Privacy Policy and Legal Statements
for mySHOPdash Browser Extension, Web App, and Mobile App

Version 2026.03 (Updated 05.03.2026)

IMPORTANT: By using the myShopDash website, browser extension, and/or mobile app, you confirm that you have read and agreed to the terms of this Privacy Policy.

This Privacy Policy outlines how we collect, use, and protect your data. We are committed to safeguarding your privacy and ensuring that your personal information is handled responsibly.

Disclaimer: We are not affiliated with Woolworths, the Everyday Rewards program, Coles, or any other retailer covered by this app/extension. This is an independent project designed to help you manage your data the retailers collect on your behalf.
Latest Updates

The latest edition (Version 2026.03) introduces the following changes:

Added Sentry as a third-party processor for real-time error monitoring in the browser extension and mobile app.
Specified that diagnostic data is retained for 90 days.
Clarified that no personal identifiers or payment data are transmitted during error reporting.


Our overall approach remains the same:

The service is designed with data security and privacy in mind.
We do not collect personal data unless you explicitly provide it.
We do not share your data with third parties. We do not use it for commercial/advertising/marketing purposes.
You are in control of your data and can delete it at any time.


1. What This Policy Covers

This Privacy Policy applies to:

The myShopDash browser extension
The myShopDash web app at myShopDash.app
The myShopDash mobile app


All the three tools help you download, process, and explore your shopping data from the Everyday Rewards program (Woolworths, BigW, BWS) and Coles Supermarkets (more retailers are coming and, if available, are covered the same way).
2. Data Collection Rules
a. What We DO NOT Collect and Store:

Sensitive personal data (e.g., address, location, ID, date of birth, payment cards, bank details).
Your email and full name (for the basic use case without an online account).
Third-party credentials, such as Woolworths or Coles login and password (you enter them directly on the retailers' websites).
Payment details. Note: The last four digits of your bank card number, as shown on shopping receipts, may be processed.


We do not access your shopping accounts except at the moment and immediately after you provide your consent by interacting with the app/extension. You must manually activate the extension or app each time and choose to upload your receipts if you want to store them in your account.
b. What We DO Collect

We collect the following types of information:

Shopping receipts – To display your digital receipts when using the extension, mobile app, or web app.
Name and email – To allow login and session recovery when registering an account.
Anonymized usage data – To improve user experience and features.
Device metadata – (e.g., IP address, browser/app version) for diagnostics and security.
Anonymized Error Diagnostics – (Browser Extension and Mobile App) To identify and fix technical issues.
Session tokens/cookies – To manage and secure your session.
Last four digits of payment card – If included in receipts, displayed for your reference only.


1. How Your Data Is Handled
   a. In Browser Extension
   
   Your data is accessed only when you activate the app/extension and log into your retailer account.
   Receipt data is retrieved from your official Everyday Rewards or Coles website accounts.
   It is stored locally on your device (browser or mobile storage).
   You may choose to download it or upload it to the web/mobile app cloud account for further use.

Nothing is transmitted over the internet unless you explicitly choose the 'upload' action.
b. Web App (myshopdash.app) or Mobile App

Your uploaded data is stored temporarily in a secure cloud.
Only you can access your uploaded data from your browser session.
You can delete your data anytime using the Delete button.
Otherwise, your data is removed 30 days after your last interaction.


c. Registered Accounts (Optional)

If you choose to create an account, we store your name and email.
This allows cross-device login and session recovery.
Your personal details are never shared or used for marketing.
Accounts are managed securely via Firebase Authentication.


d. Anonymized Usage and Error Statistics

We may collect anonymised data across devices to:

Understand which features are used most.
Improve performance, navigation, and design.
Monitor app health across platforms.
Identify and debug technical errors in the browser extension and mobile app.


This data is never linked to personal identities. Error reports do not contain personal identifiers or payment information.
e. AI-Powered Processing

We may use online AI models to:

Categorise, decode, and enrich your shopping data.
Offer insights or automation features.


No personal or identifying data is included in AI model inputs. All processing is secure and privacy-first. The AI models are provided by third-party processors mentioned below.
4. Data Security

Your data is protected using industry-standard security measures, including:

End-to-end encryption (HTTPS) during uploads and access.
Secure cloud storage via Google Cloud Platform.
Access controls to ensure only you can access your data.
Local storage isolation to prevent cross-app data leakage.


We routinely update our infrastructure and follow best practices to keep your data safe.
5. Third-Party Services

We rely on the following third-party processors to provide our services:

Google Firebase and Google Cloud Platform: For secure data storage, session management, cloud-based data processing, authentication, and AI processing.
Sentry (Functional Software, Inc.): For real-time error monitoring and diagnostics in the browser extension and mobile app.


Data Processing Details:

Diagnostics Retention: Error reports and diagnostic data sent to Sentry are retained for 90 days.
Data Minimization: No personal identifiers, email addresses, or payment card data are transmitted to Sentry. Reports are limited to technical metadata and anonymized stack traces.


All services comply with strict privacy and data protection standards:

Firebase Data Processing Terms
Google Cloud Terms
Sentry Privacy Policy


1. Cookies & Local Storage

Depending on your platform (browser or mobile app), we use:

Cookies or secure local storage to maintain your session.
Session IDs/tokens to manage login state and data access.


We do not use advertising or cross-site tracking cookies.
7. Limited Liability

We work hard to provide reliable and trustworthy data, protect your data and ensure service stability. However:

The service is provided “as is”.
We cannot guarantee data completeness or precision (e.g., it cannot be used for statutory purposes, including tax purposes).
We are not responsible for decisions based on app insights.


Your shopping data is for informational purposes. Use it at your own discretion.
8. Transparency

We believe in openness. Your shopping data is yours to use (not just for the retail's), and this service is here to help you with that. In the spirit of openness, the service's source code is available here (stable version):

🔗 GitHub – myshopdashapp https://github.com/ekutilov/myshopdashapp
9. Contacts

For any questions or concerns, contact us at:

📧 eugene@myshopdash.app