Privacy Policy

The Shapo web application and the Shapo apps for iOS and Android (together, the "Service") are operated by Shapo, an independent service run by its developers and not yet incorporated ("we", "us"). This policy explains what personal information we collect, why, who receives it, how long we keep it, and the rights you have over it. It is written to meet the Protection of Privacy Law, 5741-1981, as amended by Amendment 13 (in force since 14 August 2025), and its regulations. It forms part of the Terms of Use.

1. Who we are and how to reach us

Shapo, an independent service run by its developers and not yet incorporated. We handle notices and requests by e-mail. E-mail for all matters, including privacy requests: shapo.app@gmail.com. Website: https://shapo.store.

2. What this policy covers

This policy covers the Shapo web application, the iOS and Android apps and our server. It does not cover the retailers' websites and apps that the Service opens for you, the sign-in providers you may use or any other third-party service — each has its own privacy policy, which applies when you use it.

3. The information we collect

3.1 Information you give us

• Account details: e-mail address, an optional display name and a password. We store the password only as a one-way hash. If you sign in through a third-party sign-in provider, we receive from it your e-mail address, your name (if you choose to share it) and a provider identifier, and nothing else. Where the provider lets you hide your e-mail address, we receive instead the private relay address it creates for you, and messages we send to that address reach you through the provider. Where the provider issues one, we also keep a token whose only use is to tell the provider to disconnect the Service from your account with it, which we do when you delete your account.
• Your shopping content: shopping lists, saved baskets, quantities, notes, and the address you enter for delivery — city, street and house number, and, if you choose to enter them for a store's checkout, floor, apartment, entry code and phone number.
• Preferences: language, theme, interface settings, plan and notification settings, and the store types you prefer.
• Content you upload to an optional feature is processed only to provide that feature. A document you upload is not kept once it has been processed; only the result (for example a product list) is stored, as part of your baskets. Where a service provider processes it on our behalf, section 5 says so.
• Store logins and payment details, only if you choose to save them: a retailer's sign-in session token (when you ask the app to keep a store's login), a store username and password, or payment-card details entered in the app's settings. They are kept in encrypted secure storage and are used only to prepare a cart at that store at your instruction. Shapo never charges a card; payment is always made on the store's own site.
• Messages you send us, and the e-mail address you send them from.

3.2 Information created while you use the Service

• Comparison reports and their history, and the "orders" records of carts the Service prepared or handed off.
• A record of your acceptance of the legal documents: the version accepted, the date and time, the language, the platform and the app version.
• Usage information: the screens you open, the buttons you tap, the searches you type and the errors the app runs into, each with the time, the app version and a session identifier. Our own server records it under a pseudonymous identifier derived from your account, never under your e-mail address itself.

3.3 Technical information

Our server records, like any web server, the IP address, browser or app type and version, operating system, time and the address requested, together with error information, in technical logs used for security and troubleshooting. The apps contain no advertising or analytics software-development kits and do not read your advertising identifier. Cookies and on-device storage are described in the Cookie & Storage Policy.

3.4 What we do not collect

We do not read your device's GPS location — the city or address you compare prices for is typed by you. We do not process payments and do not receive your card details from any store. We do not receive or store your password at any retailer. We do not access your contacts, photos or files, other than a file you choose to upload. We do not buy information about you from data brokers, and we do not track you across other apps or websites.

4. Why we use your information

• To provide the Service: keep your account, store your lists and baskets, price them across stores for the area you chose, prepare a cart at the retailer you pick, and provide the optional features you choose to use.
• To keep the Service secure: authenticate you, detect and block abuse, brute-force attempts and fraud, and investigate faults.
• To communicate with you: service messages (security, changes to these documents, account notices) and the messages you enable in Settings.
• To improve the Service: we analyse the usage information described in section 3.2, under its pseudonymous identifier, to find faults and to learn which features help. We do not use it for advertising and do not share it with anyone for advertising.
• To comply with the law and to establish, exercise or defend legal claims.

We do not use your information for advertising profiles, and we do not use your personal data to train artificial-intelligence models.

5. Who receives your information

We do not sell or rent personal information. We share it only as follows:

• Hosting and infrastructure. Our server and its storage run with a cloud hosting provider whose data centres may be located outside Israel, including in the European Union or the United States.
• Service providers acting on our behalf — for example for e-mail delivery, or for processing content you upload to an optional feature — receive only what that task requires and may use it only to provide the service to us. Some of them are located outside Israel, including in the United States.
• Sign-in providers, only if you choose to sign in with one of them: the provider learns that you signed in to Shapo, and we receive your e-mail (or the private relay address the provider created for you), your name and a provider identifier. When you delete your account we ask the provider, where it supports this, to disconnect the Service from your account with it.
• Content delivery. When the Service loads fonts, icon libraries and map tiles from third-party content networks, those providers see your IP address and standard request headers, as any web server does.
• Address lookups. To find the branches and couriers near the address you enter, the Service sends that address (street and city, never your name, e-mail or account) to a public map service that converts it into map coordinates, and those coordinates to a delivery platform's public directory of nearby stores. In the apps these requests come from your device, so those services also see its IP address.
• The retailer you choose. When you ask the Service to prepare a cart at a store, the products (barcodes and quantities) and the city or branch you selected are sent to that retailer's website or app to build the cart. If you sign in at the retailer inside the app, everything you do there is between you and the retailer under its own policy; the Service does not read it, except the sign-in token you explicitly ask it to keep for that store.
• Authorities and legal process: where required by law, court order or a competent authority, or to protect the rights, safety or property of users, the public or ourselves.
• A successor operator: if the Service is transferred to another operator (merger, acquisition, reorganisation), your information may be transferred with it, under this policy; we will notify you in the app or by e-mail.

6. Where your information is stored; transfers abroad

In the apps, your lists, baskets, saved addresses, order records, comparison reports and plan settings are stored on your device and, so that they are the same on every device you sign in to, also on our server with your account. Your other settings stay on the device. On the web, all of them are stored on our server. Because our hosting and some providers are located outside Israel, your information may be transferred to and processed in other countries. We transfer information abroad only to providers that commit contractually to protect it to a standard not lower than that required by Israeli law, in accordance with the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

7. How long we keep it

• Account and shopping content: for as long as your account exists. When you delete your account, everything held for it is deleted immediately (see the Account & Data Deletion page); copies in backups are overwritten within 30 days.
• Files you upload to an optional feature: not kept once processed; only the result produced from them is stored, as part of your baskets.
• Technical logs: for a limited period needed for security and troubleshooting, and then deleted.
• Usage information: up to 90 days, and then deleted automatically.
• Consent record: with your account, and deleted with it.
• Information we are required by law to keep: for as long as the law requires.

8. Security

We protect your information with measures appropriate to its sensitivity, as required by the Protection of Privacy (Data Security) Regulations, 5777-2017: encryption in transit (HTTPS/TLS); one-way hashing of passwords; encrypted secure storage for tokens, store logins and payment details (the device Keychain/Keystore in the apps, AES-256 on the web); account lockout and rate limiting against password guessing; access to production systems limited to the people who need it; a database-definition document and an incident-handling procedure. No system is perfectly secure, and we cannot guarantee that unauthorised access will never occur; if an incident affects your information in a way that requires notification, we will notify the Privacy Protection Authority and, where required, you.

9. Your rights

• Access (section 13 of the law). You may ask to inspect the personal information we hold about you. We will answer within 30 days, in Hebrew, Arabic or English as you request.
• Correction and deletion (section 14). If information about you is inaccurate, incomplete, unclear or out of date, you may ask us to correct or delete it.
• Delete your account. From within the app: Account → Delete account. Everything held for the account is deleted (section 7). If you cannot sign in, e-mail us from the account's address.
• Withdraw consent. You can switch off optional messages in Settings, remove a saved store login or payment details in Settings, and stop using any optional feature at any time.
• Direct mailing. We do not send direct mailing within the meaning of section 17C of the law and do not provide direct-mailing services. Should we ever send you marketing messages, we will do so only with your separate consent, and every message will carry a way to unsubscribe (see section 13).
• Complain. If you believe we have not handled your information lawfully, you may complain to the Privacy Protection Authority (הרשות להגנת הפרטיות) at the Ministry of Justice, in addition to any other remedy.

To exercise a right, write to shapo.app@gmail.com. We may ask you to confirm your identity — usually by writing from the account's e-mail address — before acting.

10. Children

The Service is intended for people aged 18 and over; a person under 18 may use it only with a parent's or guardian's consent. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

11. Automated processing and AI

Comparisons, product matching, replacement suggestions and reports are produced automatically by software, and some optional features use artificial-intelligence models, in part operated by service providers on our behalf (section 5). These are information tools: they make no decision with legal or similar effect on you, and every result can be checked, changed or ignored by you. Their limits are described in the Price & Information Disclaimer. We do not use your personal data to train AI models. You may ask us to correct information an automated feature produced about you.

12. Cookies and on-device storage

The Service uses only strictly necessary cookies and preference storage, and no advertising cookies or third-party analytics trackers. The Cookie & Storage Policy lists each of them.

13. Communications and marketing

We send service messages that operating the Service requires, and the messages you enable in Settings, to the address you chose. Marketing messages — advertisements, promotions, price alerts that promote a store — are sent only with your prior express consent under section 30A of the Communications (Telecommunications and Broadcasts) Law, 5742-1982, are marked as advertising, and always carry a free way to unsubscribe. You can withdraw consent at any time in Settings or through the link in any message.

14. Database registration and privacy officer

Under the law as amended, our database is not subject to registration, and we are not currently required to appoint a privacy protection officer (ממונה על הגנת הפרטיות) or to notify the Privacy Protection Authority of the database. We keep a database-definition document as the Data Security Regulations require, and we will update this policy if those obligations change. Privacy matters are handled by the contact in section 1.

15. Users outside Israel

The Service is operated from Israel for the Israeli market, and Israeli law governs our processing. If you nevertheless use it from elsewhere:

• European Economic Area / United Kingdom. Our legal bases are the performance of our agreement with you (your account, lists, comparisons and the messages you request), your consent (optional features and any marketing) and our legitimate interests (security, fraud prevention, improvement of the Service). You have the rights of access, rectification, erasure, restriction, portability and objection, may withdraw consent at any time, and may complain to your local supervisory authority. Transfers outside the EEA are protected by contractual safeguards.
• California. We collect identifiers (e-mail, name, account identifier), commercial information (your shopping lists and baskets), approximate location you type (city, address) and internet activity (technical logs), for the business purposes in section 4. We do not sell personal information and do not share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes other than providing the Service. You have the rights to know, to delete, to correct and to non-discrimination; exercise them by e-mail to shapo.app@gmail.com.

16. Changes to this policy

We may update this policy as the Service or the law changes. The version and effective date appear at the top. For material changes we will give notice in the app or by e-mail at least 14 days before they take effect, where practicable, and where consent is required we will ask for it again. The current version is always available in the app under Account → Legal & privacy, and at https://shapo.store/legal/privacy.

17. Language

This policy is published in Hebrew and in English. In case of any inconsistency between the versions, the Hebrew version prevails.

18. Contact

Shapo, an independent service run by its developers and not yet incorporated

• E-mail for all matters, including privacy requests: shapo.app@gmail.com
• Website: https://shapo.store