App and Extension Privacy Policy

Last updated: 28 October 2026

This notice covers the CouponAlert app, its Safari and Chrome browser extensions, and the cloud service. The website privacy notice covers visits to couponalert.app.

1. Who is responsible

2. What we process and why

Local use, accounts, and synchronization

You can store manually entered coupons locally without an account. Cloud features require sign-in. Google or Apple supplies a provider-specific identifier, email address, and, if available, your name. Apple can supply a relay address. We use these details to create and recognize your account, authenticate you, and synchronize your coupons. Verified identities with a matching email address may be linked to the same account.

Coupon records include the code, discount, merchant name and website, description, expiry date, and creation/update dates. We store local coupons and preferences on your device, cloud coupons on our server, and session credentials in device or browser storage. Providing account and coupon data is necessary for the associated feature, not a statutory obligation. You can use local features or manual entry instead of optional import features.

The legal basis is performing the service you request, Article 6(1)(b) GDPR. Necessary device storage and access for sign-in, saved coupons, preferences, and the enabled extension are based on Section 25(2)(2) TDDDG.

Scanning and AI-assisted import

When you request a scan or import a shared image, the selected image is uploaded to our server and sent to OpenAI to extract the coupon fields. Uploaded material can contain names, addresses, or other personal information visible in the image; crop or remove information not needed for the coupon before submitting it.

We use the results to create a coupon in your account. Extraction is automated and may be inaccurate, so check the result. It does not make decisions about you with legal or similarly significant effects. The legal basis is Article 6(1)(b) GDPR. Camera or photo access is limited by your device permissions; granting that permission does not itself authorize unrelated processing.

We do not keep an image archive as part of your account. Images are processed temporarily by our service; processed copies may remain in device caches. Provider retention is separate: OpenAI's API may retain inputs and outputs in abuse-monitoring logs, normally for up to 30 days, with exceptions for legal or safety reasons. These are not promises of zero retention. See OpenAI's API data controls. We do not use submitted content to train our own models.

Email imports and verification

If you register an import address, we store that address and its verification status and send a verification email. When you forward a message to the CouponAlert import mailbox, our email host receives its headers, body, and any attachments. Our importer checks the sender, processes the message's text through OpenAI, and stores the extracted coupon and a message identifier to prevent duplicate imports. Attachments are not used by the email extractor.

The source is the sender and any people whose information appears in the forwarded message. Forward only material you are entitled to submit and avoid sensitive or unnecessary third-party information. Successfully imported messages are deleted from the import mailbox. Rejected messages remain for review and failed messages for retry, for no more than 30 days after receipt unless a specific legal obligation or legal claim requires longer retention. Deleting a coupon does not itself delete a retained mailbox message. Contact us if such a message needs to be located and erased. The legal basis for your requested import and verification is Article 6(1)(b); abuse checks and limited handling of incidental third-party data rely on Article 6(1)(f), our interest in secure, reliable imports.

Subscriptions

RevenueCat manages subscription entitlements. Its SDK is initialized when the app starts, including before sign-in; it uses an app-specific identifier and can receive purchase/receipt information, entitlement status, IP address, and technical app/device data. After sign-in, our account identifier is associated with subscription status. We do not intentionally send coupon or forwarded email content to RevenueCat. Apple, or the applicable app store, processes payments; we do not receive full payment-card details.

We process subscription data under Article 6(1)(b) to supply paid features; compliance with applicable accounting obligations uses Article 6(1)(c). Store operators also process data for their own payment, security, and legal purposes under their own notices.

Merchant information and links

Merchant searches send the entered merchant name or domain to Brandfetch to suggest merchant details. The app requests merchant logos from Google's favicon service using the merchant domain. Direct requests from your device also reveal your IP address and ordinary network request data to those services. These requests support merchant identification and display under Article 6(1)(f), our interest in recognizable, usable coupon records. Opening a merchant or redemption link sends a normal browser request to that website, which is responsible for its own processing.

Browser extensions

With the browser access you grant, the extension checks URLs and hostnames of accessible tabs for checkout/cart pages and matches them against your saved coupons on your device. This can include open tabs, not only the focused tab. It downloads and caches your coupon list, displays matches, copies a code when requested, and can send your requested coupon deletion to our server. It does not send your browsing URLs to CouponAlert or create a server-side browsing history. Matching uses URLs and your saved coupons, not checkout form fields. Notifications are inserted into the visited page, so that page's scripts may be able to read the coupon details displayed there.

The Safari extension obtains session credentials through the app's native bridge and shared secure storage. The Chrome extension has its own Google or Apple sign-in flow and stores its session in local extension storage. Cached coupons, credentials, and short-lived tab state support the enabled extension. The legal basis is Article 6(1)(b) GDPR and, for necessary device access, Section 25(2)(2) TDDDG. Revoke site access, disable, or remove the extension in your browser to stop this processing.

Reminders, support, and security

Expiry reminders are scheduled locally if you enable notifications; this does not send your coupon list to a remote notification service. You can switch reminders off in the app or system settings. Scheduling your requested reminders is based on Article 6(1)(b).

If you contact support, we process your contact details, message, and relevant account information to answer it (Article 6(1)(b) for contractual enquiries, otherwise Article 6(1)(f), our interest in responding to enquiries). Technical access and error logs can include IP address, time, requested route, response details, and account identifier. They support security and troubleshooting under Article 6(1)(f). We do not operate advertising tracking in the app or extensions or sell your personal data.

3. Who receives data and international transfers

Access is limited to people maintaining the service and providers needed for the relevant feature: IONOS for API/database hosting in Germany; Webgo for email; Google for sign-in and favicons; Apple for sign-in and store services; OpenAI for extraction; RevenueCat for subscriptions; Brandfetch for merchant information; and Cloudflare for encrypted database backups. Providers acting on our instructions are processors; sign-in providers, app stores and external websites also have their own controller responsibilities. We may disclose data to public authorities where legally required, or to advisers where necessary to establish or defend legal claims.

We have data-processing agreements with IONOS, OpenAI, RevenueCat and Cloudflare for the services they provide on our instructions.

Some recipients and their subprocessors operate outside the EEA, including in the United States. Transfer protections depend on the recipient and service: an applicable adequacy decision under Article 45 GDPR, or safeguards such as the European Commission's standard contractual clauses under Article 46. Our providers' published processing terms describe these safeguards: OpenAI, RevenueCat, and Cloudflare. EU storage alone does not exclude access from another country. You can ask us for information and a copy of the safeguards applicable to your data.

4. How long data is kept and how deletion works

• Account data and active cloud coupons remain while your account exists. Removing a coupon hides it from normal use; the current service retains deleted records for import deduplication and usage checks until account deletion. Removed import-address records are also retained until account deletion. Contact us to request erasure without closing your account.
• Account deletion in Settings removes your account, coupons, linked identities, import-address records, and session records from our active database. Apple authorization is revoked where applicable. Local coupons and scheduled reminders are cleared. Delete cached extension data or remove the extension on other devices; offline copies cannot be remotely erased while those devices are disconnected.
• Encrypted database backups are configured for a 30-day retention period. Deleted data may remain in those backups until expiry. Backups are used for recovery, not routine access.
• Access/error logs are retained for up to 30 days after creation. Rejected or failed import emails and support correspondence are retained for up to 30 days after receipt. A specific legal obligation or a need to establish, exercise or defend a legal claim may require longer retention of the relevant records. Such records are not kept in routine use for unrelated purposes.
• Session data remains until revoked or expired and cleaned up. Local preferences and caches follow the app, browser and operating-system storage lifecycle; secure credential storage can survive reinstalling an app. Signing out or removing browser data is more reliable than uninstalling alone for clearing those credentials.
• Deleting an account does not cancel a store subscription or automatically erase records held by the store or RevenueCat. Contact us for help with provider erasure requests; legally required transaction records may remain.

Your choices and data-protection rights

Contact [email protected] to request access to your personal data, correction, erasure, restriction of processing, or a portable copy of data you provided where the GDPR conditions apply. We normally respond within one month. If a permitted extension is needed, we explain it within that month. Requests are normally free; we may ask for proportionate information to verify your identity.

You can withdraw consent at any time, as easily as you gave it. Withdrawal does not affect the lawfulness of processing before withdrawal. Where processing relies on legitimate interests, you can object for reasons relating to your particular situation. If data were used for direct marketing, you could object to that use at any time without giving a reason.

You can complain to a supervisory authority, particularly in the EU country where you live or work or where an alleged infringement occurred. For a private business based in Bavaria, the competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA). You do not have to contact us first.

Changes to this notice

We update this notice when processing changes and provide additional notice where required. A privacy notice is information about processing, not blanket consent to new purposes.