed in, you can delete the account in the app, see account deletion. A guest keeps data only on the phone: delete the app to remove it; to remove the device ID from the server, write to us.
11. Children. The service is for users from age 16, as in the Terms of Use.
12. Changes. When this policy changes, we update its version here; a material change will be announced in the app.