Privacy Notice

Denis Prelog (Slovenia) is the data controller for personal data processed through Špajz. Contact: info@spajz.si.

Data we collect and why

• Account data (email, display name, password, language) — to create and run your account (contract).
• Inventory data (products, quantities, prices, stores, photos, expiry dates, saved recipes) — to provide the service (contract).
• Sharing data (email addresses you invite) — to let family members access your inventory (contract).
• Contact messages (name, email, message) — to answer you (legitimate interests).
• Subscription status (plan, status, renewal dates, payment-provider customer ID) — to give paid features (contract).
• Technical data (IP address, device and browser information, logs) — for security, fraud prevention and fixing errors (legitimate interests).

When you request smart recipes, ingredient names, quantities and expiry dates (no photos or account details) are sent to an AI provider to generate suggestions. Receipt photos are only read to extract products and are not stored.

Who we share data with

• Service providers that host and run Špajz (cloud hosting, database, AI processing).
• Paddle.com, our Merchant of Record, for selling the subscription, payments, subscription management, tax compliance and invoicing. Paddle processes your payment details under its own privacy policy.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

International transfers

Some providers may process data outside the EU/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses.

Retention

We keep your data while your account is active. When it is no longer needed, or after you ask us to delete your account, we delete or anonymise it, except where the law requires us to keep records.

Your rights

Under the GDPR you can request access, correction, deletion, restriction, portability, object to processing, and withdraw consent. Email us and we will respond within one month. You can also complain to the Slovenian Information Commissioner (Informacijski pooblaščenec) or your local supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit and access controls so only you and people you share with can see your inventory.

Cookies and storage

Špajz only uses essential browser storage to keep you signed in. We do not use advertising or analytics cookies.