Privacy policy – KODMIL Cart Goals & Rewards

Last updated: 31 October 2026

This policy explains which data the KODMIL Cart Goals & Rewards Shopify app ("the app"), provided by KODMIL, processes when a merchant installs it, and why.

What the app does

The app shows a cart goals progress bar on your storefront (free shipping, free gift and discount goals) through a theme app extension and applies the rewards at checkout with a Shopify discount function.

Data we store about merchants

• Your shop domain and the Shopify access session needed to run the app.
• Your campaigns, goals, gift products, designs, translations and settings.
• An audit log of admin actions and the history of published configurations.
• Your plan name as reported by Shopify (Shopify handles all billing).

Data we store about your customers

None. The app does not store customer names, email addresses, phone numbers, addresses, IP addresses, user agents or orders.

• Storefront analytics contain a random per-session identifier, campaign and goal identifiers, the event type (for example "goal reached"), reward type, currency and cart amount. They are sent only when the visitor has allowed analytics through Shopify's Customer Privacy API, and they cannot be linked to a customer. You can turn analytics off in the app settings.
• Gift choices and dismissed gift offers are kept in the shopper's own browser (sessionStorage) and are never sent to us.
• Customer tags and order counts used for eligibility conditions are evaluated by Shopify on your storefront and in the discount function; the app does not receive or store them.

Shopify data access

The app requests write_discounts (to create its automatic discounts), read_products (product, collection and gift pickers, gift availability) and read_themes (to check whether the app embed is enabled). It does not read orders or customers through the Admin API and never edits theme files.

Sub-processors

• Render (Frankfurt, Germany, EU): application hosting and PostgreSQL database.
• Shopify: platform, app proxy, discount functions and billing.

All connections use HTTPS (TLS). Data is not sold, not used for advertising and not used to train AI models.

Retention and deletion

• Raw analytics events are deleted after the period you choose in the settings (7–365 days, default 90); the cleanup runs when the Analytics page is opened. Daily totals are kept until the shop data is deleted.
• When you uninstall the app, sessions are deleted immediately and Shopify removes the app's discounts, app embed and blocks. All remaining shop data is deleted when Shopify sends the shop/redact request (48 hours after uninstall).
• Shopify's customers/data_request and customers/redact requests are answered; no customer personal data is held.

Contact

KODMIL – https://kodmil.com – support@kodmil.com