Privacy Policy
Effective Date: 12 May 2025
Last Updated: 7 June 2025
Welcome to Simplifyer! We are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your data when you use our Platform or Services, and what rights you have in relation to that information.
We encourage you to read it carefully. If you have any questions regarding this Privacy Policy or our data practices, you can contact us.
About Simplifyer
Simplifyer is a registered trademark and a Platform operated by Virtuosismo D’Águia Unipessoal Lda, a company incorporated and registered in Portugal with company registration number 518090760. For the purposes of this Privacy Policy, Simplifyer, "we", "us", or "our" refers to Virtuosismo D’Águia Unipessoal Lda. We act as the data controller in relation to the personal information processed through our Platform and Services.
In certain cases, Simplifyer may act as a data processor on behalf of third-party partners. For example, if you receive digital receipts or similar services through one of our partners without creating a Simplifyer account or directly using our Platform, the primary data controller will be that partner. In such cases, we recommend reviewing the privacy policy of the relevant partner to understand how your personal data is processed.
Contents of this Privacy Policy
About this Privacy Policy
The personal information we collect, how we collect it, and why
Our legal basis for processing personal information
Anonymised & Aggregated Data
AI and Automated Processing
When we share your personal information
Marketing Communications & Service Communications
How long we store your personal information
International transfers of your personal information
Security of your personal information
Links to third-party sites
Age restrictions
Your rights and choices
Cookies and tracking technologies
General
Contacting us
About this Privacy Policy
This Privacy Policy applies to the personal information we collect through our Platform and Services, including via our website, mobile application, customer support, telephone, post, social media platforms, third parties, and when you otherwise communicate with us.
It explains how we collect, use, share, and safeguard your personal data, as well as the legal bases on which we process it. It also describes your rights under applicable data protection laws and how you can exercise them.
We may update this Privacy Policy from time to time to reflect changes in our legal obligations, business practices, or the way we process your personal data. When we do, we will post the updated version on our Platform and indicate the date of the latest revision. We encourage you to review this Privacy Policy periodically to stay informed.
The personal information we collect, how we collect it, and why
Personal information means any information that can directly or indirectly identify you.
We process your personal information in accordance with this Privacy Policy and applicable data protection laws. We do not sell your personal information.
Below is a summary of the types of personal information we may collect, how we collect it, and why we process it.
1. Information you provide directly to us
We collect the following types of information when you interact with our Platform or Services:
Account Information: name, email address, phone number, date of birth, VAT number.
Purpose: to create and manage your account, provide the Platform and Services, and communicate with you.Authentication credentials: such as your password or login details.
Purpose: to enable secure access to your account.Marketing preferences: as set by you in the Platform or through our communications.
Purpose: to send you relevant marketing messages (with your consent) and manage your communication preferences.
2. Information we collect from your use of the Platform
When you use our Platform or Services, we automatically collect certain information, including:
Receipt Data: product names, quantities, prices, payment methods, store details, dates of purchases, VAT number.
Purpose: to provide receipt management functionality, generate spending insights, and deliver personalized services.Device & Usage Data: IP address, device model, operating system, app usage data.
Purpose: to monitor system performance, ensure security, prevent fraud, and improve our Services.Preference Data: inferred consumer behavior and interests, based on your receipt activity.
Purpose: to personalize your experience, improve recommendations, and group users into anonymized behavior clusters.Payment & Transaction Data: if applicable, when you make purchases through the Platform (future feature).
Purpose: to process payments and comply with legal obligations.
3. AI-Derived Insights
We use Artificial Intelligence (AI) to analyse your receipt data and generate predictive models about your preferences, purchasing behaviour, and likely future purchases. We process this data to:
Personalize your user experience;
Recommend relevant offers and content;
Assign you to anonymised behaviour clusters for analytical and commercial purposes.
You may request human review of any AI-based processing by contacting us.
4. Information we collect from other sources
We may also collect personal data about you from third-party sources where permitted by law. This includes:
Information from third-party services that you choose to connect with your Simplifyer account (for example, email or financial service providers);
Publicly available sources, for fraud prevention and verification purposes.
5. Special categories of personal data
We do not knowingly collect or process special categories of personal data, such as health data, political opinions, religious beliefs, or biometric data.
Our legal basis for processing personal information
We ensure that all processing of your personal information is carried out lawfully, fairly, and transparently, and in accordance with this Privacy Policy and applicable legal requirements.
We process your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and the UK Data Protection Act 2018 (DPA 2018). We only process your personal information where we have a valid legal basis to do so.
Depending on the specific purpose, we may rely on one or more of the following legal bases:
Performance of a contract: We process your personal information to provide the Platform and Services to you, to fulfill our contractual obligations, or to take steps at your request before entering into a contract.
Legitimate interests: We process your personal information where it is necessary for our legitimate interests, provided that such interests are not overridden by your rights and interests. These interests include:
providing and improving our Platform and Services;
maintaining the security of the Platform;
preventing fraud;
analysing usage trends and developing new features;
promoting our business (including limited direct marketing, where permitted).
