Privacy policy

# Privacy policy _Version 2026-09-01. This policy is written in plain language. If anything is unclear, contact us and we will explain it._ ## 1. Who we are and what this app does This app rewards retail employees for verified sales of participating brands' products. To do that we need some personal information from you, and we need to look at the receipts you upload. This policy explains what we collect, why, who sees it, how long we keep it, and how to change your mind. We follow Canada's federal privacy law (PIPEDA) and Quebec's Law 25. Our servers and file storage are located in Canada, with one exception described in section 3. ## 2. What we collect - **Account details**: your name, email address, phone number (if you add one), language and time zone. - **Employment**: the store(s) you tell us you work at, when you started, and how that was verified. - **Receipts**: the photos or PDFs you upload, the text and line items we read from them, the date, time, store, receipt number and totals printed on them, and when and from which device address they were uploaded. - **Program activity**: which incentive programs you join, the sales we verify for you, your progress and your payouts. - **Your choices**: every consent you give or decline, with the date, and your notification preferences. - **Security records**: sign-in sessions and an audit trail of important actions on your account. We do not collect your government ID, banking details or payment card numbers. Card numbers printed on receipts are masked before the text is stored. ## 3. Automated receipt analysis by a third-party AI vendor **Your receipt images are analysed automatically.** To read the store, date, products and quantities on a receipt we send a working copy of the image to a third-party artificial-intelligence vendor, **Anthropic PBC (Claude models)**. The vendor's systems **may process the image outside Canada** (for example in the United States). We use the vendor's business API under terms that prohibit using your data to train its models and that do not retain your image after the analysis is returned. The image is sent without your name or contact details. Where the automated reading is uncertain, a person on our review team (or the brand's reviewers, if you have agreed to share data with that brand) looks at the receipt. Decisions about your rewards can be reviewed by a person: you can dispute any decision from the submission screen. If we change the vendor we will update this policy and ask you to accept the new version before you upload again. ## 4. Sharing with the brands that run programs When you join a program you decide whether to share your program data with the brand (the organization running it). If you agree, that brand can see your name, your store, the receipts and line items you submit to **its** programs, the decisions on them and your payouts for those programs. It never sees receipts you submit to other brands' programs, and it never receives your sign-in details, phone number or full audit history. If you decline or later withdraw, you cannot take part in that brand's programs, but rewards you already earned are still paid. We do not sell personal information and we do not share it with data brokers. ## 5. Notifications and marketing Important updates about your submissions, payouts and account (transactional notices) are always shown in the app; you choose whether they are also sent by email, text message or push. Marketing messages, "new program" announcements, email and text messaging each need your separate, optional consent, and you can withdraw each one at any time without affecting your account. Text-message consent applies only to the phone number you confirmed; reply STOP to any text to withdraw it. ## 6. How long we keep things - **Receipt images** are deleted after a retention period (by default 90 days after the program closes, or 30 days after upload if the receipt was never used for a program). Deletion is delayed while a receipt is under review, disputed, or subject to a legal hold. When the images are deleted we also delete the raw text read from them, the upload device address and the photo metadata. - **What we keep after the images are gone**: the structured data we read from the receipt (store, date, line items, totals), the decisions made on it, and **fingerprints (hashes) of the image and of the receipt**. The hashes cannot be turned back into the image; we keep them so the same receipt cannot be claimed twice. - **Verified sales, payouts and the audit trail** are kept for seven years because they are financial records. - **Notifications** are removed after one year; sign-in sessions when they expire. ## 7. Your rights and how to withdraw - **See your information**: request an export from _Profile → Privacy_. You receive a download link that works for seven days. We answer access requests within 30 days. - **Correct it**: your name, phone and store can be changed in your profile. - **Withdraw a consent**: _Profile → Privacy & communications_ lets you switch off marketing, new-program announcements, email and text messaging, and withdraw data sharing with a brand. Withdrawing is immediate and free. It does not close your account and does not take back rewards already earned. Transactional notices cannot be withdrawn while you have an account, because they are how we tell you about your money. - **Delete your account**: request deletion from _Profile → Privacy_. You will be asked to sign in again to confirm it is you. We then anonymise your account: your name, email, phone and photo are removed, your sign-ins are revoked and your receipt images are deleted. Financial records (verified sales, payouts) and the consent history are kept in anonymised form because the law requires it. Deletion is paused while a payout to you is being processed or while a legal hold applies; we will tell you why. - **Complain**: you may contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information. ## 8. Contact Write to the privacy contact shown in the app's _About_ screen. We answer within 30 days.