Privacy Policy

Last updated: September 3, 2026

This Privacy Policy explains how Koala Apps Ltd. ("Koala Apps", "we", "us" or "our") collects, uses and shares personal information when you use the Koala Inspector browser extension (the "Extension"), our website at koala-apps.io (the "Website") and our related services (together, the "Services"). Koala Apps is the controller of your personal information.

We have tried to write this policy in plain language. If anything is unclear, contact us at hello@koala-apps.io.

Where we get information

We collect information:

from you directly, for example when you create an account, contact us or enter information into the Services;
from your use of the Services;
from websites you visit with the Extension, as described in "How the Extension works with websites you visit";
from Paddle, our reseller and merchant of record, which tells us the status of your subscription and purchases;
from affiliate networks and retailers, which confirm when a referral from the Services led to a purchase;
from analytics and advertising partners on our Website; and
[if offered: from sign-in providers, such as Google, when you choose to sign in with them].

Information we collect, how we use it and why

Below we describe each type of information we collect, what we use it for and, for people in the European Economic Area, the United Kingdom and Switzerland, the legal basis for each use.

Account information. Your email address, name and preferences. We use it to create and manage your account, provide the Services and send service messages. Legal basis: performance of our contract with you.
Subscription and billing information. Your plan, subscription status, token balance and purchase history. Payments are processed by Paddle, and we do not receive your full payment card details. We use this information to provide paid features, manage billing and enforce usage limits, and to keep tax and accounting records. Legal basis: performance of our contract with you and compliance with legal obligations.
Messages to us. The content of your messages and the contact details you give us. We use them to answer your questions and provide support. Legal basis: performance of our contract with you or, if you are not a user, our legitimate interest in responding to you.
Information from websites you visit with the Extension. Page addresses, page content, screenshots and details of the online stores you view or manage. We use it to provide the Extension's features, as described in "How the Extension works with websites you visit". Legal basis: performance of our contract with you.
Information you enter into AI features. Your prompts and the page information needed to answer them. We use it to generate responses, as described in "AI features". Legal basis: performance of our contract with you.
Device and usage information. Your IP address and the approximate location derived from it, browser and device details, identifiers, how you use the Services and error reports. We use it to secure the Services, prevent fraud and abuse, enforce our terms, fix errors and improve the Services. Legal basis: our legitimate interests in operating, securing and improving the Services.
Session recordings [on the Website / in the Extension]. How you navigate and interact with pages of the Services. We use them to understand how people use the Services and improve usability. Legal basis: your consent, where the law requires it.
Marketing and referral information. The campaign or link that brought you to us, and advertising cookies and pixels on our Website. We use it to measure and improve our advertising. Legal basis: your consent, where the law requires it; otherwise our legitimate interest in promoting the Services.
Affiliate referral information. Whether a click on a supplier link in the Services led to a purchase, and the commission due. We use it to operate our partner and affiliate programs and calculate commissions. Legal basis: our legitimate interest in funding the Services.
Marketing emails. Your email address and whether you open our emails. We use them to send news and offers about the Services. Legal basis: your consent, where the law requires it; otherwise our legitimate interest in promoting the Services.
Information needed for legal purposes. Any of the information above, as needed. We use it to comply with the law and to establish, exercise or defend legal claims. Legal basis: compliance with legal obligations and our legitimate interest in protecting our rights.

You need to provide your email address to create an account. Without it, you cannot use the features that require an account. Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect processing that took place before.

How the Extension works with websites you visit

The Extension analyzes online stores to give you product, pricing and store insights. When you [open the Extension on a store / visit a supported store], it reads information from that page, such as the store's platform, theme, products and prices.

Processed only on your device: [for example, page structure analysis and theme detection].
Sent to our servers: [for example, the store's domain, the analysis results you save, and screenshots when you use the Screenshot feature].

The Extension does not collect information from pages unrelated to its features, such as email, banking or social media pages. [Confirm technically before publishing.]

Limited Use of Extension data

We use information collected through the Extension only to provide and improve the Extension's features. We do not sell this information, and we do not transfer it to advertising platforms, data brokers or other information resellers. We do not use it for advertising or to determine creditworthiness. Our use of this information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

The advertising and analytics partners described in "How we share information" receive information only from our Website, never from the Extension.

Configuration updates

The Extension periodically downloads configuration data from our servers, such as supported store platforms and feature settings. This data does not contain executable code and does not change how the Extension treats links or navigation on websites you visit.

Third-party components in the Extension

The Extension includes the following third-party components: [name: purpose, for example "Sentry: error reporting"]. Each provider is contractually bound to process information only on our behalf and in line with this policy. We do not include third-party components that monetize your browsing, such as by inserting advertising or affiliate links.

Supplier recommendations and affiliate links

The Extension may recommend suppliers or products, for example where a product is available at a lower price elsewhere. Some of these recommendations include affiliate links, which are marked as such in the Extension. A referral happens only when you click one of these links yourself.

If you click an affiliate link and make a purchase, we may earn a commission from the retailer or affiliate network. This does not change the price you pay.

[Choose one and make sure it is true:] Our recommendations are based on [price, ratings, shipping time] and are not affected by the commission we may earn. / Commission rates may affect which recommendations we show.

AI features

When you use AI-powered features, the content you submit and the page information needed to answer it are sent to our AI service providers, [names], to generate a response. [Verify before publishing:] Our agreements with these providers do not allow them to use your information to train their models.

