Privacy Policy

1. Information we collect

Information you give us:

• Account details: name, email address, password (stored only in encrypted, hashed form), and optionally phone number and birthday.
• Receipts you upload to earn points, including the store name, date, amount and items shown on them.
• Videos and testimonials you choose to submit, along with the permissions you select for how they may be used.
• Business information when a business applies or joins: business name, contact details, address, website, and staff names and emails.
• Messages you send us and your notification and marketing preferences.

Information created when you use the service: your points balances and complete points history, rewards redeemed, gifts sent and received, offers viewed, and basic technical information such as your IP address and browser type, used for security and to prevent abuse.

Information from Google: if you choose “Continue with Google,” Google shares your name, email address and profile picture with us. We do not receive your Google password and do not access your Gmail, contacts, calendar or files.

2. How we use your information

• To create and secure your account and let you sign in.
• To read your receipts and award points. Receipt images are processed by automated tools, including AI, to extract purchase details; points are then calculated by fixed program rules, and some receipts are reviewed by a person.
• To keep an accurate, permanent record of points earned, redeemed and gifted, and to detect duplicate receipts and fraud.
• To send you account messages such as points updates, gifts and reward codes, and, if you opt in, promotions from participating businesses.
• To help participating businesses run their rewards programs, offers and gift campaigns.
• To operate, maintain and improve the service and to comply with the law.

3. What participating businesses can see

When you earn or redeem points at a business, that business can see your name, your points activity and receipts at their business, and rewards you redeem with them. Businesses that run joint offers or gift campaigns see activity related to those programs. A business does not see your activity at other businesses.

Testimonial videos are shared with the business you made them for. They are used in advertising, including in-store or community TV screens, only if you gave that permission when you submitted them.

4. How we share information

We do not sell your personal information. We share it only:

• With participating businesses as described above.
• With service providers who run parts of the service for us, such as hosting and file storage, email delivery, AI receipt reading, payment processing for business memberships (Stripe), and our email marketing system, which receives your contact details only if you have agreed to promotional emails.
• When required by law, or to protect the rights, safety and property of our users, businesses or the public.
• As part of a merger, sale or transfer of our business, in which case this policy continues to apply to your information.

Businesses pay their membership through Stripe. We never see or store full card numbers.

5. Cookies

We use essential cookies to keep you signed in and to protect your account. We do not use advertising cookies or sell browsing data.

6. Your choices

• Update your name, phone and other details on your profile page.
• Turn email notifications and promotional emails on or off in your notification settings, or use the unsubscribe link in any marketing email.
• Ask us for a copy of your information, to correct it, or to close your account and delete your personal information by emailing [email protected].

When an account is closed, we remove or anonymize your personal details. We keep the underlying points and transaction records, without your identifying details where possible, because the points ledger must stay complete for accounting, fraud prevention and legal reasons.

7. How long we keep information

We keep your information while your account is open and for as long as needed to provide the service, resolve disputes, and meet legal and accounting requirements. Receipt images and videos are kept in private storage and are not publicly accessible.

8. Security

We protect your information with encrypted connections, hashed passwords, private file storage, access controls that keep each business’s data separate, and limits that block repeated sign-in attempts. No system is completely secure, so please use a strong, unique password.

9. Children

The service is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy. If we make important changes, we will notify you by email or in the app before they take effect. The effective date at the top shows when it was last updated.

11. Contact us

Questions or requests about your privacy: [email protected]. See also our Terms of Service.