Scontivo
Privacy policy
Last updated: 31 October 2026
Scontivo compares grocery prices across Europe on scontivo.com and in the Scontivo app for iPhone and Android. This policy explains which personal data Scontivo uses, why, for how long, and what you can do about it.
In short
- We don't sell your data, build advertising profiles or use third-party trackers.
- Your Scontivo account is your Apple or Google sign-in. We keep only the account number that Apple or Google gives us, not your name, email address or password.
- When you use your phone's location, we round it to about a kilometre and keep the areas you use for 30 days.
- You can delete your account in the app at any time.
Who is responsible
Scontivo is run by Savage Software, a Dutch business registered with the Chamber of Commerce (KvK) under number 87535718. Savage Software is the controller for the personal data described here.
Questions and requests: [email protected].
The Scontivo app
Trying the app without an account
When you first open the app, it creates a key on your phone and registers the installation with us. We store a random installation number, whether the phone is an iPhone or an Android phone, the public half of the key, the result of the device check (see below) and when the installation was last used. The private half of the key never leaves your phone. Without an account you can look at prices around one place. Searching, lists and favourites need an account.
Your account
You sign in with Apple or Google. Apple or Google confirms to us who you are with a signed message. That message contains an account number that is specific to Scontivo, and it may also contain your email address and name. We keep only the account number and which of the two you used; the rest is discarded straight away. We never see your Apple or Google password. When you sign in with Apple, we don't ask for your email address at all.
Your account also records when it was created, whether you have Premium, and which installations are signed in to it. The app shows you those devices, and you can sign them out.
Scontivo uses information received from Google only to sign you in, as described here. Its use adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Lists, favourites and price alerts
Your shopping lists (products, quantities, and whether you've ticked them off), your favourites and the favourites you've set a price alert on are stored with your account. That way they are the same on all your devices. When you remove something, we keep a short deletion note so your other devices catch up, and remove it completely within 30 days.
Your location
Prices depend on where you shop, so the app needs an area. You can choose a town by name, or let the app use your phone's location. It does that only when you ask and only with your permission. The app doesn't follow your location in the background.
When you use your phone's location, the app sends the position to us. We round it to about one kilometre before we use or store it, and look up the nearest town. The app also tells us whether your phone reports the position as simulated. Simulated positions are refused.
For 30 days we keep a record of the areas you use: the rounded position, the town's name, the country, whether you chose it by name or by location, and the time. We use it for two things:
- To show prices near you.
- For our travel rules. An account can open only a limited number of new places per day, week and month, and a phone's position can't move faster than a plane. These rules stop people from copying Scontivo's prices by searching everywhere at once. Places you have used in the last 30 days are never affected, so a trip or a holiday works normally.
When the rules refuse a request, the app tells you when you can try again. We keep the refusal for 30 days. If an account is refused often, we may look at it ourselves. If you think a refusal was wrong, write to us.
Device checks
To make sure requests come from the real Scontivo app on a real phone, the app uses Apple App Attest on iPhone and Google Play Integrity on Android. Apple and Google run these checks and give us the result, which we store with the installation. Google processes device information for Play Integrity under its own privacy policy.
Premium
You buy Premium through the App Store or Google Play. Apple or Google handles the payment. We receive only what is needed to unlock Premium: the product, when it started and when it ends, and a transaction number. We never see your payment details.
Notifications
If you turn on price alerts and allow notifications, we store your phone's push address and send alerts through Apple's or Google's push service. You can switch this off in the app or in your phone's settings.
Fair-use limits
To protect the service, we count requests per account, per installation and per network (IP) address over short periods. These counters are deleted after at most two days.
The website scontivo.com
Cookies
The website only uses cookies that make it work or remember your choices. It sets no analytics or advertising cookies, so we don't ask for consent.
| Cookie | What it does | Kept for |
|---|---|---|
scontivo_market | The country you chose | 1 year |
scontivo_visitor | A random number that links your browser to your saved products, cart, price alerts and brand choices on our server | 1 year |
scontivo_session | Keeps you signed in, if you have a website account | 30 days |
scontivo_preference_theme, scontivo_preference_locale | Light or dark mode and your language | 1 year |
scontivo_preference_location_… | The place you chose: its name, country, coordinates and search radius | 1 year |
__cf_bm | Set by Cloudflare to protect the website against bots | 30 minutes |
Saved products, cart, price alerts and brands
What you save on the website is stored on our server under the random number in the scontivo_visitor cookie. It stays until you remove it. If nothing you saved has changed for 12 months, it is deleted.
