Privacy Policy

1. General Information

This policy applies to the website operating at the URL: savorsaver.com.
The service operator and personal data administrator is: Marek Koszlak m10k, ul. Fryderyka Chopina 43/8, 80-268 Gdańsk.
Contact email address of the operator: savorsaverapp@gmail.com.
The operator is the administrator of your personal data in relation to the data provided voluntarily on the Website.
The website uses personal data for the following purposes:

Presentation of offers or information,
Performance of legally binding obligations on the personal data administrator as per Article 6(1)(c) of the GDPR to the extent provided for by specific regulations (e.g., accounting).

The website acquires information about users and their behavior in the following ways:

Through voluntarily entered data in forms, which are entered into the Operator's systems,
By storing cookies files (cookies) in end devices.

2. Selected Data Protection Methods Used by the Operator

The places of logging in and entering personal data are protected at the transmission layer (SSL certificate). Thus, personal data and login data entered on the page are encrypted on the user's computer and can only be read on the target server.
The operator periodically changes its administrative passwords.
To protect data, the operator regularly makes backup copies.
An important element of data protection is the regular updating of all software used by the Operator to process personal data, which particularly means regular updates of software components.

3. Hosting

The website is hosted (technically maintained) on the operator's servers: Vercel.
The hosting company, to ensure technical reliability, conducts server-level logs. These may include:

Resources identified by URL identifier (addresses of requested resources - pages, files),
Time of query arrival,
Time of sending the response,
Name of the client station - identification performed by the HTTP protocol,
Information about errors that occurred during the HTTP transaction,
URL address of the page previously visited by the user (referer link) - in case the transition to the Website occurred through a link,
Information about the user's browser,
IP address information,
Diagnostic information related to the process of self-ordering services through recorders on the site,
Information related to handling electronic mail directed to and sent by the Operator.

4. Your Rights and Additional Information on Data Usage

In some situations, the Administrator has the right to transfer your personal data to other recipients, if it is necessary to fulfill the contract concluded with you or to fulfill the obligations incumbent on the Administrator. This applies to such groups of recipients:

Hosting company on the basis of entrustment,
Payment operators,
Authorized employees and associates who use the data to achieve the purpose of the site,
Companies providing marketing services for the Administrator.

Your personal data processed by the Administrator will not be kept longer than is necessary to perform the related activities specified by separate regulations (e.g., accounting). In terms of marketing data, they will not be processed longer than 3 years.
You have the right to request from the Administrator:

Access to personal data concerning you,
Their correction,
Deletion,
Processing restriction,
And data portability.

You have the right to object to the processing of personal data for the purpose of carrying out legally justified interests pursued by the Administrator, including profiling, provided that there are no valid legally justified bases for processing, overriding your interests, rights, and freedoms, in particular establishing, investigating, or defending claims.
Complaints against the Administrator's actions can be lodged with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
Providing personal data is voluntary, but necessary to service the Website.
In relation to you, actions may be taken consisting of automated decision making, including profiling, in order to provide services within the framework of the concluded contract and for the Administrator to conduct direct marketing.
Personal data is not transferred to third countries within the meaning of data protection regulations. This means that we do not transfer them outside the European Union.

5. Information in Forms

The website collects information voluntarily provided by the user, including personal data, if they are provided.
The website may save information about connection parameters (time marking, IP address).
In some cases, the website may save information facilitating the linking of data in the form with the users email address filling in the form. In such a case, the users email address appears inside the URL of the page containing the form.
Data provided in the form are processed for the purpose resulting from the function of a specific form, e.g., to carry out the process of service report handling or commercial contact, service registration, etc. Each time the context and description of the form in a readable way informs what it is used for.

6. Administrator's Log

Information about users behavior on the site may be logged. These data are used to administer the site.

7. Essential Marketing Techniques (Analytics & Cookies)

The operator uses Vercel Web Analytics to measure site traffic and performance. This solution does not use cookiesand processes only anonymous usage data. The legal basis is our legitimate interest in measuring and improving the service.

8. Information about Cookies

The website uses cookies.

Cookies (cookies) are IT data, in particular text files, which are stored in the user's end device of the Website and are intended for using the website's pages. Cookies usually contain the name of the website they come from, the time of storage on the end device, and a unique number.

The entity placing cookies on the Website user's end device and accessing them is the website operator.

Cookies are used for the following purposes:

Achieving the goals set out above in the part "Essential Marketing Techniques"

The website uses two basic types of cookies: "session" (session cookies) and "permanent" (persistent cookies). "Session" cookies are temporary files that are stored in the user's end device until logging out, leaving the website, or turning off the software (web browser). "Permanent" cookies are stored in the user's end device for the time specified in the parameters of cookies or until they are deleted by the User.

Web browsing software (web browser) usually by default allows the storage of cookies in the user's end device. Website users can change the settings in this regard. The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this subject is provided by the help or documentation of the web browser.

Restrictions on the use of cookies may affect some of the functionalities available on the Website's web pages.

Cookies placed in the Website user's end device may also be used by entities cooperating with the Website operator, in particular this applies to companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing Cookies – How to Express and Withdraw Consent in Practice?

If the user does not want to receive cookies, they can change the browser settings. We reserve that disabling the handling of cookies necessary for authentication processes, security, maintaining user preferences may hinder, and in extreme cases, prevent the use of www websites.

To manage cookie settings, select from the list below the web browser you use and follow the instructions:

Mobile devices:

10. Accounts & Authentication (Google and Supabase)

We offer sign-in with Google (OpenID Connect). When you authenticate, we receive basic account information permitted by the scopes you approve (typically: openid, email, profile), such as your Google user ID, email address, name, and profile image. We do not receive your Google password. You can revoke our access in your Google Account settings.

We use Supabase to provide authentication, store your account data, and manage subscription status. Depending on your use of the Service, we may store your email, basic profile fields, subscription tier/status, and technical metadata necessary to operate the Service. Essential authentication/session cookies are used for security and to keep you signed in.

Legal bases include performance of a contract (account access and subscriptions) and our legitimate interests in running and securing the Service.