Your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use Voucher Valley: the app for iPhone and Android, the shared pool of Dunnes Stores vouchers behind it, and the WhatsApp service it grew out of. They share one account and follow the same rules. Where WhatsApp works differently from the app, we say so below.
Last updated: 20 October 2026
Information We Collect
1. Information you give us
- Phone number:
Scanning needs no account. The first time you take a voucher, upload one or open your coin balance, the app asks for your phone number and sends a six-digit code to it over WhatsApp. That is the whole sign-in: no password, no email. Your number is how we know which account is yours. If you used Voucher Valley on WhatsApp before the app, it is the same account, with the same coins, vouchers and plan. - Voucher images:
To upload a voucher you take a photo of the paper one or pick a screenshot from your photo library. The app shrinks the image on your phone and sends it to our server, where the voucher’s value, dates and barcode are read from it. The system photo picker shows us only the images you choose, never your whole library. - Items you type in yourself:
If a barcode isn’t in Dunnes’ online catalogue, you can type in the item’s name and price. That entry goes into a shared community database, is reviewed before other shoppers see it, and is stored without anything that identifies you. - Answers to notifications:
If a voucher you uploaded is reported as already redeemed, we may ask you about it in a notification. Your answer is recorded against that voucher. - Support emails:
Contact us in the app opens your own email app with a message that already says who is writing: your member ID and phone number if you are signed in, the first characters of your cart device token, the app version and your phone model and system version. You can delete any of it before sending. We receive whatever you choose to send us. - On WhatsApp:
If you message the bot, WhatsApp gives us your phone number, and any messages, images or voucher uploads you send are processed to provide the service.
2. Information we collect automatically
- Device token for the cart:
The scanner works without an account. The first time the app talks to our cart server, the server gives it a random ID, which the app keeps on your phone and sends with every scan. It is not your name, phone number, Apple Account, Google account or advertising ID, and it is not connected to your Voucher Valley account. Deleting the app removes it from your phone. - Your cart:
Each barcode you scan, each item you add, remove or change, and the time you did it is sent to our cart server so we can look up the price and work out your total. The items and prices from each shopping trip are kept against the device token. A copy of your cart is also saved on your phone so it survives closing the app. - Sign-in token:
Once you sign in, the app keeps a sign-in token in your phone’s secure keychain so you don’t need a new code every time. Signing out or deleting your account revokes it. - Account activity:
Vouchers you take and upload, replacements, coin movements, plan changes, the total value of vouchers you have taken (the savings figure the app shows you) and timestamps for each. Also logs about errors, performance or unusual activity, such as repeated invalid uploads, used to keep the service working and fair. - Push notification token:
If you turn notifications on, your phone gives the app a push token, which we store against your account so we can send you notifications. We only ask when you choose to turn them on, never at launch. - Purchases:
If you buy coins, a Day Pass or Pro in the app, Apple or Google tells us what you bought, when, and a transaction ID, so we can credit your account. We never see your card number or billing address. - Platform:
Whether the app is running on iOS or Android, so we can find platform-specific problems. - Camera:
The camera is used to read barcodes and to photograph paper vouchers you choose to upload. Barcode reading happens on your phone and no video is saved or sent anywhere. Only a voucher photo you take on purpose leaves the phone. You can turn camera access off in your phone’s settings, but the app can’t scan without it.
We don’t track your location, read your contacts, use advertising identifiers or include third-party analytics or advertising software, in the app or on WhatsApp.
Two Servers, Not Joined
The app runs on two separate servers. The cart server knows your device token and what you scanned. The Voucher Valley server knows your phone number, your coins and your vouchers. We don’t connect your shopping trips to your account.
WhatsApp and Notifications
When you sign in, we send the code through the WhatsApp Business API to the number you typed. That is the only thing the app sends you over WhatsApp. Everything else the app needs to tell you arrives as a push notification, if you have them on, and otherwise waits until you open the app.
Notifications are only about your account: a reminder to upload the voucher from your receipt, a penalty, a trial that is ending, a pause on your account, or a voucher you uploaded being reported at the till. We don’t send marketing notifications. You can turn them off at any time in your phone’s settings, and the app keeps working without them.
Members who still use the WhatsApp bot get the same service messages there instead, as they always did.
How We Use Your Information
We use your information strictly to operate and improve Voucher Valley:
- To provide the core service (uploading, taking and replacing vouchers).
- To look up prices and offers, work out your running total and tell you which vouchers you’ve unlocked.
- To read the value, dates and barcode from the voucher images you upload.
- To maintain fairness, detect abuse and keep the community trustworthy.
- To process coins, penalties, purchases, subscription status and trial eligibility.
- To improve accuracy, reliability and the shared item database.
- To send important updates or service messages.
- To comply with legal, tax or regulatory obligations.
On rare occasions, the developer may contact you directly by email or on WhatsApp if:
- Your account has an issue that blocks usage.
- You’re affected by a system bug.
- Clarification is needed to resolve an error, penalty or refund.
This is only for service-related matters and never for marketing.
Sharing of Your Information
We do not sell or rent your data.
We only share data when it’s needed to run the service:
- Hosting:
Our servers and database run on Heroku in the European Union. Voucher images are stored on Amazon Web Services (S3). - Reading voucher images:
Each uploaded voucher image is read by Amazon Textract (text recognition) and, when a field can’t be made out, by OpenAI’s image models. They receive the image and return the text. Under their API terms, neither uses what we send to train their models. - Dunnes Stores’ online catalogue:
When you scan a barcode, our server looks it up against Dunnes Stores’ public online catalogue to get the item’s name, price and offers. Only the barcode is sent, never your device token or anything else about you. Voucher Valley is not affiliated with Dunnes Stores. - Other shoppers:
Items you type in manually (name and price only) are shared with other app users once reviewed. Nothing about who added them is shared. The barcode of a voucher you upload is shown to the member who takes it, with nothing that identifies you. - WhatsApp (Meta):
Sign-in codes, and the WhatsApp bot itself, go through the WhatsApp Business API. WhatsApp’s own privacy policy applies to what happens inside WhatsApp. - Apple and Google:
The app is distributed through the App Store and Google Play, and in-app purchases are processed by Apple or Google under their own policies. They may collect install, crash and payment data. RevenueCat, a purchase-handling service, passes the purchase confirmation from the store to us using a random purchase ID, not your phone number. We don’t receive your card details from any of them. - Stripe:
Payments made on WhatsApp, including Pro subscriptions from before the app, are taken by card through Stripe, which handles your card details under its own privacy policy. We see that a payment was made, not your card number. - Expo:
Push notifications are delivered through Expo’s notification service, which receives your push token and the text of the notification. - Legal requirements:
If required by law, or to protect the rights, safety or integrity of Voucher Valley or its users. - Anti-fraud and trust:
Internally, your voucher usage patterns may be used to prevent abuse (for example detecting repeated invalid uploads). This data is never shared outside Voucher Valley.
Data Security
We use technical and organisational measures to protect your data. The app only talks to our servers over encrypted connections, and your sign-in token is kept in your phone’s secure keychain.
No system can guarantee 100% security, so we encourage you to keep your phone and your WhatsApp account secure and to avoid sharing vouchers that aren’t yours.
Your Rights
You may request at any time:
- Access: A copy of the personal data we hold about you.
- Correction: Fix incorrect or incomplete information.
- Deletion: Removal of your data, unless we must retain it for legal or operational reasons.
To exercise these rights, email [email protected], ideally from a device with the phone number you use with us.
Deleting your account from the app: open Account and tap Delete account. Your phone number is removed from our records, your sign-in and push tokens are revoked, and your coins and vouchers are no longer connected to you. Records of vouchers and coin movements stay in anonymised form so the pool’s history still adds up. A Pro subscription bought through the App Store or Google Play is not cancelled by this, because only Apple or Google can cancel it: do that in your store’s subscription settings.
The cart data on our cart server is held against your device token only, and we have no way of telling which device is yours, so we can’t single it out for a copy or deletion. Deleting the app removes the token that connects your phone to that data.
If you think we have handled your data wrongly, you can also complain to the Data Protection Commission in Ireland.
Retention of Data
We keep your data only as long as necessary:
- To provide the service,
- To maintain accurate coin history and prevent misuse,
- To keep prices and the shared item database accurate,
- To resolve disputes about a voucher, which is why voucher images are kept for a time after the voucher is used,
- To comply with tax or legal obligations.
Sign-in codes expire after ten minutes. When data is no longer required, it is deleted or anonymised.
Children
Voucher Valley is for adults doing their shopping. We don’t knowingly collect data from anyone under 16. If you believe a child has used the service, contact us and we’ll remove their data.
Changes to This Policy
We may update this Privacy Policy occasionally.
When we do, the updated version will be posted here, and we may notify you in the app or on WhatsApp if the changes are significant.
Contact Us
If you have any questions or concerns about privacy or data protection:
Email: [email protected]
Phone: +353 89 265 3675
Letters: Lock Gate 2, Apt 20, Charlemont Square, Dublin 2, D02 C8Y6