Privacy Notice

Who we are

BuyWise operates the BuyWise app and is the data controller for the personal data described here — we decide why and how it is processed.

What we collect and why

• Account data (email, sign-in identifier, display name) — to create and secure your account. Legal basis: performance of our contract with you.
• Preferences (budget, priorities, favourite and avoided brands) — to personalise scores. Legal basis: contract.
• Content you submit (product links, search terms, photos of products or labels) — to run the analysis you requested. Legal basis: contract.
• Saved analyses, watchlist and history — to show your past results. Legal basis: contract.
• Usage and technical data (analysis counts, device and browser data, IP address, error logs) — for security, fraud and abuse prevention, fair-use enforcement and improving the product. Legal basis: legitimate interests.
• Support messages — to answer you. Legal basis: legitimate interests.

We do not sell your data and we do not use it to advertise to you. Your profile and email are private: no other user can view, search or query them.

Who we share it with

• Service providers / subprocessors — hosting and database providers, AI model providers that process your submitted content to generate analyses, and web research providers used to retrieve public product, safety and ingredient sources.
• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) and authorities where required by law.

International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

Retention

We keep account data while your account is active and for a short period afterwards to handle disputes and legal obligations. Analyses and saved items are kept until you delete them or close your account. You can permanently delete your account and all data linked to it at any time from the Profile screen; deletion is immediate and cannot be undone. Data no longer needed is deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. Contact us through the app and we will respond within one month. If you are in the UK/EEA you may also complain to your local supervisory authority.

Security

We use encryption in transit, access controls and row-level database policies so each account can only reach its own data.

Cookies

We use essential cookies and local storage to keep you signed in and to run the checkout. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in will stop working.