Privacy notice
vink is an app for sharing a household shopping list and keeping loyalty cards in one place. This notice explains what is processed when you use it, why, and what you can ask us to do about it. We kept it short, because a notice nobody reads helps nobody.
Who is responsible
- Controller
- Blue Coral Labs B.V., the Netherlands
- Contact
- [email protected]
What is processed, and why
- Your account
- Your email address and a verification hash of your password. The password itself is never stored. Without these there is no account. Legal basis: performance of a contract, Article 6(1)(b) GDPR.
- Your lists
- The items you write, notes, shop labels, questions and answers, and a record of which member did what and when. Everyone you share the list with can see this. Basis: performance of a contract.
- Your wallet
- The name and number of your loyalty cards. A card belongs to you alone; nobody else on the list can see it. Basis: performance of a contract.
- Photos
- Photos you attach to an item, and your profile picture. Basis: performance of a contract.
- Location
- Only if you switch it on. When you open the app your location is read once, on the device, to see whether a relevant shop is nearby. It is not sent to us and not stored. When shops nearby are looked up, the area asked about is rounded to roughly one kilometre first. Basis: your consent, Article 6(1)(a). You can withdraw it at any time.
- Notifications
- Only if you switch them on: your device's notification token and your language. Basis: your consent.
What we do not do
- There are no analytics and no tracking cookies in the app, and no advertising or analytics SDK is built into it today. If that ever changes, this notice is updated first and, where the law requires it, you are asked before anything is switched on.
- We do not sell your data and we do not share it for anyone's marketing.
- No location history is kept and you are not tracked in the background. The app is not built to be able to.
Where your data is kept, and who touches it
Account and list data are hosted by Supabase in the European Union (Frankfurt). A handful of other companies process data on our behalf, each for one job only:
- Supabase
- Database, authentication and file storage. European Union.
- Cloudflare
- Serves this website and the app. European network.
- Resend
- Sends account emails such as a sign-in confirmation or an invitation.
- Apple and Google
- Carry push notifications to your phone (APNs and FCM). They see only what is needed to deliver the message.
- OpenStreetMap
- Answers the nearby shop query. It receives a rounded area, never your exact position.
Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's standard contractual clauses.
How long it is kept
- For as long as your account is open: your account, list and wallet data.
- When you delete your account: your account, your wallet, your profile and your notification records are deleted for good. What you wrote on a shared list stays on that list, but it is no longer connected to you.
- Backups roll over within 30 days.
Cookies and what is stored on your device
The app keeps your sign-in session and a copy of your lists in your browser's own storage, so it opens instantly and keeps working without signal. That is not tracking and it never leaves your device. This website sets no cookies at all; the only thing it remembers is which language you picked.
Your rights
Under the GDPR you can ask to see your data, correct it, delete it, restrict or object to processing, and take it elsewhere. Two of those are built into the app:
- Portability: Account tab, then Download my data. Everything comes down as a single JSON file.
- Erasure: Account tab, then Delete my account. You are asked to confirm, and then it really is deleted.
For anything else, write to [email protected]. You also have the right to complain to the Dutch data protection authority, Autoriteit Persoonsgegevens.
Children
vink is not aimed at children and does not knowingly collect data from anyone under 16.
Changes
If this notice changes, the date and version number at the top change with it, and anything material is announced inside the app.
Shop names and logos belong to the companies that own them. vink is not affiliated with, or endorsed by, any of them. The logos are used only to identify the shop.