Privacy Policy

SulitSee is a smart grocery companion made by Kurvo, a company based in the Philippines ("Kurvo", "we", "us"). This policy explains what information SulitSee handles, why, where it's kept, and the choices you have.

We wrote it with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) in mind. It works together with our Terms of Service.

SulitSee is currently a preview. It works in a few parts:

• Your account is a Kurvo account, kept on Kurvo's servers. It's one sign-in shared by Kurvo apps such as SulitSee and MotIQ. Each app keeps its own plan and its own data. See Where your data is stored.
• Your grocery data (shopping list, receipts, favorites and settings) is saved in your browser and, when sync is on, also in your account, so it's on every device you sign in on. Sync is on by default for new accounts, and you can turn it off.
• Stays on your device: receipt photos, camera frames, Ask SulitSee questions and answers, the sign-in activity list in your profile, and display settings such as theme. Budgets, price history and Ask SulitSee answers are calculated in your browser.
• Demo mode runs entirely in your browser and is never sent to Kurvo. Leaving the demo clears it.

If you turn sync off on a browser, that browser's grocery data stays only there. It's then only as safe as your device, and it's gone if your browser data is cleared (see Retention and deletion).

Your Kurvo account

Kurvo's servers hold your account details:

• your first and last name and email address;
• your password, stored by our authentication provider only as a secure one-way hash that can't be turned back into your password;
• if you use Continue with Google, a link to your Google account. Google shares your name and email with us;
• if you add a passkey, its public key only. Your fingerprint or face never leaves your device;
• sign-in records kept by our authentication provider for security.

Your SulitSee membership

• your plan. Everyone is on the Free plan for now. Pro, Family and Negosyo are coming soon and can't be bought yet, so we don't collect any payment details;
• which versions of our Terms and this Privacy Policy you accepted, and when;
• when you joined SulitSee.

If you already use MotIQ, you can join SulitSee with the same Kurvo account. You'll be asked to accept SulitSee's own Terms and Privacy Policy first.

Your grocery data (synced when sync is on)

• Shopping list: each item's name, product, detail, price, quantity, whether it's checked, category and order, plus your list budget.
• Favorites: products you've saved.
• Receipts: the store, branch, date, total, number of items, totals per category, whether it was scanned, entered by hand or imported, and each line item's name, price, quantity, category and the catalog product it matched, if any.
• Recorded prices: the unit price of each item on your receipts, with the store, branch and date, and prices you type in for a barcode (with the barcode number). They build your price history for each product and are private to your account.
• Settings: your grocery budget and budget cycle, favorite stores and notification preferences.
• Scan count: the Free plan includes 5 receipt scans a month. Our server keeps a monthly tally to count them.

Your activity log

For your security, SulitSee keeps a record of what's done in your account: sign-ins and sign-outs, security changes (adding or removing a passkey, signing out other devices, asking for a password link), changes to your budget, cycle, stores and notifications, receipts and purchases added or deleted, exports, turning sync on or off, and Danger zone actions. Each entry has the time, the device (the browser and system, for example "Chrome on Android"), a session code, and for changes the old and new value.

The log is kept in your Kurvo account, where our server seals each entry into a SHA-256 hash chain so that a changed or removed entry can be detected, and a copy stays in your browser. It's there for you to check your own account, and we don't use it for anything else. You can see it in Profile → Settings → Activity log and export it. The demo's log stays in your browser.

Kept only on your device

• receipt photos and camera frames;
• Ask SulitSee questions and answers;
• the sign-in activity list shown in your profile;
• theme and glass settings, and your progress through the app tour.

SulitSee doesn't ask for your location, contacts, government ID numbers or payment card details. Receipts can include things like a store branch or a loyalty card number, so please avoid saving details you'd rather keep private.

Your information is used only to provide the features you ask for:

• to create your Kurvo account, sign you in securely, confirm your email and reset your password;
• to keep your data separate from everyone else's, and sync it across your devices when sync is on;
• to show your list, budget, receipts, favorites and price history;
• to compare prices and suggest "sulit" picks;
• to read receipts and barcodes and suggest details for you to review, and to count your monthly scans;
• to answer your questions through Ask SulitSee;
• to keep a record of which Terms and Privacy Policy you accepted;
• to let you export or delete your data.

Under the Data Privacy Act, we rely on your consent when you sign up and add information, and on the processing being necessary to provide the service you chose. We don't use your information for advertising, marketing profiles, or automated decisions with legal or similarly significant effects on you.

