Privacy Policy

1. About this policy

Dope Products (ABN 64 171 352 626), trading as Discount Trolley ("we", "us", "our"), operates the Discount Trolley mobile application and the website at discounttrolley.app (together, the "Services").

We are bound by the Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). This policy describes how we collect, hold, use and disclose personal information in accordance with those obligations.

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use our Services.

2. Information we collect

We may collect and hold the following kinds of personal information:

2.1 Information you provide directly

• Account information — email address, display name and profile preferences when you create an account
• Shopping lists — products you add to your shopping lists, including shared lists
• Community contributions — deals, votes, comments or reports you submit to the community
• Support enquiries — any information you provide when you contact us

2.2 Information collected automatically

• Device information — device model, operating system version, unique device identifiers, and app version
• Usage data — pages and features accessed, search queries within the app, products viewed, barcode scans, and interaction patterns
• Location data — approximate location (city/region level) derived from IP address, used to show relevant store availability and nearby deals. We do not collect precise GPS location without your explicit consent
• Performance data — crash reports, error logs and performance metrics to improve app stability

2.3 Information from third parties

• Authentication providers — if you sign in via Apple Sign In or Google Sign In, we receive your name and email address (or a relay email in Apple's case) as permitted by your account settings
• Payment processors — if you subscribe to premium features, Apple or Google processes the transaction. We receive a confirmation of your subscription status but not your payment card details

2.4 Sensitive information

We do not intentionally collect sensitive information (as defined in the Privacy Act 1988) such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data. If we inadvertently receive sensitive information, we will delete it promptly unless you consent to its retention or we are required by law to keep it.

3. How we collect your information

We collect personal information:

• Directly from you — when you create an account, use features, submit content, or contact us
• Automatically — through the app and website using analytics SDKs and server logs
• From third parties — authentication providers (Apple, Google) and app store platforms (Apple App Store, Google Play) for subscription management

Where reasonable and practicable, we collect personal information directly from you. We will not collect personal information by unlawful or unfair means.

4. Why we collect, use and disclose your information

We collect, hold, use and disclose your personal information for the following purposes:

• To provide, operate and improve the Discount Trolley app and website
• To personalise your experience — including relevant deals, price alerts and product recommendations based on your shopping activity
• To manage your account and authenticate your identity
• To facilitate shared shopping lists and community features
• To process premium subscriptions via Apple/Google
• To send you service-related communications (e.g. price alerts you've set, list updates)
• To send you marketing communications where you have opted in — you may unsubscribe at any time
• To analyse usage trends, diagnose technical issues, and improve app performance
• To detect, prevent and respond to fraud, abuse, security incidents and technical issues
• To comply with our legal obligations under Australian law

We will not use or disclose your personal information for a purpose other than the purpose for which it was collected (the "primary purpose"), a related secondary purpose that you would reasonably expect, or as otherwise permitted by the APPs.

5. Who we disclose your information to

We may disclose your personal information to:

• Cloud hosting providers — our servers and databases are hosted on Fly.io and Supabase, which store data to provide the Services
• Analytics services — to understand how the app is used and improve performance
• Authentication providers — Apple and Google for sign-in services
• Payment platforms — Apple App Store and Google Play for subscription processing (they act as independent data controllers for payment data)
• Content delivery networks — Cloudflare, for website hosting and performance
• Law enforcement or regulators — where required by law, court order, or to protect the rights, property or safety of our users or the public

We do not sell, rent or trade your personal information to third parties for their marketing purposes.

6. Overseas disclosure

Some of our service providers may store or process data outside Australia. As at the date of this policy, your information may be processed in:

• United States — Fly.io (hosting), Supabase (database), Cloudflare (CDN), Apple Inc., Google LLC

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient complies with the APPs or is subject to a law or binding scheme substantially similar to the APPs (APP 8). Where this is not possible, we will seek your consent or ensure contractual protections are in place.

7. Cookies and tracking technologies

Our website (discounttrolley.app) may use:

• Essential cookies — required for the website to function (e.g. Cloudflare security cookies)
• Analytics — to understand page views and site performance

The Discount Trolley mobile app does not use browser cookies. The app may use local device storage (AsyncStorage, SecureStore) to save your preferences, authentication tokens and cached data. This data remains on your device unless you choose to sync it via your account.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

8. How we store and protect your information

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification and disclosure (APP 11). Our security measures include:

• Encryption of data in transit using TLS/HTTPS
• Encryption of sensitive data at rest
• Secure authentication with token-based sessions
• Database access restricted by role-based permissions
• Regular security reviews and dependency updates
• Passwords (where applicable) hashed using industry-standard algorithms

No method of electronic storage or transmission is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If we become aware of a data breach likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988.

9. Data retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specifically:

• Account data — retained while your account is active, and for up to 30 days after deletion to allow recovery
• Shopping lists — retained while your account is active; deleted when your account is deleted
• Usage and analytics data — retained in anonymised or aggregated form; identifiable data is deleted or anonymised within 12 months
• Community contributions — may be retained in de-identified form after account deletion to maintain community integrity
• Support correspondence — retained for up to 2 years for quality and legal purposes

When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it (APP 11.2).

10. Accessing and correcting your information

Under APP 12, you have the right to request access to the personal information we hold about you. Under APP 13, you have the right to request correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading.

To exercise these rights:

• For most information, you can access and update it directly in the app under your profile settings
• For a formal access or correction request, email us at the address below — we will respond within 30 days

We will not charge you for making an access request or for correcting your information. In rare cases, we may refuse access where permitted by the APPs (e.g. where it would unreasonably impact the privacy of others). If we refuse, we will provide you with written reasons and inform you of your right to complain to the OAIC.

11. Account deletion

You may delete your account at any time through the app (Profile → Settings → Delete Account) or by contacting us. When you delete your account:

• Your personal information, shopping lists and preferences are permanently deleted within 30 days
• Community contributions you made may be retained in anonymised form
• Backup copies may persist in our systems for up to 90 days before being overwritten

This is consistent with Apple's App Store Review Guideline 5.1.1(v) requiring apps that support account creation to also support account deletion.

12. Children's privacy

Our Services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information as soon as practicable.

If you believe we have inadvertently collected information from a child, please contact us immediately.

13. Automated decision-making

Discount Trolley uses automated processes to:

• Personalise deal recommendations — based on your search history, viewed products and shopping list contents
• Identify genuine deals — by analysing price history data algorithmically to help you spot the best time to buy
• Calculate Smart Split recommendations — to suggest optimal store assignments for your shopping list

These automated processes assist with product recommendations and price analysis only. They do not make decisions that have a legal or similarly significant effect on you. No automated process controls your access to the Services, restricts your rights, or makes decisions about benefits or contractual terms.

This disclosure is provided in anticipation of amendments to the Privacy Act effective 10 December 2026 requiring transparency about automated decision-making.

14. Third-party links and services

Our Services may contain links to external websites (e.g. supermarket websites, app store listings). We are not responsible for the privacy practices of these third-party sites. We encourage you to read their privacy policies before providing any personal information.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via the app (in-app notification or push notification) for significant changes
• Where required by law, seek your consent before applying changes that affect how your information is used

We encourage you to review this policy periodically.

16. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with us using the contact details below. We will:

1. Acknowledge your complaint within 7 business days
2. Investigate and respond with a written outcome within 30 days
3. Take reasonable steps to resolve your complaint

17. Contact us

For any privacy-related questions, access requests, corrections, or complaints: