1. Who we are
“Coinlings”, “we” and “us” mean the operator of the Coinlings iPhone app, the website at coinlings.app and related services. We are the data controller for the personal data described here. Legal entity name and registered address: [to be completed before launch]. You can reach us at privacy@coinlings.app for anything privacy-related.
2. The short version
- We collect what you log (payments, budgets, goals), your account details, and, only if you allow it, location, analytics and marketing preferences.
- We use it to run the app: logging, categorizing, your safe-to-spend number, your Coinling, streaks, leagues and support.
- Our administrators can access all user data, including transactions, locations and profiles, to run the service, help you and prevent fraud.
- Your data is stored in the European Union (Frankfurt, Germany).
- We never sell your personal data or share your transactions with third parties for their own purposes.
- You can export your data (JSON and CSV) or delete your account from inside the app at any time.
3. What we collect
Information you give us
- Account: email address or the identifier from Sign in with Apple or Google, display name, handle, home currency and your consent choices (with the policy version and time you agreed). You can start anonymously and add an account later.
- Financial information you log: amount, currency, merchant name, category, date and time, notes, the nickname of the Wallet card used (for example “Visa” or “Daily card”), recurring bills, income entries, budgets and savings goals. We never receive your card number, bank login or account balance.
- Receipt photos (optional) that you attach to a transaction.
- Your Coinling and game progress: species, colours, name, outfits, XP, level, gems, badges, streaks, league results and friends.
- Support messages you send us.
Information collected when you use the app
- Apple Pay captures: when you set up the optional Shortcuts automation, each Wallet tap passes the merchant, amount, card nickname and (if your shortcut includes it) location to Coinlings. This is how Coinlings “works with Wallet via Shortcuts”; we do not connect to your bank.
- Precise location (optional): the place where a payment happened, so you can see it on a map. You can turn this off at any time.
- Device and usage data: device model, iOS version, app version, push notification token, crash reports, and, only if you opt in, product analytics events (for example “opened the shop”).
- Purchases: if you buy gems or Coinlings Plus, Apple processes the payment. We receive a purchase identifier and what you bought, never your payment card details.
- Advertising identifier: only if you allow tracking in the App Tracking Transparency prompt (see section 11).
- Referral and anti-fraud signals: your invite code, who invited you, and an Apple DeviceCheck token so a reward is given only once per device.
4. Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the service: logging and categorizing payments, budgets, safe-to-spend, goals, your Coinling, streaks, leagues, sync across devices | Performance of our contract with you |
| Support: answering your questions and fixing problems with your account | Contract; legitimate interest |
| Security and fraud prevention: protecting accounts, stopping referral and gem abuse | Legitimate interest |
| Product analytics: understanding which features help people | Consent (optional, off unless you opt in) |
| Aggregated insights: anonymized, aggregated statistics (for example “coffee is the most common category”) that cannot identify you | Legitimate interest |
| Marketing emails and notifications about news and offers | Consent (optional) |
| Showing ads to free users (personalized only if you allow tracking) | Consent for personalized ads; legitimate interest for non-personalized ads |
| Keeping records we are legally required to keep (for example purchase records) | Legal obligation |
Smart categorization and insights. When we cannot recognize a merchant ourselves, we send only the merchant name and country (never your name, email, amount or location) to our AI provider to suggest a category, and we cache the answer for everyone. Monthly insight texts are generated from summarized category totals. Insights are tips, not financial advice.
5. Who can access your data
We want to be completely clear about this: people on our team with an administrator role can see all user data, including profiles, transactions, notes, receipts, locations, game progress and support history. They use this access to provide the service, give support, investigate bugs, prevent fraud and produce aggregated insights.
- Admin access is protected with multi-factor authentication and role-based permissions.
- We keep the number of administrators as small as possible.
- The admin panel is private and not indexed by search engines; server keys never leave our servers.
Apart from administrators and the service providers below, nobody else can see your data. Other users only ever see your handle, your Coinling and your XP, never amounts or balances.
