Privacy policy
Last updated 8 September 2026 (the product was called Blippa until then).
This policy explains what BestB stores, why, and for how long. It covers the BestB app and this website. BestB is operated from Stockholm, Sweden; all data is stored in Amazon Web Services in the EU (Stockholm region).
What we store
- Your account: your email address, your display name, and the stores you belong to. We do not store a password - signing in uses a six-digit code sent to your email, or Google or Apple sign-in.
- Your inventory: the products, categories, barcodes, expiry dates, and product photos you record, plus a log of changes (who deleted what, so it can be undone).
- Date photos: the cropped photo of a printed expiry date is read as text inside our own Google Cloud project in the EU; the photo is not kept there. A copy of the cropped photo, with the date you confirm for it, is kept in our own EU storage to measure and improve date reading. It shows the label only, never you, and is deleted with your account.
- Device notification tokens, if you turn reminders on.
- Technical logs with request times and error details. Invite links and email addresses are removed from logs before they are stored.
- Crash and usage reports: if the app crashes or misbehaves, an anonymous technical report (the error and app version) is sent to our EU-hosted monitoring, and the app records coarse anonymous usage events such as "app opened". These reports are scrubbed in the app before sending: they never include your email, name, inventory, photos, or barcodes.
The shared product catalog
When you record a product whose barcode we have never seen, its barcode, name, and photo are added to a catalog shared with all BestB stores, so the next shop that scans it does not retype it. The shared entry does not say which store contributed it, and it never includes your expiry dates, quantities, or any account detail.
Who else processes it
- Amazon Web Services - hosting, database, storage, and the email that delivers your sign-in code (EU).
- Google - Google Cloud in the EU reads the printed date from a cropped date photo inside our own cloud project (it receives only that photo), and Google verifies your sign-in if you choose Google sign-in.
- RevenueCat, Apple, and Google Play - handle subscriptions. Card details go to the app store, never to us; we only learn whether a subscription is active.
- Expo - delivers push notifications to your device.
- Sentry (EU) - receives anonymous crash reports.
- PostHog (EU) - receives anonymous usage events.
We do not sell personal data, and we do not use it for advertising.
How long we keep it
Account and inventory data is kept while your account exists. Sign-in codes expire in ten minutes; sessions expire and rotate; date photos kept to improve date reading are deleted with your account; deleted items stay recoverable for 30 days so a mistake can be undone.
Deleting your account
You can delete your account from inside the app at any time: open the menu, choose Settings, and tap Delete account. You will be asked to type DELETE to confirm. This erases your account, your name, and your membership of every store. If you are the only owner of a store, that store and everything in it is deleted too, for everyone, and the app tells you so before it happens. Deletion is immediate and cannot be undone. If you cannot reach the app, write to privacy@bestbtracker.app and we will do it for you.
Your rights
Under the GDPR you can ask for a copy of your data, ask for it to be corrected, or ask us to delete your account and its data. Write to privacy@bestbtracker.app and we will answer within 30 days. You may also complain to the Swedish Authority for Privacy Protection (IMY).
Children
BestB is a tool for businesses and is not directed at children.
Changes
If this policy changes materially we will say so in the app before the change takes effect.