MiniVouchersPrivacy notice
Version of 15.10.2026
The short version
- We store what you give us — photos of your vouchers, what is printed on them, the codes you choose to keep — so that the app can show them and remind you of them. Nothing else about you, and no tracking cookies.
- A voucher's photo shows its code. The photo is stored in Switzerland and is sent to an AI service in the USA (Anthropic, in some cases Google) to be read. If you do not want that, cover the code before taking the photo.
- Codes you save are stored encrypted. They are shown only when you ask, and each time is recorded.
- We never sell your data and never use it for advertising.
- You can export everything and delete your account yourself, in the app.
1. Who is responsible
F. Tech. Int., Box, Stockholm, Sweden ("we") is responsible for the processing described here. Contact for everything about your data: info@minivouchers.ch.
2. What we process, and why
2.1 When you only visit
- Technical data of your visit (IP address, browser type, time, the page requested) is processed by our hosting provider to deliver the pages and protect them against attacks. It is kept in log files for a short time (see section 6).
- Bot check. Before a scan, Cloudflare Turnstile checks that a person, not an automated program, is using the page. It processes technical data of your browser for that purpose.
2.2 When you scan without an account (guest)
- Your scans: the photos, what was read from them and what you confirm.
- An anonymous session in your browser, so that your scans stay yours, and a one-way hash of your IP address, used only to limit how many scans can be read per day (to prevent abuse and cost).
- Guest scans are deleted 14 days after the first scan unless you create a wallet.
- A guest scan you correct may be looked at by us in the same way as an account's voucher (section 2.9), for as long as it exists — at most 14 days. The scan page says so.
2.3 When you have an account
- Your email address, or your Google account's email if you sign in with Google, to sign you in and to send the emails you asked for.
- Your vouchers: shop, value, currency, printed dates, balance history, notes, category, and the photos.
- Codes, PINs and barcode contents, if you keep them. They are stored encrypted. For codes of ten or more characters, the last four characters are also stored unencrypted, so that the app can show a masked hint (for example "•••• 4821") and find a voucher by it.
- A record each time a code is shown or exported, so that you can see when it was accessed.
- Reminder settings, the reminders scheduled for your vouchers, and the delivery status of the reminder emails (delivered, bounced, reported as spam).
- Language, time zone and appearance you chose.
2.4 Reading a voucher with AI
When you add a photo or PDF, the images of that one voucher (up to five sides) are sent to our AI service, which returns what it found (shop, value, dates and so on). No email address or other account details, and no photo of another voucher, are sent with them. If you have an account and corrected earlier readings, short notes on your own corrections go with them — for up to eight shops: the shop's name, the kind of value, and whether and how a validity was printed; never a code, an amount or a date — so that the reading knows what to look for. Nobody else's corrections are ever used. Nothing printed on the voucher is cut away: whatever is printed on it, including its code or barcode, is in the images. When you take the photo with the MiniVouchers camera, it is trimmed to the frame you placed the voucher in, or to the voucher's own edges where the camera outlines them (and then straightened). That removes the table around it, never the voucher, and you see the result before it is used — you can also move the corners or use the whole photo. Photos you choose and PDFs are sent as they are. Adding the back side sends a second photograph, and on many vouchers that is the side with the barcode.
What the AI reads is a suggestion: nothing is saved until you have checked and saved it. We do not use the AI to build any profile of you.
2.5 Error reports and usage statistics
- Error reports (Sentry): when something breaks, technical details of the error are sent to us. They pass through a filter that removes codes, email addresses and similar content first.
- Usage statistics (PostHog): we count a few actions — for example "a voucher was saved" — without cookies, without a lasting identifier and without any voucher content, to understand what works. You can switch this off under You → Usage statistics.
2.6 What we do not do
We do not sell or rent data, show advertising, send newsletters, or build profiles of your spending. We do not use your location. We do not share your vouchers with other users. We do not train any AI model with your vouchers.
2.7 Forwarding vouchers by email
If you use your private forwarding address (You → Forward by email):
- The email you forward is received by Resend, which keeps it for 30 days. We fetch it once and keep only its subject line (as the draft's working title) and page images made from it — the email's text, the text of an attached PDF, the fields of an Apple Wallet pass, and attached photos. From then on these pages are treated like the photos of a voucher (section 2.4): they are read by the AI service, and they can show the voucher's code.
- We accept an email only from your account's address or from an address you confirmed with a code, and only if the sender's email provider confirms that it really came from there. Links in the email are never opened, and pictures from the internet are never loaded.
- For each forward we keep, for 30 days, when it arrived and what happened to it — not its sender, subject or content.
- The addresses you add are kept until you remove them. To confirm one, we send it a code by email.
2.8 Calendar subscription
If you subscribe to your vouchers in your own calendar app (Calendar → Subscribe in your calendar app), or download a voucher's date as a calendar file:
- Your calendar app fetches a private link from us. It lists each voucher's merchant, value and printed date — never a code.
- Anyone who has the link can read that list, so do not pass it on. You can revoke it in the Calendar at any time.
- Your calendar provider (for example Google, Apple or Microsoft) keeps what it fetched under its own terms.
2.9 Improving readings from corrections
When you correct what the AI read (the shop, the value or the date), we — a person at MiniVouchers — may look at that voucher to find out why the reading was wrong and to improve future readings for everyone. We see the voucher's photos, which show whatever is printed on it, including its code or barcode, and what the AI read beside what you entered. Every time we open a photo, it is recorded on that voucher; with an account you can see it there. A voucher we have checked may be sent to the AI service again as a test (section 2.4) when we measure a change. You can say no at any time under You → Reading quality: your vouchers are then no longer used while the setting is off. A voucher also leaves our review when you delete it or your account. We never copy a code out of a photo, and nothing you entered reaches another person's reading — only short, general notes about a shop that we write and test ourselves (for example "this shop prints the date on the back").
3. Who receives data
We use the following service providers. They process data only on our behalf.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, photo storage | Switzerland (Zurich); Supabase Inc. is a US company |
| Vercel | Hosting of the website | Frankfurt (EU) and a global network; Vercel Inc., USA |
| Anthropic | Reading voucher photos (AI) | USA |
| Resend | Sending emails; receiving the emails you forward to your private address | Sending from Ireland (EU); delivery records in the USA; Resend, Inc., USA |
| Cloudflare | Bot check (Turnstile) | Global network; Cloudflare, Inc., USA |
| Sentry | Error reports | Frankfurt (EU); Functional Software, Inc., USA |
| PostHog | Usage statistics (without cookies) | Frankfurt (EU); PostHog Inc., USA |
| Sign-in, only if you choose "Continue with Google"; reading voucher photos (AI) as a second attempt when the first reading fails, and for accounts we set to be read by Google | USA and other countries where Google has facilities |
We may disclose data to authorities where we are legally obliged to.
4. Data sent abroad, especially to the USA
Some providers are in the USA or can access data from there.
- Vercel, Cloudflare, Sentry, PostHog and Google are certified under the Swiss-U.S. Data Privacy Framework (checked on 25.09.2026), which Switzerland recognises as ensuring adequate protection.
- Anthropic, Resend and Supabase are not certified under it. For them, transfers rely on the standard contractual clauses contained in their data processing terms.
Anthropic (the AI service) deletes the images it receives within 30 days, except where it keeps them longer to investigate misuse of its service (up to two years) or where the law requires it. Under its commercial terms, Anthropic does not use them to train its models.
Google (the second AI service, through its paid Gemini API) does not use the images it receives to improve its products. It keeps them for a limited period to detect misuse of its service, or where the law requires it. It may store them briefly in any country where it has facilities, and processes them on our behalf under its data processing terms for the paid service.
5. Cookies and storage on your device
We use no advertising or tracking cookies, and so there is no cookie banner. We use only what the service needs:
| Name | What it does | How long |
|---|---|---|
| sb-…-auth-token (Supabase) | Keeps you signed in, as a guest or with an account | Until you sign out |
| NEXT_LOCALE | Remembers the language you chose | Until you close the browser |
| mv_theme | Remembers the appearance you chose (only if you chose one) | 1 year |
| mv_guest_claim, mv_oauth_claim | Keep your guest scans when you create a wallet | Until the wallet is created |
In your browser's own storage the app also keeps: whether you switched off usage statistics, the places you dismissed in "Where vouchers hide", whether you said "Not now" to installing the app, files you share to the installed app until they are added (seconds), and short-lived notes between two screens (for example, which voucher was just saved). This stays on your device.
Cloudflare Turnstile may process technical browser data for the bot check. PostHog runs without cookies.
6. How long we keep data
| Data | Kept |
|---|---|
| Guest scans | 14 days after the first scan, unless you create a wallet |
| Your vouchers, photos and codes | Until you delete them |
| A voucher you deleted | 30 days, restorable in the app ("Recently deleted"), then deleted |
| Your account after you ask to delete it | 30 days (you can cancel by signing in), then everything is deleted |
| Proof that an account was deleted | A one-way code derived from the account's id, and two dates — no name, no email, no content |
| Error reports (Sentry) | 30 days |
| Usage statistics (PostHog) | 1 year (counts only, no identifier) |
| Email delivery records at Resend | 30 days |
| Emails you forward, at Resend | 30 days |
| Record of each forward (time and outcome only) | 30 days |
| Addresses you forward from | Until you remove them |
| Images at Anthropic | Up to 30 days (see section 4) |
| Images at Google | A limited period set by Google to detect misuse (see section 4) |
| Hosting and database logs | Up to 7 days |
| Database backups, where made | Up to 7 days; photos are not included |
7. Your rights
You can ask us what data we hold about you, have it corrected, deleted or handed over in a common format, and you can object to processing that is based on our legitimate interest.
Most of this you can do yourself in the app: edit any voucher, export everything as a ZIP file (You → Your data → Export my data — it contains your codes in readable form, so keep it safe), delete a voucher, and delete your account. For anything else, write to info@minivouchers.ch; we answer within 30 days.
Guest scans are not linked to a name or email address; they can only be viewed and deleted on the device where they were made.
If you think we are not handling your data correctly, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU or EEA, to the data protection authority where you live.
If you live in the EU or EEA
Where the EU General Data Protection Regulation applies, we process your data to provide the service you asked for (Art. 6(1)(b) GDPR) and, for security, abuse limits, error reports and usage statistics, on the basis of our legitimate interest in a safe and working service (Art. 6(1)(f) GDPR). You also have the right to restrict processing.
8. Security
Photos are stored in private storage that only your account can reach; codes are encrypted; the connection is always encrypted; codes do not appear in our logs, statistics, error reports or emails. No system is completely secure, however. Decide for yourself whether you want to store a code — you can cover it before taking the photo, or not type it in.
9. Emails we send
- A sign-in code when you ask for one.
- Reminders before a printed date, if you have an account and have not switched them off. Each reminder has a link to switch them off.
- A confirmation when you ask to delete your account.
- A code to confirm an address you want to forward vouchers from, when you add one.
We do not send advertising or newsletters.
10. Changes to this notice
We will update this notice when the service or the law changes, and tell you in the app or by email about important changes. The date above shows the current version.