6. Service providers
We use carefully chosen providers who process data on our behalf under data processing agreements:
- Supabase: database, authentication, file storage and server functions, hosted in Frankfurt, Germany (EU).
- Vercel: hosting for this website and the admin panel.
- Apple: Sign in with Apple, push notifications, in-app purchases, DeviceCheck.
- Google: Sign in with Google (if you choose it) and AdMob ads for free users.
- RevenueCat: managing subscriptions and purchases.
- PostHog: product analytics, only if you opt in.
- Sentry: crash and error reports.
- Anthropic: AI categorization of unknown merchant names and wording of monthly insights, as described in section 4.
Some providers may process data outside the EU. When they do, we rely on the European Commission’s Standard Contractual Clauses or an adequacy decision. We may also disclose data if the law requires it, for example in response to a valid court order.
7. We never sell your data
We do not sell your personal data, and we do not share your transaction data with third parties for their own purposes. If we ever publish insights, they are aggregated and anonymized so no individual can be identified.
8. Where it is stored and how it is protected
- Your data is stored in the European Union, in Supabase’s Frankfurt (Germany) region.
- Data is encrypted in transit (TLS) and at rest.
- Every database table has row-level security, so each user can only reach their own data through the app.
- Receipt photos are kept in a private storage bucket and shown only through short-lived links.
- The app works offline: your data is also stored on your iPhone, protected by iOS. You can add a Face ID lock.
9. How long we keep it
- Account, transaction, budget and game data: for as long as your account exists.
- The raw data sent by each Apple Pay capture: purged after 90 days (the cleaned-up transaction stays in your account).
- When you delete your account, we delete your profile, transactions, locations, receipts and character data within 30 days, and immediately where possible. Copies in our provider’s encrypted backups expire on the provider’s backup schedule.
- Purchase records we must keep for tax and accounting reasons are kept in anonymized form for the period required by law.
- Support emails: up to 24 months after the conversation ends.
- Waitlist entries: until launch and for up to 12 months after, or until you ask us to remove them.
10. Your rights and choices
Wherever you live, you can:
- Export your data as JSON and CSV from Settings in the app.
- Delete your account and data from Settings in the app.
- Correct anything you have logged, at any time.
- Change your mind about location, analytics and marketing using the toggles in Settings.
- Ask us for a copy of your data, to restrict or object to processing, or for data portability, by emailing privacy@coinlings.app. We reply within 30 days.
- Complain to your local data protection authority if you think we got something wrong. We’d love the chance to fix it first.
11. Advertising and tracking
Free users may see a small banner ad in some lists and can choose to watch a rewarded video for gems. Ads never appear on the Home screen, while you add an expense, or on your Coinling’s screen, and Coinlings Plus removes them.
We only show personalized ads, and only access your device’s advertising identifier, if you allow it in Apple’s App Tracking Transparency prompt. If you decline, you get non-personalized ads and the app works exactly the same. You can change this at any time in iOS Settings.
12. Share cards and social features
Share cards and weekly stories hide amounts by default and show percentages instead. You decide whether to switch real numbers on before sharing. Leagues and friend challenges show your handle, your Coinling and your XP, never money. Referral landing pages show your display name and your Coinling, nothing else.
13. Children
Coinlings is for people aged 13 and over, or 16 and over in EU countries that require parental consent below that age. We ask for your age during onboarding and do not knowingly collect data from younger children. If you believe a child has given us data, contact us and we will delete it. Our marketing is aimed at young adults, not children.
14. This website and the waitlist
This website does not use advertising or analytics cookies. It stores your light/dark theme choice in your browser’s local storage. If you join the waitlist, we store your email, the handle you reserved, your species vote and, if you came from an invite, the invite code, and we use them only to contact you about the launch and to reserve your handle.
15. Changes to this policy
This is version 2026-10-01. When we make meaningful changes, we publish a new version here and ask for your agreement again in the app before the new version applies to you.
16. Contact us
Privacy questions and requests: privacy@coinlings.app. Everything else: support@coinlings.app or our support page.