App privacy policy

The controller responsible for processing personal data is Gearstack, obrt za računalno programiranje i usluge, owner Kristijan Bezjak, Ježdovečka ulica 2A/1, 10250 Lučko, Zagreb, Croatia.

This policy applies to the Pinezi app for Android and iOS. For the website, see: Website privacy policy

The app works without sign-up or an account. Your shopping list and settings (language, city or location permission, radius, travel mode and fuel consumption) are stored only on your device. If you delete the app, this data is gone.

For search, prices, deals, catalogues and shopping plans, the app contacts our server. This transmits data that is technically necessary: IP address, time, the request itself (for example a search term, the product codes on your list or coordinates) and the device and operating system details sent with every connection. We use this data only to answer the request, do not link it to a person and do not store requests with IP addresses. The server is hosted by Hetzner Online GmbH in Germany, behind Cloudflare, Inc. (USA, certified under the EU-U.S. Data Privacy Framework), which delivers the connection and protects against attacks. Both are our processors. The legal basis is providing the feature you use (Article 6(1)(b) GDPR) and our legitimate interest in secure operation (Article 6(1)(f) GDPR).

If you allow it, the app uses your location only while it is open, never in the background. The coordinates are sent to our server to find nearby stores, prices in your area and shopping plans with an estimated driving distance, and are not stored afterwards. You can choose a city instead; the app then uses its centre. You can revoke the permission at any time in your device settings.

The app uses the camera only to scan barcodes. The image is processed on your device and is neither transmitted nor stored; only the recognised number is sent to our server to find the product.

The app is free and funded by ads from Google AdMob, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To serve ads, measure their performance and prevent fraud, Google processes, among other things, your IP address, your device’s advertising ID, device and app information and your interactions with ads. Data may also be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework.

On first launch, a consent dialog from Google asks whether Google and its partners may use data for personalised ads (Article 6(1)(a) GDPR). Without consent, the app shows only non-personalised ads. You can change your choice at any time in the app under “My Pinezi” → “Privacy and cookie settings”. On iPhone, the app also asks for permission to track you across apps; if you decline, all features stay the same.

More from Google: Privacy policy · How Google uses data from partner apps

The app loads product photos directly from the servers of Open Food Facts (Open Food Facts, France) and its sister projects Open Beauty Facts and Open Products Facts. These servers receive your IP address and the details sent with every connection. More information: Open Food Facts privacy notice

Catalogues, sources and other links open the official page of the retail chain, authority or source in a browser window inside the app. The respective provider is responsible for these pages; they may set their own cookies and collect data.

On iPhone, the app shows stores on an Apple Maps map; your device loads the map tiles from Apple. On Android, the app currently shows stores as a list without a map.

The app is intended for adults, not for children under 16.

You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object to processing. To exercise these rights, write to the controller at the address above. You also have the right to lodge a complaint with a supervisory authority; in Croatia this is the Personal Data Protection Agency (azop.hr).

We will update this policy when we add new features or when the law changes.