Privacy policy

What we collect

Only what the app needs to work. Every item below corresponds to something we actually store.

• Your mobile number. This is how you sign in, so it is required.
• Your first and last name, and your email address if you choose to add one. Email is optional.
• Your transaction PIN, stored only as a cryptographic hash. We cannot read it back.
• A token identifying this phone, stored only as a hash, so that you do not need an SMS code every time you sign in.
• The IP address a one-time password was requested from, kept briefly to detect abuse of the SMS system.
• The coupons you claim and redeem, and the cashback and referral rewards recorded against your balance.
• Your referral code, and the code of whoever referred you.
• If you send somebody a gift voucher or a gifted plan: their mobile number, your message to them if you write one, and what you paid. We store their number even if they have never used NexusCoupons, because that is how the gift waits for them - there is nowhere else to hold it. We use it for that gift and nothing else: we do not market to them, we do not add them to anything, and we do not tell them who else has their number. If the gift is never claimed we still hold that number as part of the record of a payment. Please only send a gift to somebody who would expect one from you.
• Your bank account details - the account holder name, account number, IFSC and bank name - but only if you choose to add an account in order to withdraw your earnings. The account number is stored encrypted, and only the last four digits are shown back to you.
• Anything you choose to tell us about yourself in your profile: your gender, date of birth, wedding anniversary, occupation, the area you live in (state, district, city and PIN code) and the kinds of offer that interest you. You can type the area, or tap "Use my current location" and let the app work it out - if you do, we read your approximate location ONCE, at that moment, turn it into the name of your area, and keep only those words. The coordinates themselves are never sent to us or stored, and nothing happens in the background. ALL OF THIS IS OPTIONAL. You can use every part of the app without giving any of it, you can change or clear it at any time from your profile, and we never ask for it again once you have said no.

What we do not collect

Stated plainly, because apps of this kind are often assumed to collect it.

• Your location in the background. The app never follows you, never reads where you are while you are not using it, and asks for approximate location only - never your precise position.
• Your contacts, your photos, your files, or anything about other apps on your phone.
• Anything from your camera. The camera reads a QR code on your device and nothing else. No image or video is recorded, stored or uploaded.
• Card or UPI details. You can pay us - for a plan, or for a gift voucher or gifted plan for somebody else - but you never do it here: the payment happens on our payment provider Cashfree page, and your card, UPI or bank credentials never reach the app or our servers. All we are told is that an order was paid.

Why we use it

To sign you in and keep your account secure, to show you offers - including matching you to offers meant for people like you, where you have chosen to tell us about yourself - and to let you claim and redeem them, to record cashback and referral rewards accurately, to answer you when you contact support, and to detect fraud and abuse. We do not sell your personal data, and we do not use it for advertising or profiling.

Who else sees it

We share the minimum necessary, and only with providers who process it on our behalf.

• Our SMS provider receives your mobile number in order to deliver your one-time password. It receives nothing else.
• Our payment provider, Cashfree, handles every payment made to us - merchant plans, your own plan, and gift vouchers or gifted plans you buy for somebody else. They receive your name, mobile number and e-mail address in order to process the payment. Card, UPI and bank credentials are entered on their systems and never reach ours.
• Our hosting provider stores the data on our behalf under contract.
• If the app crashes, a diagnostic report is sent to our crash-reporting provider so we can fix it. It contains the error, the screen it happened on and the phone model and operating system version. It is deliberately stripped of anything identifying you - not your name, number, PIN, balance or bank details - and it is not linked to your account.
• A merchant sees which of their offers you claimed and redeemed, your wallet id with the number hidden except its last three digits (something like ***440@yopsnexus), and the city you chose to share if you shared one. They never receive your full number, your name, your email, your balance, or anything you do with other merchants. We are being precise rather than reassuring here: three digits is not anonymity, and a shop you visit often could reasonably guess who you are. It is there so they can match your claim at the counter and recognise a returning customer.

How long we keep it

Your account details are kept while your account exists. One-time password records, including the IP address they were requested from, are short-lived and cleared automatically. Records of claims and rewards are kept while the account is open, so that your history stays accurate. Where the law requires us to keep a record, we keep it for as long as the law requires and no longer.

Keeping it safe

Traffic between the app and our servers is encrypted in transit. Your PIN and your device token are stored as hashes rather than as readable values, so they cannot be recovered from our database. Your session token is held in your phone secure storage rather than in ordinary app storage. Repeated wrong PIN entries lock the account temporarily. No system is perfectly secure, and we do not claim otherwise.

We do not track you

We do not follow you across other apps or websites, we do not build a picture of you from anywhere outside this app, and nothing here is sold or shared for advertising. Where you have chosen to tell us about yourself, we use it for one thing: deciding which offers to show you inside the app. A merchant running an offer sees only how many people it reached, never who you are. If you would rather not be matched that way, clear those fields in your profile and you will simply see every general offer instead. The only thing the app reports about itself is a crash, and that report carries no personal details and is not tied to you.

Deleting your account

You can close your account yourself, from inside the app: Profile, then Close account. It asks for your PIN, and it cannot be undone.

• Erased immediately: your name, e-mail, phone number, PIN, every device you have signed in on, and every bank account you saved, including the account numbers.
• Kept: the record of money that moved through your wallet, and the coupons you claimed. Financial records have to be retained, and they no longer carry anything identifying you.
• Withdraw any remaining balance first. We will not let you close an account that still holds money, or one with a withdrawal being reviewed, because neither can be recovered afterwards.
• If you cannot reach the app, request deletion at nexuscoupons.com/delete-account or write to privacy@nexuscoupons.com.

Your other choices

You can ask us for a copy of your data or ask us to correct it, by writing to privacy@nexuscoupons.com. You can sign out of a phone at any time from your profile, which stops that device being trusted.

Who this is for

NexusCoupons is intended for adults. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, write to privacy@nexuscoupons.com and we will delete it.

Changes and contact

If we change this policy we will update the date at the top and, where the change is significant, tell you in the app. For any question about your data, or to raise a complaint, write to privacy@nexuscoupons.com.