Your Kurvo account and SulitSee membership are stored with Supabase, the database and authentication provider that runs Kurvo's servers on our behalf, in its Singapore data centre (Amazon Web Services, Asia Pacific). This is a transfer of personal information outside the Philippines. Supabase processes it only to provide the service to us, under its data processing terms, and we remain responsible for it under the Data Privacy Act. Account emails, such as confirming your sign-up and resetting your password, are sent through Supabase.

Grocery data is stored in your browser's local storage for the SulitSee site. When sync is on, the synced items listed in Information SulitSee handles are also stored with Supabase in the same Singapore data centre. Database rules (Row Level Security) let only your account reach them.

The first time you sign in on a browser that already has grocery data that isn't in your account, SulitSee asks before uploading it. Nothing is uploaded unless you choose Upload and sync. You can choose Not now, and turn sync off or on later in Profile → Settings → Your data, where you'll also find Sync now.

Some things to keep in mind:

• Anyone who can use your browser profile may be able to open SulitSee and see the copy of your data saved there. Use a screen lock and your own browser profile.
• Your password is checked and stored by our authentication provider as a secure one-way hash. SulitSee doesn't keep it in your browser. Even so, please choose a password you don't use elsewhere.
• If your browser or device backs up or syncs site data, that copy is handled by your browser or device provider under their own terms.
• Any file you export contains your data in readable form. Store and share it with care.

When you scan a receipt, SulitSee reads it with Tesseract.js, an open-source OCR library that runs on your device. Your receipt photo is never uploaded to Kurvo or to an OCR service.

To work, Tesseract.js downloads its program files and language data from a public CDN the first time it's needed. That download doesn't include your photo. After you review the result, SulitSee saves only the details you confirm, and syncs them to your account when sync is on.

When you scan a barcode, the barcode is read on your device. To show the product's name and details, SulitSee may send the barcode number only to Open Food Facts, a free, community-run product database. It may also send the barcode number to Open Prices, its sister project, to show prices other shoppers have shared there.

The lookup doesn't include your name, email, list or receipts. Like any web request, these services can see your IP address and browser details, and handle them under their own privacy policy. If you'd rather not use the lookup, you can type the product in yourself.

SulitSee asks for camera permission only when you open the receipt or barcode scanner. The camera is used only while the scanner is open and stops when you close it.

Camera frames are processed on your device and aren't recorded or uploaded. You can decline or remove camera permission at any time in your browser settings, and choose a photo from your device instead.

In the preview, Ask SulitSee is rule-based and runs in your browser. Your questions and answers stay on your device. They're not sent to Kurvo or to any third-party AI provider, and they aren't synced.

If we ever connect the assistant to an online AI service, we'll update this policy first, explain what would be sent and to whom, and give you a choice before it applies to you.

SulitSee relies on a few services run by others:

• Supabase: runs Kurvo's servers on our behalf and holds your account and synced data, as described in Where your data is stored.
• Google: only if you choose Continue with Google. Google shares your name and email with us, and handles your Google sign-in under its own privacy policy.
• Cloudflare Turnstile (challenges.cloudflare.com): a bot check on sign-up, sign-in and password reset. It's usually invisible. To tell people from bots, Cloudflare may see your IP address and browser details.

SulitSee's pages also load files and public data from other services. When your browser fetches them, the provider can see standard request details such as your IP address, browser and device type, the time, and usually the page that asked. They don't receive your account, list or receipts.

• Fontshare (api.fontshare.com) and Google Fonts (fonts.googleapis.com, fonts.gstatic.com): typefaces.
• Unsplash (images.unsplash.com): the photo on the sign-in page.
• Open Food Facts and Open Prices: barcode number lookups and the product photo, when you scan a barcode.
• PSA OpenSTAT (openstat.psa.gov.ph): official average rice prices from the Philippine Statistics Authority, when you compare rice or ask about it. The request doesn't include anything about you.

These providers may operate servers outside the Philippines and handle request data under their own privacy policies. SulitSee serves its own styling and code, including the sign-in library, the barcode reader and the receipt reader, so those don't come from other services.

SulitSee itself doesn't set cookies and doesn't use analytics, advertising or tracking tools. It uses your browser's storage in two ways:

• Local storage keys starting with sulitsee: hold the working copy of your grocery data, a copy of your profile so SulitSee opens quickly, and records of what has been synced.
• Your sign-in session is kept by Supabase under the key kurvo-auth. If you tick Remember me, it's in local storage. Otherwise it's in session storage, which clears when you close the browser.

Third-party providers above may use their own technologies as described in their policies.

