Privacy Policy

Effective date: October 31, 2026

Unda ("Unda", "we", "us") helps shoppers in Aruba compare prices for everyday
products across vendors. We built Unda to need as little of your data as
possible. This policy explains what we collect, what we don't, and why.

1. Accounts are optional

You can use Unda without an account. If you choose to sign in — with Apple,
with Google, or with a one-time code sent to your email — we store:
• your email address (Apple may give us a private relay address instead);
• an identifier from Apple or Google for your sign-in, and, if Apple gives it,
your first name;
• your points and achievements, which move from your phone to your account
when you first sign in; and
• an encrypted copy of your loyalty cards and shopping list, so they come
back if you change phones.
We use your email only to sign you in. We don't send marketing email and we
never show your email or name to other users.

Deleting your account: in the app, go to Account → Settings → Delete account,
or email us (see Contact). This deletes your email, sign-in identifiers, and the
cards and list stored in your account, and revokes Sign in with Apple. Prices
you contributed stay in the shared price database without any link to you.

2. Anonymous device identifier

The first time you open Unda, the app generates a random identifier and stores
it on your device. This identifier is sent with your contributions, with a
launch "ping", and when you view your achievements. We use it to:
• attribute the prices and products you contribute (so they can be moderated);
• award and show your contribution points and achievements; and
• understand aggregate usage — for example how many devices are active and
which app languages are in use.
It is not your name, email, or phone number, and it is not shared with
advertisers. Reinstalling the app generates a new identifier.

3. Information stored on your device

The following stays on your device and is not sent to us (unless you sign in,
in which case your shopping list and loyalty cards are also saved, encrypted,
to your account):
• Your shopping list (products you save).
• Your loyalty and membership cards.
• Your recent searches.
• Your language preference.
You can erase this at any time from Settings → Data & Storage ("Clear Recent
Searches", "Clear Shopping List", or "Clear All Data").

4. Camera and barcode scanning

When you use the scanner, the camera reads a product barcode on your device. The
image is processed locally to detect the barcode and is not stored or uploaded.
We only use the resulting barcode number to look up the product.

5. Location

When you add or update a price, if you grant permission, Unda checks your
device's location once to pre-select the nearest store in the form, and sends
that position with the price so we can confirm it was reported at the store
(this helps keep prices accurate). We keep that position with the price report,
rounded to about 10 metres, so we can file the price under the right store and
spot shops we don't list yet; it is never shown to other users. We do not track
your location at other times.
Location is optional; if you decline, you can simply pick the store yourself. You can change this anytime in your device settings (or
review it under Settings → Location access).

6. Photos and price submissions

Unda lets you contribute prices to the community. If you submit a price update
or report a product, what you choose to send — the price, the vendor, the
barcode, an optional unit, and any photo you attach (for example a shelf tag) —
is sent to our servers with your anonymous device identifier so it can be
reviewed and shared with other users. Please do not include other people, faces,
or personal information in photos. Only submit photos you have the right to
share. Uploaded photos are processed to remove embedded metadata (such as GPS).

If receipt scanning is available for your account and you use it, the photos of
your receipt are sent to our servers with your account, kept privately (never
shown to other users) and deleted after 30 days, or when you delete your account.
An AI service (Anthropic's Claude) reads the store, date, total and item lines;
we do not read or keep card, loyalty or membership numbers, or cashier and
invoice numbers. The item prices are shared like any other price report, without
your name or email.

7. Product and price data

To show prices, the app requests product and price information from our backend.
These requests include the product or barcode you are looking up and your app's
language (so we can understand language usage); they do not include your name,
email, or phone number.

To understand what shoppers look for, we count which products are opened,
scanned and added to lists, what is searched for, which aisles are browsed and
which store's price is tapped, together with the country of the connection, the
app language, the kind of phone (iPhone or Android) and the app version. These
counts carry no
identifier: they are not linked to you, your device or your account, and no IP
address is kept with them. We keep them as daily totals and may use them,
combined with everyone else's, in reports about grocery demand and prices;
they never identify a person.

8. Usage analytics (first-party only)

We keep simple, first-party usage information tied to the anonymous device
identifier — your app language and the last time the app was opened — to
understand how Unda is used. We do not use third-party analytics, advertising,
or tracking SDKs.

Invites: your invite link carries a short code tied to your anonymous
identifier. When a friend's new phone joins with it, we record that you invited
them; the app shows you how many friends joined, never who.

Shared lists: when you share a shopping list, its name and products are sent to
us so anyone with the link can see them. Your identifier is kept with it but is
never shown.

Links to Unda: when someone opens an Unda link (an invite, a shared list, or a
link from our posters and posts), our website notes the country, the kind of
device and the site they came from. To count visitors without storing IP
addresses, it keeps only a one-way code made from the address with a secret
that changes every day.

9. Service providers

We host the service on Amazon Web Services and deliver it through Cloudflare;
data you submit is processed on that infrastructure. Sign-in emails are sent
through Amazon Simple Email Service. If you sign in with Apple or Google, they
confirm your identity to us under their own privacy policies. Product reference details
(names, brands, images) are sourced from the Open Food Facts open database.

10. Sponsored content

Unda may show sponsored products, offers and challenges from brands,
distributors, stores and other companies. They are always labelled
"Sponsored". Which one you see depends only on what is on your screen (the
product, aisle or search) and on your country and app language, never on who
you are, your identifier, your account or what you did before. Sponsors receive
totals only, such as how many times their item was shown and tapped; they never
receive information about you. Sponsorship never changes the price comparison:
prices, their order and the cheapest store are the same whether or not a store
or brand pays us.

11. What we do NOT do

• We do not sell or rent your data.
• We do not target ads at you personally: no advertising identifiers, no
profiles, no tracking across other apps or websites.
• Nobody can pay for a better place in the price comparison.
• We do not use third-party analytics or advertising trackers.
• We do not knowingly collect data from children under 13.

12. Data retention

Information you contribute to the community (such as prices and photos) may be
retained as part of the shared price database. Your contribution record (points,
achievements, app language, last-seen) is kept while the app remains in use.
Account information is kept until you delete your account. Sign-in codes expire
after 10 minutes.
Information stored on your device remains until you clear it or uninstall.

13. Security

We take reasonable measures to protect information transmitted to and stored on
our servers, including encrypted connections. No method of transmission or
storage is completely secure, so we cannot guarantee absolute security.

14. Changes to this policy

We may update this policy as the app evolves. We will update the effective date
above and, where appropriate, notify you in the app.

15. Contact

Questions about privacy? Contact us at hello@unda.cheap.

Unda is a product of Dot 1 Technologies, Aruba.