Privacy Policy
This policy explains what information PulseMyBasket collects, why, and what you can do about it. It applies to the PulseMyBasket website (pulsemybasket.co.za) and the PulseMyBasket app (app.pulsemybasket.co.za), including when installed as a Progressive Web App.
1. Information we collect
Account information
If you create an account, we store your email address, a securely hashed version of your password (we never store your actual password, and we can't see it), and the date/time you accepted our Terms and Privacy Policy.
Session and security information
When you sign in, we create a session record containing a security token, the approximate time of sign-in, your browser's user-agent string, and the IP address the sign-in came from. This is used to keep your account secure, including enforcing that only one device or browser can be signed in to your account at a time. See our Account Security page for details.
Location
To find nearby stores and calculate distance, you can share your device's precise location, or type a suburb, town, or postal code instead. A location you provide is used to answer that specific request (e.g. "what's nearby") and is stored on your own device, in your browser, so it's remembered next time you visit. It is not built into a location history or profile on our servers.
Barcode scans and product photos
When you scan a barcode or take a photo to identify a product, the barcode number or the image is sent to our server to identify the product, then discarded. Photos are processed in memory to extract product information and are not saved to disk or kept afterward.
Search activity
We keep a record of search terms, the area you searched in, and how many results were returned, to improve product matching and for basic analytics. This is not linked to your account or to an identifiable device.
Shopping basket
Items you add to your basket are stored in your browser (not on our servers) so your basket is there when you come back. Clearing your browser data will clear it.
Technical/security logs
Like most websites, our servers keep standard access logs (such as IP address, page requested, and timestamp) for a limited period, for security monitoring and troubleshooting.
2. How we use this information
- To operate your account and keep it secure, including the one-active-session security rule.
- To identify products from a barcode or photo and compare their prices.
- To find nearby stores and calculate distance.
- To improve product matching accuracy and troubleshoot issues.
- To respond to messages sent via our Contact form.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Cookies and local storage
We use a small number of cookies and browser local storage entries needed for the site and app to work. See our separate Cookie Policy for the full list.
4. Third parties
We don't share your personal information with third parties for their own marketing purposes. We may use a spam-prevention service (Cloudflare Turnstile) on our Contact form, and, if configured, an email delivery provider to send password-reset emails and receive contact messages. If you buy PulseMyBasket Plus, your payment is processed by LvN Digital (lvndigital.co.za), the trading name of Louis van Niekerk, which acts as our payment processor. We share with it only what is needed to take and confirm the payment (your name, email address and the plan you chose), and it passes on the payment confirmation. Payments are processed securely by LvN Digital (lvndigital.co.za) and appear as LvN Digital on your bank statement. Your card details go to its card processor and never reach PulseMyBasket. Retailer prices shown are sourced from retailers' own publicly available data. Using PulseMyBasket does not share your identity with those retailers.
5. Retailer trademarks and non-affiliation
Retailer names, logos, and product images used to display comparison results remain the property of their respective owners. PulseMyBasket is not affiliated with, endorsed by, or sponsored by any retailer it compares.
6. Data retention
Account data is kept for as long as your account exists. Session records are kept only as needed for security (e.g. so you can see when your account was last accessed) and are superseded automatically when you sign in elsewhere. Password-reset tokens are single-use and expire after a short period whether or not they're used. Search analytics are not linked to your identity.
7. Your rights (POPIA)
Under South Africa's Protection of Personal Information Act (POPIA), you have the right to access, correct, or request deletion of your personal information, and to object to certain processing. To exercise any of these rights, contact us using the details below. You can also delete your account yourself with the Delete account button on the Account page of the web app or the Account screen of the mobile app; this removes your account and its data immediately. See Support.
8. Children
PulseMyBasket is not directed at children, and we do not knowingly collect personal information from children.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by an updated "last updated" date above.
10. Contact us
For any privacy question or to exercise your POPIA rights, use our Contact page and select "General question" or "Account / sign-in."