We don't sell, rent or trade your personal information. We only share it with the service providers that help us run SulitSee, such as Supabase, and only as described in Third-party services.

The prices you record aren't shared with other shoppers. We may later add an opt-in way to share prices with the community. It isn't available yet, it would be off unless you turn it on, and we'll explain it before it does anything.

We don't share your data with the supermarkets or brands shown in SulitSee.

Your account and synced data are protected with encrypted connections (HTTPS) and database rules (Row Level Security) that let each account reach only its own records. Your browser holds only a public "publishable" key, which can't get around those rules. Passwords are stored as one-way hashes, you can sign in with a passkey, and a bot check guards sign-up, sign-in and password reset.

Data kept in your browser depends on your device for its security. We recommend a screen lock, your own browser profile, an up-to-date browser, and not using SulitSee on shared or public computers.

No system is perfectly secure. We use organisational, physical and technical security measures as the Data Privacy Act requires, and we'll handle any personal data breach, including notifying the NPC and affected users where required, in line with the law.

Your account and synced data are kept while you have the account. Data in your browser stays until you remove it. You're in control:

• Profile → Settings → Danger zone lets you clear your shopping list, delete all receipts or erase all grocery data, from your account too when sync is on. These keep a safety copy in your browser for 24 hours so you can undo them; after that it's deleted.
• Clear the activity log, also in the Danger zone, deletes the log in your account and in your browser, after you confirm it's you. One sealed entry recording that it was cleared, and how many entries were removed, is kept.
• Profile → Settings → Account settings → Leave SulitSee erases SulitSee's data (lists, receipts, favorites, settings, plan and any receipt photo files) from our servers and this browser. Your Kurvo account stays, so you can keep using other Kurvo apps.
• Delete my Kurvo account, in the same place, permanently erases your Kurvo account and everything in every Kurvo app, including your MotIQ data. You'll confirm it's you with your password or passkey (a recent sign-in), then type DELETE.
• Clearing your browser's site data for SulitSee removes everything it stored in that browser.

When you delete your Kurvo account, we keep a minimal deletion record: the old account id, which apps were included, and when. It has no name or email. We keep it as proof for requests under the Data Privacy Act.

Deletion is immediate and can't be undone, and we can't recover deleted data. Remember to delete any CSV files you've exported if you want those gone too.

As a data subject under Republic Act No. 10173, you have the right:

• To be informed how your personal information is processed. That's what this policy is for.
• To access your information. Your profile, list, receipts and favorites are visible in the app, and you can email us for a copy of everything we hold about you.
• To object or withdraw consent. You can turn sync off, stop using SulitSee, and delete your data at any time.
• To rectification. You can edit your name in your profile, and your list and receipts in the app.
• To erasure or blocking. Use the Danger zone (clear the list, delete receipts, erase grocery data or clear the activity log), Leave SulitSee or Delete my Kurvo account (see Retention and deletion).
• To data portability. You can export your receipts as a CSV file where your plan includes it, or email us for a copy of everything we hold.
• To damages if you're harmed by inaccurate, unlawfully obtained or unauthorised use of your personal information, as provided by law.
• To file a complaint with the National Privacy Commission (privacy.gov.ph).

You can do most of this yourself, instantly, in the app. For anything else, email us at kurvo2026@gmail.com. We'd appreciate the chance to help before you go to the NPC, though you're free to contact it at any time.

SulitSee is made for adults who do the grocery shopping and isn't directed at children. If you're under 18, please use it only with a parent or legal guardian's consent and supervision.

If you're a parent or guardian and think a child used SulitSee without consent, you can sign in to the account and delete it from Profile → Settings → Account settings, or contact us for help.

Sync is now available, as described above. Before we sync anything further, such as Ask SulitSee questions, receipt photos or shared prices, or share data with any new service, we will:

• update this policy to explain what's collected, where it's stored, who processes it for us, any cross-border transfers, and how long it's kept;
• tell you in the app, and by email where we can reach you, before the change applies;
• ask for your consent where the law requires it. Moving data that's on your device will stay your choice.

We may update this policy as SulitSee grows. We'll change the effective date at the top, and for significant changes we'll tell you in the app, and by email when we can reach you, before they take effect.

When this policy or our Terms change, SulitSee will ask you to read and accept the new version before you continue.

Kurvo will designate a Data Protection Officer before SulitSee's public launch. Until then, privacy questions, requests and concerns can be sent to kurvo2026@gmail.com, and they'll reach the person responsible for privacy at Kurvo.

SulitSee is part of the Kurvo family of apps, alongside MotIQ and CurrenSee. Each app has its own privacy policy.