Basketly ("we", "us") is operated by Thomas Karamanlis, a sole trader trading as Basketly, based in England, United Kingdom. This policy explains what personal data we collect when you use Basketly, why we collect it, where it goes, and the rights you have over it under UK data protection law (UK GDPR and the Data Protection Act 2018).
Questions or requests about your data: privacy@basketly.uk.
| Data | Where it comes from | Why we use it |
|---|---|---|
| Account details (name, email address, sign-in identifiers) | You, when you create an account (handled by our sign-in provider, Clerk) | To create and secure your account and let you sign in |
| Your recipes, weekly plan, shopping baskets and saved lists | Created by you as you use the app; stored on your device | To make the app work — building priced baskets and weekly plans |
| Usage events (for example: a recipe was selected, a basket was built, a shopping trip was confirmed, which listed items you marked as bought or not bought) | Generated as you use the app | To understand how Basketly is used and improve it, and to create the anonymised, aggregated shopping insights described in section 5 |
| Ingredient and product queries (the ingredients being priced and your chosen supermarket) | Generated when the app prices a basket | To fetch live supermarket prices for you |
| Basic technical data (browser type, approximate region, error logs) | Your device, automatically | To keep the service running, secure and free of faults |
We do not collect payment details (Basketly is currently free), and we do not sell your personal data.
Basketly is built on a small number of specialist services. Each receives only what it needs to do its job:
| Provider | Job | What it handles |
|---|---|---|
| Clerk | Sign-in and accounts | Your account details |
| Supabase | Database and analytics | Usage events, recipe library |
| Cloudflare | Secure relay and caching for price lookups | Ingredient and supermarket queries (not your identity) |
| Pepesto | Supermarket price data | Ingredient and supermarket queries (not your identity) |
| Netlify | Hosting | Standard web-server technical logs |
Some providers process data outside the UK (for example in the EU or US). Where they do, transfers rely on recognised safeguards such as the UK's adequacy decisions or International Data Transfer Agreements / Standard Contractual Clauses.
Basketly creates statistical insights about how people shop — for example, what proportion of baskets switch from one supermarket to another when the price of an ingredient changes. These insights are aggregated and anonymised: they describe trends across many users, are prepared so that no individual can be identified from them, and contain no names, contact details, account identifiers or other personal data.
We may share or sell these anonymised, aggregated insights to third parties such as supermarkets, suppliers and market-research organisations. Because no one can be identified from them, they are not personal data under UK GDPR.
We never share or sell your personal data — information that identifies you. If that ever changed, we would first ask for your explicit, separate consent in the app, you would be free to say no or to withdraw consent at any time, and saying no would not affect your ability to use Basketly.
Under UK GDPR you can ask us to: access the personal data we hold about you; correct it; delete it; restrict or object to how we use it; or provide it in a portable format. Where we rely on consent, you can withdraw it at any time. Email privacy@basketly.uk and we will respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
Basketly stores data on your device (using browser local storage) to remember your baskets, plans, settings and sign-in session — this is essential for the app to function. Our sign-in provider sets cookies needed to keep you securely signed in. We do not use advertising cookies.
Basketly is for people aged 17 or over. We do not knowingly collect data from anyone younger; if you believe a younger person has created an account, contact us and we will delete it.
If we change this policy in a meaningful way, we will update the date at the top and, for significant changes, tell you in the app. Continued use after changes take effect means the updated policy applies.