Privacy Policy

Klug provides consumer shopping tools and enterprise retail intelligence services. Where we determine the purpose and means of processing personal data, Klug acts as the data controller.

This policy applies to personal data collected through our marketing website (including price comparison, saved lists, the receipt scanner and your profile), consumer app, receipt workflows, waitlist forms, and enterprise portals.

• Identity and contact data — name, email address, and a phone number if you add one to your profile.
• Sign-in data — your email and password, or, if you sign in with Google, the name and email address Google sends us. We never see your Google password.
• Account and profile data — role, tenant, and preferences.
• Transaction and usage data — shopping lists and in-app actions.
• Receipt-derived data — the photo you upload, and the item names, prices, and store information read from it.
• Location data — only where you provide it, for example by tapping "Use my location", so we can show nearby branches and prices.
• Device and technical data — used for security, diagnostics, and performance.

• To provide and improve Klug services.
• To compare prices, estimate basket costs, and personalize insights.
• To process receipts and generate analytics for your account.
• To add anonymised store and price observations from scanned receipts to Klug's market data. These carry no personal details.
• To secure accounts, prevent abuse, and investigate incidents.
• To comply with legal and regulatory obligations in Kenya.
• To communicate service updates, support messages, and invited product news.

We process personal data on one or more lawful grounds recognized under the Kenya Data Protection Act, 2019, including consent, performance of a contract, compliance with a legal obligation, and legitimate interests that do not override your rights.

We may use cookies and similar browser storage to keep you signed in, to remember an unsaved list or receipt scan while you sign in, and for analytics and user experience. You can control cookie preferences through your browser settings, although some features, such as staying signed in, may stop working.

We do not sell personal data. We may share data with trusted service providers who support hosting, analytics, communications, storage, AI receipt reading, and security under contractual confidentiality and data protection obligations. If you choose to sign in with Google, Google handles your sign-in under its own privacy policy.

Where data is processed outside Kenya, for example by our hosting or AI receipt-reading providers, we take reasonable steps to ensure adequate safeguards, including contractual protections and security controls consistent with Kenyan data protection requirements.

We retain personal data only for as long as necessary for service delivery, legal compliance, dispute resolution, fraud prevention, and audit purposes. Retention periods may vary by data type and user role. You can ask us to delete your account at any time from the Delete account page, and once we verify the request we delete your account and associated data, including receipts, shopping lists, and group memberships, within 30 days. We may keep limited records where the law requires it.

Subject to applicable law, you may:

• Request access to your personal data.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict how we process your data.
• Withdraw consent where processing is consent-based.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.

We apply technical and organizational controls designed to protect personal data from unauthorized access, loss, misuse, and alteration — including access controls, environment segregation, and audit logging.

Klug services are not directed to children without proper legal basis and parental or guardian authorization where required by law.

We may update this policy from time to time. If changes are material, we will provide appropriate notice through our products or website.