Compliance with a legal obligation: We process your personal information where it is necessary for compliance with a legal or regulatory obligation to which we are subject.
Consent: Where required by law, or where we otherwise rely on your consent (for example, for certain types of marketing communications or personalised advertising), we will process your personal information based on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time by updating your preferences in the Platform settings or contacting us.
Anonymised & Aggregated Data
We may use your receipt data and other usage data to generate anonymised behavioural clusters and aggregated insights. This data is stripped of any personal identifiers and may be used to identify market trends and consumer segments. Aggregated and anonymised data may also be shared with brands, advertisers, or research partners. Such data cannot be used to identify you.
AI and Automated Processing
We use Artificial Intelligence (AI) to analyse your receipt data and generate predictive models about your preferences, purchasing behaviour, and likely future purchases. This enables us to personalise your user experience, recommend relevant offers and content, and assign you to anonymised behaviour clusters for analytical and commercial purposes.
We do not make decisions that have a legal or similarly significant effect on you based solely on automated processing. You may request human review of any AI-based processing by contacting us.
When we share your personal information
We may share your personal information with trusted third parties where necessary to provide our Platform and Services, comply with legal obligations, or pursue our legitimate interests. These include:
Trusted service providers (e.g. hosting, analytics, customer support), under strict Data Processing Agreements;
Regulators or public authorities where legally required;
Brands, advertisers, or research partners, but only in the form of aggregated, anonymised insights and behaviour clusters that cannot identify you;
Potential business partners in connection with any merger, acquisition, or sale of assets, subject to appropriate safeguards.
We do not sell your personal information.
Marketing & Service Communications
Marketing Communications
With your explicit consent, we may use your behavioural data to serve relevant, personalised ads within the Platform and to send you marketing messages. You can manage your marketing preferences at any time through the Platform settings, unsubscribe link, or by contacting us.
Service Communications
Even if you opt out of marketing communications, you will still receive essential service communications from us, such as app updates, account-related notifications, and legally required information.
How long we store your personal information
We retain your personal information only as long as necessary to fulfil the purposes set out in this Privacy Policy or to comply with legal obligations. Inactive accounts may be deactivated and personal data deleted after 183 days of inactivity.
Financial records may be retained for up to 7 years to comply with tax regulations. Aggregated, anonymised data may be retained indefinitely for statistical purposes. You may request deletion of your personal data at any time.
International transfers of your personal information
If your personal information is transferred outside the European Economic Area (EEA) or the United Kingdom, we ensure that appropriate safeguards are in place to protect your data. These may include Standard Contractual Clauses (SCCs) or adequacy decisions in accordance with applicable data protection laws.
Security of your personal information
We implement robust technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or disclosure. These measures include:
Data encryption;
Pseudonymisation and anonymisation;
Access controls and secure infrastructure.
Access to your personal data is restricted to those employees, agents, and contractors who need to know such information for the purpose of providing our services.
Links to third-party sites
Our Platform may contain links to third-party websites or services. This Privacy Policy applies only to personal information collected by us through our Platform and Services. We are not responsible for the privacy practices of third-party sites. We encourage you to read the privacy policies of any third-party sites you visit.
Age restrictions
You must be at least 18 years old to use our Platform and Services. We do not knowingly collect personal information from individuals under this age.
If we become aware that we have collected personal data from an individual under 18, we will take steps to delete such information promptly. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us.
Your rights and choices
As a user in the EU/EEA or UK, you have the right to:
Access your personal information;
Correct inaccurate or incomplete information;
Request erasure of your personal information (“right to be forgotten”);
Restrict or object to processing of your personal information;
Withdraw consent where processing is based on consent;
Receive your personal information in a portable format (data portability);
Lodge a complaint with a data protection authority.
You can exercise these rights by contacting us.
You may also contact your local Data Protection Authority:
In Portugal: Comissão Nacional de Proteção de Dados (CNPD)
In the UK: Information Commissioner's Office (ICO)
Cookies and tracking technologies
Our Platform may use cookies and similar tracking technologies to enable essential functionality, analyse usage, and deliver personalised content.
Where required by law, we will request your consent before setting cookies or using tracking technologies. You can manage your cookie preferences through your device settings or the Platform settings.
For more detailed information, please refer to our Cookies Policy.
General
This Privacy Policy is governed by and construed in accordance with the laws of Portugal and, where applicable, the laws of the United Kingdom. If any part of this Privacy Policy is found to be invalid or unenforceable, that will not affect the validity of the remaining provisions, which shall remain fully enforceable. Our failure to enforce any part of this Privacy Policy shall not constitute a waiver of our rights. This Privacy Policy is provided in English. In the event of any conflict between a translated version and the English version, the English version shall prevail.
Contacting us
For questions, concerns, or to exercise your data rights, contact us.
Thank you for trusting Simplifyer.