Privacy Policy

Last updated: September 26, 2026 · This is a translation. In case of differences, the German version applies.

Dukat shows current prices for gold and silver coins, bars and jewellery and keeps track of what you own. We built the app to work with as little data as possible: no account, no ads, no tracking, no usage analytics.

1. Controller

Selcuk Tuncel
Podhagskygasse 20/39
1220 Wien, Austria

Email: sucandigital@gmail.com

2. In short

• Your holdings, your price alerts and your settings are stored on your device only. We cannot see them.
• The app needs no account and no sign-in.
• We use no ads, no analytics tools and no tracking.
• To load prices, the app fetches market data from the internet. What is transmitted is which countries you want prices for – not what you own (section 4).
• When it starts, the app asks our service provider RevenueCat whether Pro has been bought; for this and for the purchase itself, data is sent to RevenueCat (section 7).

3. Data on your device

The app stores on your device: your holdings (pieces, quantity and, if you enter it, your purchase price), your price alerts, your settings (countries, language, currency, appearance, pinned items) and the prices last loaded, so the app can show something without an internet connection.

This data does not leave your device. It is not sent to us, and we have no way of seeing it. You can delete it at any time: single entries inside the app, everything at once by uninstalling the app. If you use device backups (e.g. iCloud or Google), this data may be part of your backup; the terms of Apple or Google apply to that.

If you attach a receipt to a purchase, the app copies the selected file (photo or PDF) into its protected folder on your device. It opens your system picker for this and has no access to your other photos. These files never leave your device either, and they are deleted as soon as you delete the receipt or the last entry of that purchase date.

4. Prices from the internet

To keep prices current, the app regularly fetches data from the places below. For technical reasons the receiving side learns your IP address and general details about your device (operating system, app version). We transmit no account, no name and none of your holdings.

• Our own price service at dukat.expo.app: it supplies the dealer premiums. The request contains only the country codes of the markets you selected (e.g. “AT,TR”). The service is hosted by Expo (650 Industries, Inc., USA) on Cloudflare’s network.
• gold-api.com for the gold and silver price.
• api.frankfurter.dev for exchange rates, which are based on the reference rates of the European Central Bank.
• cdn.jsdelivr.net for the Serbian dinar rate.

The legal basis is performance of the contract of use (Art. 6(1)(b) GDPR) – without these requests the app cannot do its main job – and our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The US providers process the data on the basis of EU standard contractual clauses or an adequacy decision. Server logs of our price service are deleted automatically by the hosting provider after a short time; we do not evaluate them.

5. Price alerts

An alert you create is stored on your device. So that it can also reach you while the app is closed, the app registers two things with our own server: a randomly generated notification key for your device and the threshold at which you want to be notified – converted into a gold or silver price. The server compares that threshold with the world market price at regular intervals and sends the message through the notification service of Apple or Google.

The server does not learn what your holdings contain. A holdings alert is converted into a plain price threshold on your device; pieces and quantities stay on the phone. The legal basis is performance of the contract of use (Art. 6(1)(b) GDPR). If you delete an alert or withdraw notification permission, the registration is removed the next time you open the app.

If you switch on the daily update, the app registers the following with the same server: the notification key, the time you chose, your time zone, language and currency, and the lines of the message. For favourite pieces these are their name and a conversion value to the gold or silver price; for your holdings only how gold and silver are split within them — no quantities and no amounts. Also whether you have bought Pro and on which day the free trial week began — that tells the server how long it may send. If you switch the daily update off, the registration is deleted.

6. Where the prices come from

The price of a piece follows from the pure precious metal it contains, the current world market price and the premium that large dealers charge in the respective country. We measure those premiums against publicly displayed buying and selling prices. This is publicly available price information; no personal data is involved.

All values are guide prices. Dukat is not a dealer, does not broker any transaction and provides neither investment nor tax advice.

7. In-app purchases (Dukat Pro)

Payment is handled by Apple (App Store) or Google (Google Play). We receive no payment details such as card or account numbers.

To manage and verify purchases we use RevenueCat (RevenueCat, Inc., USA) as a processor. Processed are: a randomly generated, anonymous user ID, purchase information (product, time, transaction number, store, country), technical details (device type, operating system, app version) and the IP address. We do not link this data to your name or email address.

Purpose: unlocking the purchase, restoring it on further devices, preventing abuse and evaluating anonymous sales figures. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in working purchase handling (Art. 6(1)(f) GDPR). RevenueCat processes the data only on our instructions under a data processing agreement; EU standard contractual clauses are in place for the transfer to the USA. More: revenuecat.com/privacy

8. Our website

The website dukat.expo.app is hosted by Expo (650 Industries, Inc., USA). When you visit it, the hosting provider processes technically necessary data (IP address, date and time, page requested, browser type) in order to deliver the page and protect it from attacks (Art. 6(1)(f) GDPR). The website sets no cookies, uses no analytics or advertising services and loads no content from third-party servers.

9. Ratings

If the app asks you for a rating, this happens through the function provided by Apple or Google. We only see the rating you publish in the store.

10. No sharing

We do not sell data and do not pass it on to third parties – other than the service providers named here. They are contractually obliged to protect the data at least as well as this policy and the GDPR require.

11. Retention

• Data on your device: until you delete it or uninstall the app.
• Purchase data at RevenueCat: as long as it is needed for purchase management and statutory retention periods apply. On request we have it deleted.
• Server logs of the price service and the website: deleted automatically by the hosting provider after a short time.

12. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. Write to us at sucandigital@gmail.com. You may also complain to the data protection authority (Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at).

13. Children

Dukat is not specifically directed at children and does not knowingly collect data from children.

14. Changes

We adapt this policy when the app or the legal situation changes. The version published here applies.