Privacy Policy

This privacy notice for GreenBee ("we," "us," or "our") describes how and why we might access, collect, store, and use ("process") your personal information when you use our services ("services"), including when you:

• Visit our website at https://greenbee.app.
• Download and use our mobile application (GreenBee).
• Submit grocery receipts.
• Engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. We consider ourselves very restrained on personal data: the website sets zero cookies in the browser, and the app uses a small, fully EU-hosted first-party setup with no advertising or cross-site tracking.

If you, after reading this notice, do not agree with our policies and practices, please do not use our services. If you have any questions or concerns, please contact us at hello@greenbee.app.

What personal information do we process?

When you visit, use, or navigate our services, we may process personal information depending on how you interact with us and the services, the choices you make, and the products and features you use.

Personal information provided by you. We collect personal information that you voluntarily provide to us when you sign up for GreenBee, and when you use the app. The personal information that we collect depends on the context of your interactions with us and the services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Email address
• Password
• Grocery receipts

Please note the photo of the receipt never leaves your device: GreenBee extracts the data in the app and only sends the extracted text to the server for processing.

We will never ask you for sensitive personal information.

Information provided through application use

If you use the GreenBee app, we will ask you for access or permission, and when granted collect the information outlined below.

For the app to work we will request your permission to certain features from your mobile device, including your mobile device's camera or native photo gallery to select previously taken receipt photos. If you wish to change our access or permissions, you may do so in your device's settings. This may impact the working of the app.

We may request to send you push notifications, e.g. for when a product you often purchase has a big discount somewhere, or regarding other features of the GreenBee app. If you wish to opt out from receiving notifications, you can easily turn them off in your device's settings.

We also collect information about the features of the GreenBee app or website that you access and use.

Information that is automatically collected

Some information, such as your IP address and/or browser and device characteristics, is collected automatically when you visit the GreenBee website and use the app. This information does not reveal your specific identity (like your name or contact information).

Information that is collected this way normally includes device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, information about how and when you use the GreenBee app or visit the website, and other technical information. If you are using the mobile app, we may also collect information about the phone network associated with your mobile device, like the type of device you use, and the platform and operating system.

Do we use cookies or other tracking technologies?

Short answer: no. The website sets zero cookies in the browser, and the app uses a small, fully EU-hosted first-party setup with no advertising or cross-site tracking. Here's the complete current inventory, split by surface:

Website (greenbee.app)

• Plausible Analytics. The only third-party script on the site. Cookieless by design: no cookies, no localStorage, no individual-user tracking.
• Fonts are self-hosted. No Google Fonts CDN calls, so no font-delivery tracking.
• Signup form: the email is posted to our own Cloudflare Pages Function (functions/subscribe.ts), which talks to MailerLite server-side. No MailerLite JavaScript or cookies ever touch the visitor's (i.e. your) browser.
• Cloudflare Pages itself sets no cookies in our configuration.

App (iOS)

• PostHog EU (eu.i.posthog.com): product analytics with an anonymous per-install identifier, and events like scan_timing and camera_lenses. First-party analytics only: no IDFA, and no cross-app tracking.
• Sentry EU: crash reporting with device/app context on errors.
• Functional on-device storage (SecureStore): auth session token (Better Auth), pending-verification credentials (held only for the short verification window), pending-reset email, the per-account dev-tools unlock, demo overrides. All functional, none of it tracking.
• No ad SDKs, no social SDKs, no fingerprinting.

Email

• Resend. Transactional verify/reset emails for account creation and management. Open/click tracking is off by default and we don't enable it in code.

How do we process your information?

We process your information to provide, improve, and administer our services, communicate with you, for security and fraud prevention, and to comply with the law. We may also process your information for other purposes with your prior explicit consent. We process your information only when we have a valid legal reason to do so. To be more precise, we could process your information for the following reasons:

• To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
• To deliver and facilitate delivery of services to you as user of GreenBee. We may process your information to provide you with the requested service. We e.g. cannot help you to shop smarter if we do not first process the data from your grocery receipts.
• To respond to user inquiries / offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service. That will normally involve you reaching out to us, and in doing so providing the information for us to respond to.
• To protect our services. We may process your information as part of our efforts to keep our services safe and secure, including fraud monitoring and prevention.
• To identify usage trends. We may process information about how you use our services to better understand how they are being used so we can improve or extend them.
• To create aggregate and de-identified data for research and analysis. We may create and use aggregate or de-identified data derived from your information for purposes such as producing statistical reports, conducting impact measures and research, including for scientific publications, presentations, and reports. All such data is stripped of personally identifiable information so individual users cannot be identified.

How do we keep your information safe?

We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

Defenses are up: we have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. But please note that transmission of personal information to and from our services is at your own risk. You should only access the GreenBee app and website and provide personal data within a secure environment.

Good to note: our backend and associated services are all hosted within the European Union.

Retention periods

We will hold your personal information on our systems for as long as is necessary for the relevant purpose, or as otherwise described in this privacy policy.

What legal framework guides this?

In the European Union we operate under the General Data Protection Regulation (GDPR). This legislative framework requires us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. The most important one. We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Performance of a contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including unwritten obligations that come into play when we make the GreenBee app and associated services available in the app stores.
• Legitimate interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information to analyze how our services are used so we can improve them to engage and retain users, to diagnose problems and/or to prevent fraudulent activities.
• Legal obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Vital interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

What are your rights?

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. These include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, (iv) if applicable, to data portability, and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information.

Withdrawing your consent: if we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us through the contact details provided below. However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you feel your data is unrightfully processed, you have the right to lodge a complaint with a supervisory authority - in the Netherlands the Autoriteit Persoonsgegevens.

Account information

If you would at any time like to review or change the information in your account or terminate your account, you can:

• Contact us using the contact information provided.
• Log in to your account settings and update your user account.

Upon your request to terminate your account, we will deactivate and delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

If you have questions or comments about your privacy rights, you may email us at hello@greenbee.app.

How do you exercise your rights?

You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information you can reach out to us by email at hello@greenbee.app.

Final notes

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this privacy notice. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

If you have questions or comments about this notice, you may contact us by email at hello@greenbee.app.

Thank you for joining the hive!

GreenBee is a registered trademark of Lookatel B.V., which holds office at Herengracht 49 in Amsterdam, The Netherlands.