Last updated: 29 July 2026. This policy explains how ProxiShop collects, uses, and protects your personal data.
ProxiShop lets you shop in a physical store remotely, by voice, with a real person there to help. ProxiShop is currently in limited testing as part of postgraduate research at the University of the West of Scotland, and is not open to the public.
ProxiShop Ltd is a private limited company registered in England and Wales, company number 17229197, with its registered office at 71 to 75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We operate the ProxiShop mobile application and website (proxishop.co.uk). References to "we", "us", or "our" mean ProxiShop Ltd, which is the data controller for the personal data described in this policy. Our contact email is hello@proxishop.co.uk.
Your account. Your email address and name, so you can sign in and we know whose order is whose.
What you say. ProxiShop works by voice. Your speech is converted to text on your device, and that text is sent to our servers so the app can act on it. Your most recent command and the app's reply are stored so the assistant remembers where you were in a conversation. We do not keep a recording of your voice.
Your live session. Live audio and video are carried between you and your shopper during a session. This is streamed in real time and is not recorded or stored by us.
Your shopping. Items in your basket, totals, order history, and any shopping lists you create.
Your location. Only while a session is active, and only to match you with a nearby store and shopper. We do not track your location when you are not shopping.
Product images. When you or your shopper asks the app to describe something, an image of the shelf or product is sent for analysis. It is not retained afterwards.
Payment. Card details are handled entirely by Stripe and never reach our servers. We hold only the outcome of a payment and the amount. During the research testing period ProxiShop runs in test mode and no real payment can be taken.
We do not collect health data, and we do not ask whether you are disabled.
To operate the service. This means connecting you to a shopper, acting on what you say, describing products, maintaining your basket, and completing an order. Our lawful basis is performance of a contract with you.
To keep the service working and secure. This means diagnosing faults and preventing abuse. Our lawful basis is legitimate interests.
For research, if you are a study participant. You will have given separate written consent, and may withdraw it at any time.
We do not use your data for advertising. We do not sell it. We do not use it to train artificial intelligence models.
We use the following providers to run the service. Each receives only what it needs, and processes it on our instructions.
| Provider | What it receives | Where |
|---|---|---|
| Supabase | Account, orders, session records | EU (Ireland) |
| LiveKit | Live audio and video during a session | EU |
| OpenAI | Text of your spoken command; product images | United States |
| Anthropic | Text of your spoken command | United States |
| Text of your spoken command; product images | United States | |
| Stripe | Payment processing | United States / EU |
We share your first name and live session with your assigned shopper, because they need to know who they are helping. Shoppers do not see your address, payment details, or order history. We will disclose data if legally required to do so.
Your account and order data are stored in the European Union (Ireland). Speech and image processing takes place in the United States, under standard contractual clauses approved for that purpose. Those providers process the data on our instructions only, and may not use it to train their models under the terms we operate on.
Account and order records are kept while your account exists. The assistant's short-term memory holds only your most recent command and reply, and is overwritten each time you speak. Live audio and video are never stored. Research data from the study is deleted six months after the dissertation is submitted. If you delete your account, everything associated with it is removed within 30 days, except anything we are legally required to retain.
Under UK GDPR you have the right to access, correct, or delete your personal data. You may also restrict or object to processing, or request portability. To exercise any of these rights, email hello@proxishop.co.uk. We will respond within one month, at no charge. If you are taking part in the research study, you may withdraw at any time without giving a reason, and your data will be deleted.
Microphone. Required, as ProxiShop is operated by voice. Camera. Used by your shopper to show you products, and to scan barcodes. Location. Only during an active session, to find nearby stores. Notifications. To tell you when your shopper has responded. You can refuse or withdraw any of these in your phone's settings. Refusing microphone access will prevent voice control, which is how most of the app works.
Our website uses only essential cookies required for basic functionality. We do not use advertising or tracking cookies. No third-party analytics platforms (such as Google Analytics) are currently deployed on this website.
ProxiShop is not intended for anyone under 18, and we do not knowingly collect data from children.
Data is encrypted in transit and at rest. Access is limited to those who need it. Payment card details never touch our systems. No system is perfectly secure. If a breach affects you, we will tell you and the Information Commissioner's Office as the law requires.
If we change this policy we will update the date at the top of this page, and for significant changes we will tell you in the app.
For all privacy enquiries: hello@proxishop.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.