We share personal information with:

Service providers that process it on our behalf, such as providers of hosting, authentication, payment processing (Paddle), analytics, error monitoring, customer support, communications and AI services. Service providers may use personal information only to provide services to us, for the purposes described in this policy, and not for their own independent purposes.
Advertising and analytics partners, to measure and improve our advertising and to understand how our Website is used. These partners receive information from our Website only, never from the Extension.
Affiliate networks and retailers, when you click an affiliate link in the Services, so that the referral and any commission can be recorded.
Authorities and other parties, when required by law or to protect rights, safety and property.
A successor, as part of a merger, acquisition or sale of assets.
Others, with your consent.

We do not sell personal information for money.

Links to other websites

When you follow a link from the Services to another website, such as a supplier we recommend, that website's own privacy policy applies to your activity there. We do not control those websites.

Cookies and similar technologies

We and our partners use cookies, pixels and similar technologies on our Website for essential functions, preferences, analytics and advertising. Where the law requires it, we use non-essential cookies, including analytics, session recording and advertising technologies, only after you consent through our cookie banner. You can change your choices at any time through the banner and your browser settings.

The Extension stores information in your browser's storage so that it can work, such as your settings and session.

We do not respond to "Do Not Track" signals. We do honor Global Privacy Control signals as described in "Additional information for U.S. residents".

International transfers

We and our service providers process personal information in [Israel,] the United States and other countries. Where the law requires it, we protect transfers of personal information from the European Economic Area, the United Kingdom and Switzerland with appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

Retention

We keep personal information only as long as we need it for the purposes in this policy:

Account information: while your account is active, and [30] days after you delete it.
Screenshots and saved analyses: [X] days, or until you delete them.
Session recordings and analytics data: [X] months.
Error reports and security logs: [X] months.
Billing and tax records: as long as tax and accounting law requires, typically [7] years.

We may keep information longer where the law requires it, or to resolve disputes, enforce our agreements or defend a legal claim.

Security

We use reasonable technical and organizational measures designed to protect personal information, including [encryption in transit, access limited to authorized personnel, and regular access reviews]. No method of transmission or storage is completely secure.

Your rights

Depending on where you live, you may have the right to:

access your personal information and get a copy of it;
correct inaccurate information;
delete your information;
restrict or object to our processing, including processing based on our legitimate interests;
receive your information in a portable format;
withdraw your consent at any time; and
complain to a data protection authority.

To exercise these rights, contact us at hello@koala-apps.io. We may need to verify your identity before we act on a request. Where the law allows, you can use an authorized agent. We do not charge a fee for reasonable requests, and we respond within the time the law requires, which for people in the European Economic Area and the United Kingdom is generally one month. If we decline your request, you can appeal by replying to our response. We will not discriminate against you for exercising your rights.

You can unsubscribe from marketing emails at any time using the link in those emails or in your account settings.

Automated decisions

We use automated tools to detect abuse and enforce usage limits. These tools look at signals such as [unusual request volumes or patterns that suggest automated scraping], and can restrict an account. If your account is restricted, you can contact us to ask for a review by a person.

Additional information for U.S. residents

This section applies to residents of U.S. states with comprehensive consumer privacy laws, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia ("State Privacy Laws"). The rights available to you depend on your state of residence.

No admission of applicability

We provide this information and honor the rights below voluntarily, for transparency and as good practice. Nothing in this section is an admission or representation that any State Privacy Law applies to Koala Apps, or that we meet any threshold under such a law, whether based on revenue, the volume of personal information we process, revenue from selling or sharing personal information, or anything else. We reserve all rights and defenses available to us. Where a State Privacy Law does apply, the rights below are provided only as that law requires, and subject to its exemptions and limitations.

Your rights

Depending on your state, you may have the right to:

Know and access: confirm whether we process your personal information and get a copy of it, in some states in a portable format.
Correct: ask us to correct inaccurate personal information.
Delete: ask us to delete personal information you provided to us or that we obtained about you.
Opt out of sale: some State Privacy Laws define "sale" broadly, to include exchanges of personal information for value other than money. To the extent our activities are a "sale" under such a law, you can opt out.
Opt out of targeted advertising: to the extent we use your personal information for targeted advertising, also called cross-context behavioral advertising, you can opt out.
Opt out of profiling: we do not profile people in ways that produce legal or similarly significant effects. If that changes, you may have the right to opt out.
Non-discrimination: we will not treat you differently for exercising your rights.

Global Privacy Control

Some State Privacy Laws require businesses to recognize browser or device signals, such as Global Privacy Control (GPC), as requests to opt out of the sale of personal information or of targeted advertising. We honor these signals to the extent applicable law requires. If you turn on such a signal, we will treat it as a valid opt-out request for that browser or device.

How to exercise your rights

Send your request to hello@koala-apps.io. Where available, you can also use the choices in our cookie banner. To verify your identity, we may ask for information that matches what we hold about you. An authorized agent may make a request on your behalf; we may ask for your written authorization and contact you directly to confirm your identity.

Appeals

If we decline your request, you may have the right to appeal, depending on your state. Email hello@koala-apps.io with "Privacy Rights Appeal" in the subject line, and include enough information for us to identify your original request and the reason for your appeal. We will respond within the time the law requires. If we deny your appeal, you may be able to contact your state attorney general or another regulator.

Children

The Services are intended only for people aged 18 and over. We do not knowingly collect personal information from children. If you are under 18, please do not use the Services or send us personal information.

If we learn that we have collected personal information from someone under 18, we will delete it as quickly as possible. If you are a parent or guardian and believe your child has given us personal information, contact us at hello@koala-apps.io and we will help you remove it.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date. Before any material change takes effect, we will notify you by email or in the Extension at least [14] days in advance. Previous versions of this policy are available [at this link].

Contact us

Koala Apps Ltd., hello@koala-apps.io