Priceglot Privacy Policy

Effective date: 2 November 2026

This policy explains what information Priceglot collects, why, who it goes to, how long we keep it, and the choices and rights you have. It covers the Priceglot apps for iPhone and Android and the website at priceglot.com.

1. Who we are

Priceglot is made by Inventum Technologies Pty Ltd (ABN 54 689 311 288), Melbourne, Victoria, Australia ("we", "us"). We are responsible for your personal information under this policy, and are the "controller" for the purposes of the EU and UK GDPR.

You can reach us about anything in this policy at support@inventum.com.au.

2. The short version

• Live scan happens on your phone. The camera feed is read on the device by Apple's Vision framework or Google's ML Kit, and it never leaves your phone.
• You don't need an account. We create an anonymous ID so purchases and free tries work. Signing in with Apple or Google is optional.
• Only two features send anything to our server, and only when you start them: home-price compare (the tag text and, if you add one, a crop of the photo) and receipt scanning (the receipt photo). Both are read by Anthropic's Claude AI, under commercial terms that don't allow Anthropic to train its models on what we send. We don't keep the images.
• We use Google's Firebase Analytics and Crashlytics to see how the app is used and to fix crashes. On Android, Google's ML Kit also sends Google anonymous usage logs. We don't use advertising IDs, we don't sell your information and we don't show ads.
• You can delete your account and data in the app at any time, or by emailing us.

3. What we collect and why

The camera and live scan

Live scan reads price tags from the camera on your phone, using Apple's Vision framework on iPhone and Google's ML Kit text recognition on Android. The camera feed, the frames and the text read from them stay on the device. We never receive them.

Exchange rates

The app downloads exchange rates about once a day from ExchangeRate-API's open access service and stores them on your phone. The request contains no information about you beyond what any internet request reveals, such as your IP address, which ExchangeRate-API receives. If that service can't be reached, the app asks Frankfurter, which serves European Central Bank rates, in the same way.

Home-price compare

When you ask what an item costs at home, the app sends our server the text read from the tag, the price and currency, your home country and currency, and, if you choose to add it, a crop of the photo around the tag or product. Our server removes any location and camera details from the image and sends the request to Anthropic. Claude identifies the product and searches the web for its price at retailers in your home country, so words from the tag can appear in those web searches.

We use this only to answer your request. We don't store the image. We keep the product match and the retailer prices for 7 days, without your ID, so the same question from anyone gets a faster, cheaper answer.

Receipt scanning

When you scan a receipt, the app sends our server the photo. Our server removes location and camera details and sends it to Anthropic, which reads the shop, date, items, total and tax. The result comes back to your phone to add to your trip. We don't store the photo.

Receipts can show the last digits of a card number or a loyalty number. Please crop those out if you'd rather they weren't read. We don't use them.

Trips, cards and settings

Your home currency, card fee settings, trips and logged purchases are kept on your phone. If you sign in, they're also stored in your account on our servers in Australia, so you can restore them on a new phone. Card settings hold a name and a fee percentage only, never a card number.

Account information

• Without signing in: Firebase Authentication gives your copy of the app an anonymous ID. It isn't linked to your name, email or phone number.
• If you sign in with Apple or Google: we receive your name and email address from that provider, along with an account ID. With Apple you can choose to hide your email, and we then receive a private relay address.

Purchases

If you buy a Trip Pass or Lifetime, Apple or Google handles the payment. We never see your card details. We receive a record of the purchase (product, transaction ID, purchase time and store) and check it with Apple or Google so we can turn on Pro for your account and restore it later.

Usage and cost records

For each home-price compare and receipt scan we record your anonymous ID, the time, whether it succeeded, the AI model used and what it cost us. We use these records to apply the free-try limit, prevent abuse and manage our costs. They don't contain the tag text or the images.

App analytics

We use Google Analytics for Firebase to see how the app is used, so we can improve it. It records anonymous events such as a scan starting, a price being locked, a converter or home-price compare request, a trip being created, the paywall being shown, a purchase being started, completed or restored, signing in (which provider), and which screens you visit. Events carry only things like a currency code, a count or a yes/no outcome.

Google also collects standard device information with these events: an app-instance ID, the device model, operating system version, app version, and your approximate country, which Google works out from your IP address. Analytics never receives camera frames, price-tag text, receipt photos, amounts you spend, or your name or email. We've turned off advertising ID collection, the app doesn't request the advertising ID permission, and we don't use analytics for advertising.

Google Firebase is our processor for this. User-level analytics data is kept for 14 months, the Firebase default, after which Google keeps only aggregated reports. The app doesn't currently have a setting to turn analytics off.

Crash reports and diagnostics

If the app crashes, Firebase Crashlytics sends us a crash report: the device model, operating system version, app version, the state of the app at the time and an installation ID. We use it only to find and fix bugs.

Google ML Kit on Android

On Android, Google's ML Kit text recognition sends Google anonymous logs about how the feature performs, such as how long recognition took and whether it worked, along with the device model and app ID. They don't include your images or the text read from them. Google uses them to maintain and improve ML Kit.

App integrity checks

To stop automated abuse of our paid services, the app uses Firebase App Check, which asks Apple's App Attest or Google's Play Integrity to confirm the request comes from a genuine copy of Priceglot. These services process device and app signals under Apple's and Google's own policies.

When you contact us

If you email us, we receive your email address and whatever you send, such as a photo of a tag or a receipt. We use it to answer you and to fix mistakes.

Our website

priceglot.com sets no cookies and runs no analytics, advertising or third-party scripts. Our hosting provider, Google's Firebase Hosting, keeps standard server logs (IP address, the page requested, browser type and time) to run and secure the site.

4. How the AI works

Home-price compare and receipt scanning use Anthropic's Claude models through Anthropic's commercial API. Anthropic acts as our service provider (a "processor" under the GDPR). Under its commercial terms it may not use what we send to train its models, and it keeps inputs and outputs only for a limited period to provide the service and check for misuse.

AI can get things wrong. A product match might be a similar item rather than the same one, and a receipt might be misread. The app shows its sources and you should check the match before you rely on it.

The tax refund estimates are not AI. They come from the published rules of each country, which we check against official sources.

5. Who we share information with

We don't sell or rent your information, and we don't share it for advertising. We share it only with:

• Google (Firebase and Google Cloud): hosting our servers, database, sign-in, App Check, Analytics and Crashlytics, and the ML Kit logs described above.
• Anthropic: reading tags and receipts for the features you start, as described in section 4.
• Apple and Google: payments, purchase checks and Sign in with Apple or Google.
• ExchangeRate-API and Frankfurter: exchange rate downloads, which carry no information about you beyond your IP address.
• Authorities, if the law requires it, or to protect people's safety or our legal rights.
• A buyer, if our business is sold or merged, under the same protections as this policy.

6. Where your data is stored, and transfers abroad

Our database and servers are in Google Cloud's Sydney region (australia-southeast1). Anthropic processes requests in the United States. Google and Apple may process information in the United States and other countries where they operate.

When we send personal information outside Australia, we take reasonable steps to make sure the recipient protects it consistently with the Australian Privacy Principles. For people in the EEA, the UK and Switzerland, transfers rely on the European Commission's standard contractual clauses (and the UK addendum) in our providers' data processing terms, or on an adequacy decision where one applies.

7. How long we keep it

8. Your choices and rights

• Use it without an account. Everything except restoring purchases on a new phone works without signing in.
• Delete your account in the app under Settings, then Delete account at the bottom of the page, or by emailing us. This deletes your account, your trips and settings on our servers, your usage counters and your purchase records with us. Apple and Google keep their own records of what you bought, so you can still restore a purchase onto a new account.
• Access and correction. Ask us for a copy of the personal information we hold about you, or to correct it.
• Objection and restriction. Where the law gives you these rights, ask us to stop or limit a use of your information.

We'll answer within 30 days. Email support@inventum.com.au.

Australia. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you're unhappy with how we handle a complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

9. Legal bases (EEA, UK and Switzerland)

Under the GDPR and UK GDPR we rely on:

• Contract: to provide the app and the features you ask for, including home-price compare, receipt scanning, purchases and restoring them.
• Legitimate interests: to keep the service secure and working, prevent abuse, fix crashes, understand how the app is used and improve it, and manage our costs. We've weighed these against your rights, and you can object.
• Legal obligation: to keep purchase records for tax law.

You can complain to the data protection authority where you live or work. We don't make decisions about you that have legal or similarly significant effects by automated means.

10. United States privacy rights

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect, use and disclose, to delete it, to correct it, and not to be treated differently for using these rights.

In the last 12 months we collected the categories described in section 3: identifiers (anonymous ID, account ID, email address if you sign in), commercial information (purchase records), internet or network activity (app usage events, crash and server logs) and, only if you choose to send them, photos of tags or receipts. We use them for the purposes in section 3 and share them only with the service providers in section 5.

We don't sell personal information and we don't share it for cross-context behavioural advertising. We don't collect sensitive personal information as defined in California law. To make a request, email support@inventum.com.au. You can use an authorised agent, and we'll verify requests by confirming control of the account or email address involved.

11. Children

Priceglot is a general travel and shopping tool and isn't directed at children under 13 (or under 16 in the EEA and UK). We don't knowingly collect personal information from them. If you think a child has given us information, email us and we'll delete it.

12. Security

Information travels encrypted (TLS) and is encrypted at rest in Google Cloud. Our servers check that requests come from a genuine copy of the app, and access to production data is limited to the people who need it. No system is perfectly secure, so if we learn of a breach that's likely to cause serious harm, we'll tell you and the regulators as the law requires.

13. Automated processing

Live scan converts prices automatically on your phone, and home-price compare uses AI to match products and prices. These help you decide what to buy. They don't make decisions about you.

14. Changes to this policy

If we change this policy, we'll update the date at the top and, for significant changes, tell you in the app before they take effect.

15. Contact

Inventum Technologies Pty Ltd, Melbourne, Victoria, Australia. Email support@inventum.com.au.