Sherwood is a price-drop tracker. You add products you have bought; the app re-checks their price over time and notifies you if it falls below what you paid, so you can request a refund of the difference. This policy explains what data the app handles and why.
On first launch the app creates an anonymous account identified only by a random token stored on your device. You do not need to give us your name, email, or any other personal details to use Sherwood.
You can optionally add an email address and a password to your account, for example to sign in on the web or move to a new phone. This is never required in the app. We do not use advertising, analytics SDKs, or third-party trackers, and we never sell your data.
| Data | Why | Stored? |
|---|---|---|
| Anonymous account id & random token | Identify your device to sync your tracked items | Yes, until you delete your account |
| Email address and password (only if you create an optional account) | Sign in on other devices or the web, and reset a lost password | Yes, until you delete your account. The password is stored only as a salted hash (scrypt), never in readable form |
| Password reset codes | Sent to your email when you request a reset | Briefly: codes expire after 15 minutes and are removed when used |
| Product links you add, and the prices/dates you enter | The core tracking feature, for purchases and wishlist items | Yes, until you delete the item or account |
| Push notification token | Send price-drop alerts (only if you enable notifications) | Yes, until you delete your account |
| Feedback and price-error reports you send from the app | Fix problems and improve price tracking | Yes, linked to your account and deleted with it |
| Shared order-confirmation text (receipt import) | Extract which products you bought and their prices | Not stored. The raw text is processed once and discarded; only shop name, order number, purchase date, and the product names/prices we detect are saved |
To do its job the app shares the minimum necessary data with these processors:
These providers process data on our behalf under their own terms; we do not authorise them to use it for their own purposes. Receipt text you share may contain personal details (such as your name or address). It is transmitted for processing and not retained by us, but you should remove anything you do not wish to share before importing.
All communication between the app and our server uses encrypted HTTPS. Our server is hosted in the EU.
We keep your tracked items and account data until you delete them. Deleting an item removes it and its price history and alerts. Deleting your account removes everything associated with it, including any email address, feedback, and receipts. We do not retain raw receipt text.
You are in control of your data at any time:
Under the GDPR you have the right to access, correct, or erase your data, to restrict or object to processing, and to data portability. In-app deletion is the fastest way to exercise erasure; for anything else, email us. You may also lodge a complaint with your data protection authority (in Sweden, the Integritetsskyddsmyndigheten, IMY).
Sherwood is a general-audience shopping utility and is not directed at children.
If this policy changes, we will update the date above and, for significant changes, note it in the app.