← Shoplet

Privacy Policy

Last Updated:2026-05-11

Shoplet (the "App") is provided by Tech Nautilus Pty Ltd ("we", "us", or "our"). We attach great importance to the security of your personal information and privacy, and have prepared this Privacy Policy in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles ("APPs"), as well as any laws and regulations applicable to your region. This policy explains the specific rules under which we collect, use, store, share, transfer across borders, and protect your personal information. Please read this policy carefully before using the App. By using any feature of the App, you are deemed to have fully read, understood, and accepted all of its contents.

1. Information We Collect

We collect your information only to the extent necessary to provide you with the features of the App, including:

  1. Account information: the email address, mobile phone number, password (stored in encrypted form), nickname, avatar, etc. you provide when registering or signing in. If you choose to sign in with a third-party account (such as Google), we will obtain the necessary identifying information (such as email address and unique user identifier) through that third party's authorisation.
  2. Device and environment information: device model, operating system version, app version, language, time zone, network type, unique device identifier, etc., used for feature compatibility and troubleshooting.
  3. Usage information: records of products you have actively browsed (history), favorited products, search keywords, viewing times, products you have actively subscribed to (and your price-drop alert thresholds), feedback and data-quality reports you have submitted, and shopping lists you have created (including public shopping lists), etc.
  4. Personalisation settings: interface language, font size, theme preferences, notification preferences, etc.
  5. Push and device-binding information: to deliver price-drop alerts for products you have subscribed to, or other notifications you have opted into, we record — with your permission — your device ID and push token (such as your FCM token). You may turn off notifications at any time under "Settings → Notifications", or unregister a device under "My Devices" to break the association.
  6. Diagnostic and log information: when the App encounters an exception, we may collect anonymised or pseudonymised information such as crash reports, error stacks, and operation paths, used for issue diagnosis and product improvement.
  7. Permission grants: we request camera permission (for scanning barcodes or QR codes) and photo library permission (for selecting images containing barcodes from your library) only when you actively trigger the related feature; we do not activate them unilaterally or read them in the background, nor do we upload your photos.

We do not collect your real-time location, contacts, calendar, health/fitness data, or cross-app browsing data. The App does not involve any payment transactions and does not process your bank card or payment account information.

For anonymous (signed-out) users, we continue to collect the categories of information described in this section (excluding account information) — device information, usage information, diagnostic information, and personalisation settings — for the purpose of providing basic features, maintaining service availability, and improving the product. Data in anonymous mode is primarily stored on your device and can be cleared by uninstalling the App. Because there is no account association, anonymous users cannot exercise data rights such as access, obtaining a copy, or deletion through the channels described in Section 8 ("Your Rights"). To exercise these rights, please register and sign in first.

2. Purposes of Use

We use your information only for the following purposes:

  1. Providing and maintaining the core features of the App (account registration and sign-in, product scanning, price comparison, price history, AI summaries and translations, history, favorites management, product sharing, etc.);
  2. Improving the product experience (such as providing translations matching your language preference, displaying relevant locally-rendered content based on products you have viewed);
  3. Conducting anonymised statistical analysis, troubleshooting, and product optimisation;
  4. Responding to your enquiries, feedback, or complaints when you proactively contact us;
  5. Fulfilling legal obligations or cooperating with regulatory or judicial authorities as required by law.

We will not use your information for any purpose other than those listed above, nor will we use it for personalised advertising or external sale.

3. About Product Data Sources

The product basic information, prices, images, specifications, stock, and other data displayed in the App are sourced from publicly available data published by retailers on their official websites, official mini-programs, or other public channels. We only aggregate and display such information; we do not access any retailer's customer personal information, nor do we share our user information with retailers.

4. AI Processing and Third-Party Services

To provide you with features such as AI summaries, AI translations, and intelligent categorisation, the App will transmit the necessary product text data to the AI service providers we use for processing. Such processing is limited to the public product data and does not involve your personally identifiable information. When selecting third-party service providers, we require them to comply with data protection standards no lower than those of this policy and contractually limit their use of the data. The main third-party services used by the App include but are not limited to:

  1. Amazon Web Services (AWS): identity authentication (Cognito), cloud storage, and infrastructure services;
  2. AI model service providers: used for AI summaries, AI translations, automatic categorisation, and other content generation;
  3. Google Firebase (Crashlytics for crash monitoring and Analytics for usage statistics): used to collect anonymised crash reports, error stack traces and aggregate feature usage counts so we can diagnose failures and improve the App. Firebase is provided by Google LLC; the relevant data may be transmitted to servers controlled by Google outside Australia and is governed by the Google Privacy Policy (https://policies.google.com/privacy). We do not collect advertising identifiers (IDFA/AAID), run personalised advertising or enable cross-app tracking in the App;
  4. Push notification services: used for sending notifications when you have subscribed to relevant alerts (where applicable);
  5. Third-party account services (such as Google): used for sign-in scenarios with third-party accounts.

Each third-party service has its own privacy policy, and we recommend that you review the relevant service provider's privacy terms when using the corresponding feature.

5. Storage, Retention, and Security

  1. Storage location: your preference settings, cached data, and browsing records in the signed-out state are primarily stored on your device. Account information, favorites, cross-device synced history, and similar data after sign-in are stored with the cloud service provider we use (primarily AWS servers in the Sydney, Australia region).
  2. Retention period: we retain your personal information only for as long as is necessary to provide the service to you. Specifically: search logs are auto-deleted after 90 days; sign-in refresh tokens are valid for 30 days; after account deletion, we will delete or anonymise your other related information within a reasonable period (see item 5 below for special retention of consent records).
  3. Security measures: we implement industry-standard technical and management measures to protect the security of your information, including but not limited to transport encryption (HTTPS/TLS), encrypted storage of sensitive information, access control, and periodic security audits.
  4. Security incidents: although we make reasonable efforts to protect your information, no technical measures can guarantee 100% security. In the event of an incident affecting the security of your information, we will notify you in a timely manner and take remedial measures in accordance with applicable laws.
  5. Special retention of consent records: in accordance with compliance requirements, we will permanently retain records of your consent to each version of the Software License & Service Agreement, the Privacy Policy, and the Disclaimer (including the version identifier, timestamp, and locale code), so that we can evidence your consent in the event of regulatory enquiries or your own request. Even after you delete your account, these consent records will be retained in pseudonymised form (no longer directly identifying you), as a compliance exception to the retention period in item 2 above.

6. Sharing and Cross-Border Transfers

  1. We will not sell, rent, or share your personal information with any third party for profit-making purposes.
  2. We will share your information only in the following circumstances: (a) with your express consent; (b) sharing with the necessary third-party service providers to enable the features of the App (see Section 4); (c) where required by laws and regulations, or to comply with lawful requests from administrative or judicial authorities; (d) to protect the legitimate rights, personal safety, or property safety of the App, other users, or the public.
  3. Cross-border transfers: as some of the cloud services we use may be located outside Australia (including but not limited to the United States, Singapore, Japan, etc.), your information may be processed in a cross-border environment. We will ensure that overseas recipients provide a level of protection no less than that required by Australian law, in accordance with APP 8.
  4. Special disclosure for public shopping lists: when you mark a shopping list you have created as "public", the list name, item entries, and the creator's nickname become visible to all users of the App (including signed-out anonymous users), until you switch the list back to private or delete it. Please do not include personal information about yourself or others (such as contact details, addresses, or identification numbers), advertising material, or inappropriate content in public shopping lists.

7. Cookies and Local Storage

The App uses local storage (such as SQLite, Secure Storage, and SharedPreferences) to save your preference settings, sign-in credentials, cached data, etc. This data is stored only on your device and is not actively uploaded to our servers. You may clear this information through "Settings → Clear Data" within the App or by uninstalling the App. The App does not use third-party tracking cookies and does not perform cross-app or cross-site behavioural tracking.

8. Your Rights

Within the scope permitted by applicable laws and regulations, you have the following rights regarding your personal information:

  1. Access and obtain a copy: you have the right to know the personal information we hold about you and to request a copy of it;
  2. Correction and completion: you have the right to correct inaccurate or incomplete personal information;
  3. Deletion: you may delete your account and the related data through "Account Settings → Delete Account" within the App; account deletion is irreversible;
  4. Withdrawal of consent: for data processing based on your consent, you have the right to withdraw your consent at any time;
  5. Restriction of processing: you have the right to require us to restrict the processing of your personal information in certain circumstances;
  6. Complaints: if you believe our processing has infringed your legitimate rights and interests, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or the data protection regulator in your region.

To exercise the above rights, please contact us through the contact details at the end of this policy. We will respond to your request within a reasonable period (usually within 30 calendar days).

9. Protection of Minors

The App is not specifically designed for minors. We do not intentionally collect personal information from minors under 16 years of age. If you are the guardian of a minor and find that the minor has provided personal information without your consent, please contact us through the contact details at the end of this policy, and we will promptly delete the relevant information in accordance with the law.

10. Changes to This Policy

We may amend this Privacy Policy in light of changes to laws and regulations, business development, or service adjustments. The amended policy will be published through in-app notifications, push notifications, or by updating the "Last updated" date on this page. For significant changes (such as a material expansion in the categories of information collected or a substantive change in the purposes of use), we will notify you in a more prominent manner and, where necessary, seek your consent again. Your continued use of the App after the amendments take effect will be deemed acceptance of the amended Privacy Policy.

If you have any questions, comments, or suggestions about this Privacy Policy, or if you wish to exercise your privacy rights, please contact us through the in-app "Feedback" feature or by email at privacy@technautilus.com.

Tech Nautilus Pty Ltd 2026-05-11