Website account
If you create an account on the website, we store your name and email address, and Mailjet emails you a sign-in code. Codes expire after 10 minutes, and we store them only in scrambled form. To stop abuse, we count code requests per email address and per network address, and we store the network address only in scrambled form. Your account stays until you ask us to delete it.
Visitor statistics
We count visits on our own server, without cookies or tracking scripts, and keep only daily totals: pages, country and city, language, type of device and browser, and the website you came from. To estimate how many different people visited, we combine a shortened IP address with a key that changes every day. These keys are deleted after 32 days. Country and city come from a database on our own server. Your IP address isn't stored for this or sent anywhere.
Maps, address search and donations
- The map images come from OpenStreetMap through our own server, so OpenStreetMap doesn't see your visit.
- When you search for an address, our server sends the text you typed (not your IP address) to OpenStreetMap's Nominatim service.
- The map software (Leaflet) is loaded from jsDelivr. Like any site your browser loads something from, jsDelivr receives your IP address.
- Donations go through Stripe's payment pages, and Stripe handles the payment. We receive the amount, the date, and the name and email address you give Stripe. We keep them for 7 years, because Dutch tax law requires it.
Ads
Scontivo may show ads. They come from Adpricot, Scontivo's own advertising service, and are chosen by country, language, the page, and the area you chose if you chose one. We don't use profiles, tracking pixels or third-party ad networks. Our server fetches the ad, so Adpricot doesn't see your IP address unless you click. A click goes through Adpricot, which counts it.
Server logs
Our servers log errors and technical events to keep Scontivo running. For the app, this includes refused travel requests, with the account number and the place. Our logs don't include IP addresses, and they are deleted within 30 days. DigitalOcean and Cloudflare, which host and protect the website, see your IP address because they deliver the website to you.
Why we may use your data
| What | Legal basis (GDPR) |
|---|---|
| Your account, lists, favourites, price alerts, Premium; prices for your area | Needed to provide the service you asked for (article 6(1)(b)) |
| Travel rules, device checks, fair-use limits, bot protection, server logs | Our legitimate interest in protecting the service and its prices from misuse (article 6(1)(f)) |
| Visitor statistics | Our legitimate interest in knowing how the website is used, without tracking anyone (article 6(1)(f)) |
| Your phone's location and notifications | Your permission, which you can withdraw in your phone's settings at any time (article 6(1)(a)) |
| Donation records | A legal obligation: Dutch tax law (article 6(1)(c)) |
Who else handles data
| Who | For what |
|---|---|
| DigitalOcean | Hosts our servers and databases |
| Cloudflare | Network and bot protection in front of the website, through DigitalOcean |
| Apple and Google | Sign-in, device checks, the app stores, purchases and push notifications. They act under their own privacy policies |
| Mailjet (EU) | Sends website sign-in codes |
| Stripe | Donations |
| OpenStreetMap Foundation | Address search (the text you typed) |
| jsDelivr | Delivers the map software to your browser |
Some of these are American companies. Transfers to them are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses. We don't sell or rent personal data, and we share it with others only when the law requires it.
How long we keep data
| Data | Kept |
|---|---|
| Your account and signed-in devices | Until you delete your account, then removed within 30 days |
| Lists, favourites, price alerts | Until you remove them or delete your account; removed completely within 30 days |
| An app installation without an account | 12 months after it was last used |
| Areas you used and travel refusals | 30 days |
| Fair-use counters | At most 2 days |
| Website saved products, cart, price alerts and brand choices | Until you remove them, or 12 months after your last change |
| Website account | Until you ask us to delete it |
| Visitor statistics keys | 32 days (daily totals are anonymous and kept) |
| Donation records | 7 years |
| Server logs | At most 30 days |
| Emails you send us | As long as needed to help you, at most 2 years |
Your rights
You can ask to see the data we have about you, and to correct, export or delete it. You can also ask us to limit its use, or object to how we use it. Where we rely on your permission, you can withdraw it at any time.
- Delete your account in the app, under Account verwijderen on the account screen. This signs out all your devices at once. We remove your account, lists, favourites and location history within 30 days, and if you signed in with Apple we also tell Apple to end Scontivo's access.
- Anything else: email [email protected]. We answer within a month. Because we don't know your email address, we may ask you to confirm the request from within the app.
If you're not happy with how we handle your data, you can complain to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or to the authority in your own country.
Security
Connections are encrypted. Each app installation proves its requests with a key that never leaves the phone. Sign-in tokens and codes are stored only in scrambled form, and only the people who run Scontivo can reach the servers.
Children
Scontivo isn't meant for children under 16, and we don't knowingly keep data about them.
Changes
When this policy changes, we update this page and the date at the top. We announce important changes in the app before they take effect.