Zolli Privacy Policy

Zolli (the "app", "we") is a free grocery price-comparison app for Israel. We believe in privacy: no sign-up, no account, and we never sell personal information that identifies you. This document explains what we collect, why, and the control you have over it.

What we collect and why

• Your shopping list (typed, photographed, or dictated) — sent to our server to identify the products and compare prices. This is the app's core function.
• Location — to find the branches nearest you and compute distances. Precise location is used only for the request itself and is not stored; for statistics we keep only a coarse area (rounded to ~11 km). You can also type a city or an address instead of using GPS. When you pick a street address, our server looks it up in the open map service OpenStreetMap: only the address itself is sent, from our server, without your device ID and without your IP address. We keep only the address and its point, with no link to who searched, so we do not have to ask again.
• A random device ID — a random value generated on your device (e.g. dev-a1b2c3). It lets Zolli remember your preferences and corrections and improve matching, and supports usage counting. It contains no name, phone number or email and is not your device's advertising ID, but because it persists alongside your usage we treat it as personal data and protect it as such. You can ask us to delete it at any time.
• Photos you choose to capture/upload — sent to an AI processing provider (Anthropic) solely to read the list from the image. The photo is not stored by us.
• Voice — when you dictate a list, speech-to-text is performed by your device's own speech engine. Zolli receives only the text — we do not record or store audio.
• Barcode scans — when you scan a barcode in the app or on the website, we receive only the number on the barcode and the search location, to find the product and its price at nearby branches. The camera image never leaves your device. For statistics we keep only the coarse area (~11 km), not the precise location.
• Feedback you send — if you write to us through the feedback box, we keep the text and any contact detail you choose to include (optional).
• Reports — when you report a wrong price or wrong opening hours, we keep the branch, the product or what you marked, what you wrote (if anything) and the random device ID, to check the report and to limit how many reports one device can send. They are deleted with the rest of your data when you ask.
• App usage — actions such as creating a list, comparing, searching and correcting are logged in aggregate to improve Zolli. We do not store precise GPS or personally identifiable rows.
• Previous lists on the website — the last three lists you compared on the website are kept in your browser only, so you can bring them back with one tap. They are not sent to us, and they are deleted when you clear the site's data in your browser.

Sharing — and what we will never do

We will never sell or share personal information that identifies you — not your shopping lists, not your location, not your device ID, not your contact details. We use no ad networks, and we let no third party contact you through Zolli.

Service providers acting only on our behalf: an AI processing provider (Anthropic) to read lists from text or images, and a cloud hosting provider (DigitalOcean) that runs the server. They process data solely for us, on our instructions, and may not use it for their own purposes.

Product photos: some product photos load directly from the chains' own image sites. As with any image, the chain's site sees your device's IP address, but not your list, your location or your device ID. On our website, photos load without telling the image site which page asked for them.

Aggregated, anonymous market insights: so that Zolli can stay free and ad-free, we may publish, share or sell fully aggregated and anonymous market insights — to retail chains, manufacturers, researchers, media or public bodies. These are computed from many users' data combined, contain no detail identifying any person, list or device, and cannot be traced back to you. For example:

• "the grocery basket price index in the southern district rose 3% last quarter"
• "45% of shoppers who searched for a given product ultimately chose a different brand"
• "demand for product X is 2x higher in certain cities than the national average"

We will never include individual-user information in such insights. That is Zolli's business model — we sell statistics about the market, not you.

Your choice: you can ask that your usage data be left out of the aggregated insights (in the app and on the website they are called "anonymous market statistics"): in the app's Settings, and on the website's About page. The choice applies from the moment you make it, to the device or browser you make it on. Insights already computed contain no identifier, so one device's data cannot be separated out of them.

Supermarket prices come from public, official sources and are not your personal data.

Security & retention

All traffic is encrypted (HTTPS). Analytics are kept in aggregate only. We do not store your precise location.

How long we keep data: raw usage data is kept for at most 180 days and then deleted automatically. The list text as you typed it is deleted sooner — within 30 days. Aggregate insights, with no link to any device, are kept indefinitely because they are not personal data.

To prevent automated copying of data and overload of the server, we limit how fast any one internet address can make requests. For this the IP address is used in the server's memory only and is not stored; we keep only the number of requests blocked each day, without addresses.

Your control & rights

• You can use Zolli with a city or an address you type, instead of GPS.
• You can ask that your data be left out of the aggregated insights (in the app's Settings or on the website's About page).
• You may request deletion of all the data tied to your device — usage data, preferences, reports and your insights choice. Email us at [email protected]. In the app, "מחיקת כל הנתונים שלי" (delete all my data) in Settings deletes what is stored on the phone and opens the page that requests deletion from the server.

Children

Zolli is not directed to children under 13, and we do not knowingly collect data from children.

Changes & contact

If we update this policy, we'll update the date above. For any privacy question: [email protected].