Privacy policy
In short: the public site uses no advertising or analytics cookies and doesn’t track you. In the app we only process what it needs to work for your family: store passwords are encrypted, the AI assistant never receives them, and you can export or delete your data at any time.
Who we are
Satelit (satelit.md and app.satelit.md) is the controller of the data described here. Contact us at privacy@satelit.md.
The public site, satelit.md
We use no advertising or analytics cookies. We only keep your language, theme and city in your browser (the “satelit_*” cookies).
On your first visit the language comes from your browser’s settings and the city from the approximate location of your IP address, which Cloudflare provides. We don’t store that location: your browser turns it into a city and deletes it. You can change both at any time.
Our servers and delivery network (Cloudflare) temporarily keep technical logs (IP address, page, date) for security and operation.
Searches on the site are sent to our price service without any data about you and are cached for up to 6 hours.
The assistant on satelit.md
Questions asked without an account and the photos attached to them are sent to the AI model (Claude, Anthropic) to get you an answer. The conversation is tied to a technical cookie (“gid”, 30 days) and only your browser can see it.
Photos are shrunk in your browser before they are sent, without location data, and are deleted from our servers after 7 days.
The Satelit app
Account data: name, email, language and password (stored only as a hash).
Family data: spending, lists, meals, plans, budgets and assistant conversations, visible only to family members.
Connected store accounts: credentials are encrypted (AES-256-GCM) and used only to import history and prepare the cart, at your request.
The AI assistant
When you use the assistant, your message and the data needed for the answer are sent to the AI model provider (Anthropic), which processes them on our behalf. Passwords and credentials are never sent.
Discount cards
The card number is stored encrypted (AES-256-GCM). Only its owner and those they shared it with can see it, and the owner can take access back at any time. The AI assistant never receives it.
If you add a card with a photo, the barcode is read on your phone, and the photo goes to the AI model (Anthropic) only to recognise the store and the printed number. We do not keep the photo.
Matching a card to the shop you are in happens on your phone: your position does not reach us.
Flight price alerts
If you turn on a price alert on satelit.md, we keep your email, the route, the dates, the number of travellers and the maximum price, so we can write when the price drops. The alert starts only after you confirm your email from the link we send (double opt-in). One alert sends at most one email a day.
Emails go out through our email provider. Every email has a link that stops the alert in one click. Unconfirmed alerts are deleted after 7 days, stopped and expired ones 30 days after the travel date.
Prices come from the public Travelpayouts (Aviasales) data. The “Book on Aviasales” links are partner links: Aviasales knows you came from Satelit, but it never gets your email from us.
How long we keep data
Account and family data, for as long as you have an account. After deletion we remove it from live systems straight away and from backups at their next rotation.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection under Moldova’s Law No. 133/2011 on personal data protection and GDPR principles. Export and deletion are available directly in the app.
You can lodge a complaint with the National Center for Personal Data Protection.
Changes
If we change this policy we update the date below and, for significant changes, let you know in the app.
Last updated: