Privacy Policy for Grocerio

Last Updated: February 26, 2025

1. Introduction

Welcome to Grocerio, a service provided by Lutec Solutions GmbH. This Privacy Policy explains how we collect, use, and protect your personal data when you use our Grocerio service.

2. Data Controller Information

Data Controller:

Lutec Solutions GmbH

Wallbergstraße 3

82024 Taufkirchen

Germany

Registration:

Commercial Register: HRB 298576

Local Court: Munich

Contact Information:

Email: legal@lutec-solutions.com

Mailing Address: Wallbergstraße 3, 82024 Taufkirchen, Germany

3. Personal Data We Collect

When you use Grocerio, we may collect the following types of personal data:

Account Information: Email address, name, password (encrypted), and user preferences.
User-Generated Content: Images, for example of grocery receipts, that you upload to our service.
Usage Data: Information about how you interact with our service, including access times, pages viewed, and features used.
Device Information: Information about the device you use to access our service, including device type, operating system, and browser type.
Cookies and Similar Technologies: We use cookies and similar technologies to enhance your experience, analyze usage patterns, and improve our service.

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases:

Purpose	Legal Basis	Description
Providing and maintaining the Grocerio service	Performance of a contract (Art. 6(1)(b) GDPR)	To allow you to create an account, upload receipts, and view statistics
Improving and developing our service	Legitimate interest (Art. 6(1)(f) GDPR)	To understand how users interact with our service to improve functionality and user experience
Communicating with you	Performance of a contract (Art. 6(1)(b) GDPR)	To respond to your inquiries and provide customer support
Ensuring security of our service	Legal obligation (Art. 6(1)(c) GDPR)	To detect and prevent fraud, unauthorized access, and other harmful activity

5. Storage Duration

We will store your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations:

Account Information: We retain this information for as long as you maintain an account with us. After account deletion, we may retain certain information for up to 30 days for backup purposes.
Receipt Images: We store receipt images for as long as you maintain an account with us, unless you manually delete them.
Usage Data: We retain usage data for up to 24 months for analytical purposes.

6. Data Recipients and Transfers

We may share your personal data with the following categories of recipients:

Service Providers: We use third-party service providers to help us operate our service:
- Vercel Inc. (Frontend hosting)
- Supabase Inc. (Backend services)
- Google LLC (AI Services)
Legal Requirements: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities.

7. Your Rights

Under the GDPR, you have the following rights:

Right to Access: You have the right to request information about your personal data that we process.
Right to Rectification: You have the right to request the correction of inaccurate personal data.
Right to Erasure: You have the right to request the deletion of your personal data under certain circumstances.
Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data under certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You have the right to object to the processing of your personal data based on legitimate interest.
Right to Withdraw Consent: If processing is based on consent, you have the right to withdraw consent at any time.

To exercise any of these rights, please contact us at [Your Privacy Email].

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

9. Automated Decision-Making

Our service may analyze the content of your grocery receipts to generate statistics and insights. This processing is necessary for the performance of our contract with you and does not constitute automated decision-making with legal or similarly significant effects.

10. Cookies and Tracking Technologies

Our service uses cookies and similar tracking technologies to collect and use personal data. You can control cookies through your browser settings and other tools.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

12. How to Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Lutec Solutions GmbH

Wallbergstraße 3

82024 Taufkirchen

Germany

Email: legal@lutec-solutions.com

13. Complaints

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority. The responsible supervisory authority for Lutec Solutions GmbH is:

Bayerischer Landesbeauftragter für den Datenschutz

Postfach 22 12 19

80502 Munich