Privacy policy
Last updated: 1 October 2026
Who we are
The Dupes app and this website are provided by Ultimate Apps. The data controller is Woodburn Grupo S.L. (CIF B26871616), C/ Martínez Aloy 3, bajo, 46007 Valencia, Spain. Contact: [email protected].
No account needed
Dupes works without an email, name or password. When you first open the app it creates an anonymous identifier so we can keep your saved items and subscription status. We do not ask for your name, contact details or location.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Anonymous user identifier, app language, account tier | To run the app and remember your settings | Contract |
| Products you look up, and whether you searched, scanned a barcode or used a photo | To show results, keep usage within plan limits and improve matching | Contract; legitimate interest |
| Items you save | To show your saved list | Contract |
| Taps on a retailer link | To open the retailer and to account for affiliate commission | Legitimate interest |
| Subscription status (via the App Store or Google Play and our subscription provider) | To unlock paid features | Contract |
| Barcodes we could not recognise (the number only) | To add missing products | Legitimate interest |
Photos
If you choose to identify a product from a photo, the image is sent securely to our server and to a third-party image-recognition service to read the product name. We keep only the result (the product identified), not the photo. Barcode scanning reads the code on your device.
Who we share data with
- Our hosting and database provider, which stores the data above on our behalf.
- An image-recognition service, only for photos you choose to submit.
- Apple, Google and our subscription provider, to process subscriptions.
- When you tap a retailer link, the retailer and the affiliate network that runs its programme receive the click as normal web traffic. Their own privacy policies apply on their sites.
We do not sell personal data and we do not use it for third-party advertising.
How long we keep it
We keep your data while you use the app. You can ask us to delete it at any time; deleting the app also ends the link between you and the anonymous identifier on your device.
Your rights
Under the GDPR you can ask to access, correct, delete, restrict or move your data, and object to processing based on legitimate interest. Email [email protected]. You can also complain to the Spanish data protection authority (Agencia Española de Protección de Datos, aepd.es).
This website
This website sets no cookies of its own and runs no advertising or tracking scripts.
Changes
If this policy changes we will update the date above and, where the change is significant, tell you in the app.