Silflay Privacy Policy

1) Data we collect

We collect the information needed to provide and improve the Services, including:

• Account information: your email address, authentication user ID, email verification status and related account information.
• Meal planning and shopping content: meal plans, delivery settings, saved recipes, user-defined meals, serving preferences, shopping list items, selected products, product substitutions, preferred supermarkets and products you choose not to buy.
• Price alert information: watched products, alert thresholds, notification preferences and records of alerts sent.
• Supermarket basket information: basket contents, selected products and requested basket actions where you choose to connect a supermarket account. We do not collect or store your supermarket username or password.
• Subscription information: whether your account has an active subscription, trial or entitlement.
• Communications: messages you send us by email or through support channels.
• Technical information: app version, device/platform type, request times, error information and account identifiers needed to operate, secure and debug the Services.

We do not currently maintain a user-facing product or recipe search history. Search terms may appear temporarily in technical logs where needed to operate, secure or debug the Services.

We do not collect or store your payment card details.

2) Authentication

Silflay uses Auth0 to provide account authentication. Your username and password are handled by Auth0. We do not store your password.

We may support other sign-in methods in future, such as Apple or Google sign-in.

For email alerts and some account features, we may require a verified email address.

3) Supermarket integrations

Silflay may allow you to connect to supermarket websites or apps so that the app can read basket information, prepare basket updates or add products to your supermarket basket.

Where this is supported, you log in through the supermarket's own login page. Silflay does not collect or store your supermarket username or password.

The app may store supermarket authentication tokens, cookies or similar session information securely on your device. These are used by the app to make supermarket requests on your behalf. They are not transmitted to Silflay's server.

Checkout and payment for supermarket orders always take place through the supermarket's own website or app.

4) How we use your data

We use personal data to:

• create and manage your account;
• provide meal planning, recipe, shopping list and product matching features;
• save your preferences and app settings;
• prepare, review or update supermarket basket actions requested by you;
• provide price alerts and product notifications;
• manage subscriptions, trials and entitlements;
• provide support and respond to messages;
• maintain, secure, debug and improve the Services;
• comply with legal obligations.

Our lawful bases are:

• Contract: where processing is needed to provide the Services you request.
• Legitimate interests: where processing is needed to maintain, secure, debug and improve the Services, respond to support requests, prevent misuse, or understand whether the Services are working correctly.
• Consent: where we ask for consent, such as for optional marketing messages or push notifications where required.
• Legal obligation: where processing is needed to comply with the law.

5) Sharing your data

We do not sell your personal data.

We share personal data only where needed to run, secure or provide the Services, including with:

• Authentication providers, such as Auth0.
• Hosting and infrastructure providers, such as AWS.
• App stores and platform providers, such as Apple and Google.
• Subscription management providers, such as RevenueCat.
• Website hosting, security and performance providers, such as Cloudflare.
• Email and business communication providers, such as Zoho.
• Notification providers, such as Apple Push Notification service or Firebase Cloud Messaging.

We may also interact with supermarket websites or services at your request. Examples may include Ocado, Sainsbury's, Tesco, Asda, Waitrose and Morrisons. These integrations may change over time.

Silflay is not affiliated with, endorsed by or sponsored by these supermarkets unless we explicitly say otherwise. Their own privacy policies and terms apply when you use their services.

We may also share information if required by law, to protect rights or security, or in connection with a business sale, merger, restructuring or similar transaction.

6) International transfers

Silflay aims to store its own backend and database information in the UK.

Some service providers may process information outside the UK or European Economic Area as part of their global services. Where this happens, we expect appropriate safeguards to be used as required by data protection law.

7) Retention

We keep personal data only as long as needed for the purposes above.

In general:

• account, meal planning, shopping list, preference and alert data is kept while your account remains active;
• server logs are kept for around one week;
• backups may be kept for up to 35 days before being overwritten or deleted;
• limited records may be kept for longer where required for legal, security, tax, accounting or dispute purposes.

When you delete your account, we will delete the personal data stored under your Silflay account, including meal plans, shopping lists, saved recipes, user-defined meals, preferences, product selections and price alerts, subject to the limited exceptions above.

8) Emails, notifications and choices

Silflay may send emails or push notifications, including price alerts, product alerts, account messages, service updates and product updates.

You can opt out of non-essential marketing messages.

You can manage push notifications through your device settings and, where available, app settings.

9) Cookies and SDKs

Our website does not currently use advertising cookies or cookie-based analytics.

Cloudflare may process technical information needed to provide website hosting, security and performance.

The mobile app may use SDKs or platform services for authentication, subscriptions, notifications, diagnostics, app distribution and related functionality.

10) Your rights

Depending on your circumstances, you may have rights to access, correct, delete, restrict, object to or receive a copy of your personal data.

You may also withdraw consent where we rely on consent.

To exercise your rights, contact [email protected].

You can also complain to the UK Information Commissioner's Office if you are unhappy with how we handle your personal data.

11) Security

We use technical and organisational measures designed to protect personal data, including encrypted connections, access controls and secure storage where appropriate.

No system is completely secure. You are responsible for keeping your devices, Silflay account and supermarket accounts secure.

12) Children

Silflay app accounts are intended for adults aged 18 and over.

In future, Silflay may allow adult account holders to share simple one-time meal voting links with family members. These links may be opened in a browser and do not require the recipient to create a Silflay account. Where voting links are used, we may process the voting link, meal options, selected vote, timestamp and any name or label the voter provides.

We do not knowingly allow children to create Silflay app accounts.

13) Automated decision-making

Silflay may use personalisation, ranking and classification to recommend meals, products, substitutions or baskets.

We do not make automated decisions that have legal or similarly significant effects.

14) Third-party links

The Services may link to external websites or apps, including supermarkets and app stores. Their privacy practices are their own, and you should review their policies.

15) Changes to this notice

We may update this policy from time to time. We will post updates here and change the effective date. For material changes, we will provide reasonable notice where appropriate.

Contact

Silflay Ltd - [email protected]

Address: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom