At a glance: Club Savings may display advertising to help support the Service. We do not sell personal information, and we do not share receipt images, purchase details, membership numbers, email addresses, or phone numbers for ad targeting. If an advertising partner engages in tracking across other companies’ apps or websites, Club Savings will request permission through Apple’s App Tracking Transparency framework before allowing that tracking.
1. Scope and who we are
This Privacy Policy applies to the Club Savings mobile application, related services, and these support pages (collectively, the “Service”). The Service is operated by Oktopas LLC (“Oktopas,” “we,” “us,” or “our”).
Club Savings is an independent application and is not affiliated with, sponsored by, or endorsed by Costco Wholesale Corporation. Costco and related marks belong to their respective owners.
2. Information we collect
Account and contact information
When you create an account, we collect your email address, an account identifier, and authentication information. You may also provide a phone number. Passwords and sign-in verification are handled through Amazon Cognito; we do not store your plaintext password.
Membership and preferences
You may provide a Costco membership number so the Service can compare it with membership information detected on uploaded receipts. We also store settings such as your automatic matching schedule and whether automatic matching is enabled.
Receipts, purchase information, and files
When you choose to scan or upload a receipt, we collect the image or PDF and information extracted from it. Depending on what appears on the receipt, this may include a membership number, receipt or transaction number, purchase date and time, warehouse location and number, purchased items, quantities, prices, discounts, totals, and return-list status. Uploaded coupon-book files and their extracted deal information may also be stored.
Camera, photo library, and files
The app requests camera access when you choose to photograph a receipt, photo-library access when you choose an existing image, and file access when you choose a document. The app does not scan your library or files in the background. It receives only the items you select or capture.
Service and diagnostic information
Our servers may automatically process limited technical information needed to operate and protect the Service, such as IP address, request time, requested endpoint, authentication status, and error or diagnostic events. The app stores authentication tokens and your username in secure storage on your device to keep you signed in. We do not use this information for cross-app tracking or advertising.
Advertising and ad-interaction information
If advertising is enabled, an advertising provider may process information such as IP address, device and operating-system details, app version, device or advertising identifiers where permitted, approximate location derived from IP address, ads displayed, ad views or clicks, and advertising diagnostics. The exact information depends on the advertising provider and whether you allow tracking. Before enabling a specific advertising provider, we will update this policy to identify that provider and describe its actual data practices.
3. How we use information
We use information to:
- create, authenticate, secure, and maintain your account;
- upload, store, display, and organize receipts and selected documents;
- extract receipt details using optical character recognition and machine-learning services;
- compare receipt items with available savings information and generate potential price-match opportunities;
- run matching on the schedule you select and send relevant account or savings emails;
- maintain your return list, preferences, and opportunity status;
- respond to support requests, diagnose errors, prevent abuse, and improve reliability;
- display contextual or, only with required permission, personalized advertising; measure ad delivery and performance; limit repeated ads; and detect advertising fraud; and
- comply with law and enforce our Terms of Use.
5. Retention and deletion
Account information, uploaded receipts, extracted purchase information, preferences, and saved opportunities are generally retained while your account is active or until you delete the applicable receipt or your account.
You can permanently delete your account from Account → Delete Account in the app. This deletes your account, receipt files, extracted purchases, uploaded coupon books, saved price-match opportunities, and return-list data from active systems. The deletion cannot be undone.
Residual copies may remain temporarily in encrypted database backups for up to 7 days and in security or operational logs for up to 14 days before expiring through normal retention cycles. We may retain limited information longer when required by law, to resolve disputes, or to protect against fraud and abuse.
If advertising is enabled, an advertising provider may retain ad-delivery, interaction, fraud-prevention, or consent records under its own documented retention practices. We will identify the provider and link to its privacy information before enabling its SDK.
6. Your choices and privacy rights
- Account information: View and update available profile settings in the app.
- Receipts: Delete individual receipts from the app.
- Account deletion: Use Account → Delete Account, or contact us if you cannot access your account.
- Camera and photos: Revoke permissions in your device settings. You can still use other available upload methods.
- Automatic matching: Disable or change its schedule from your account settings.
- Advertising tracking: You may deny the Apple tracking request or later change tracking access under Settings → Privacy & Security → Tracking on your device. Denying tracking will not remove ads, but ads should not be personalized using activity across other companies’ apps and websites.
- Service emails: Account verification and essential operational messages may be required to use the Service. You may disable automatic matching to stop its scheduled savings reports.
Depending on where you live, you may have additional rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. Email us to make a request. We may need to verify your identity before completing it.
7. Security, children, and international processing
Security
We use reasonable administrative, technical, and organizational safeguards, including encrypted HTTPS connections, private cloud storage, encryption at rest, authenticated access, and secure on-device credential storage. No system can guarantee absolute security.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and delete it.
International processing
The Service is operated from and primarily hosted in the United States. If you use it elsewhere, information may be transferred to and processed in the United States, subject to applicable safeguards.
8. Changes to this policy
We may update this policy as the Service or legal requirements change. We will post the revised policy here, update the “Last updated” date, and provide additional notice when a change is material and applicable law requires it.
9. Contact us
For privacy questions or requests, contact the Service operator: