Privacy Policy

Section 01

Information We Collect

We collect the following categories of information:

Section 02

Camera Permission & Usage

The App requests access to your device camera for the following purpose only:

• Staff QR scanning: Staff members use the in-app camera to point at a customer's loyalty QR code. The camera reads the encoded value in real time and sends only that text token to our server to look up the customer's reward account. The camera feed itself is never recorded or stored.

Camera access is requested at runtime. You may deny or revoke camera permission at any time via your device settings. If camera permission is denied, the App offers an alternative method — uploading a QR code image from your photo gallery — which uses the same text-only processing with no image stored or transmitted.

We do not use the camera for facial recognition, augmented reality, advertising analytics, or any purpose other than QR code scanning.

Section 03

How We Use Your Information

We use the information we collect to:

• Authenticate you and maintain your loyalty account
• Process and record reward redemptions
• Display your points balance and transaction history
• Send push notifications about promotions, new rewards, and account activity
• Improve App performance, stability, and user experience
• Comply with applicable legal obligations

We do not use your information for automated profiling, sale to third parties, or targeted advertising by external networks.

Section 04

Data Sharing & Third Parties

We may share your information with the following categories of service providers solely to operate the App:

• Firebase (Google LLC) — push notification delivery via Firebase Cloud Messaging. Firebase's privacy practices are governed by Google's Privacy Policy.
• Expo / EAS (Expo, Inc.) — over-the-air app updates. No personal data is processed by Expo beyond technical device identifiers required for update delivery.
• Our backend server — hosted at deploytest.live, which stores account and transaction data.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

We may disclose information if required by law, court order, or to protect the rights, property, or safety of our users or the public.

Section 05

Data Retention

We retain account and transaction data for as long as your account remains active, or as required to fulfil the purposes described in this policy. If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required by law.

Camera feed data and gallery images processed for QR scanning are never retained — they are discarded immediately after the QR code value is extracted.

Section 06

Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• HTTPS encryption for all data transmitted between the App and our servers
• Hashed storage of passwords (never stored in plain text)
• Secure token-based authentication (stored in device Secure Storage)
• Access controls limiting server data access to authorized personnel only

While we strive to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your account.

Section 07

Your Rights & Choices

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate information
• Deletion — request deletion of your account and personal data
• Notification opt-out — disable push notifications via your device settings or the App's notification preferences at any time
• Camera permission — revoke camera access at any time through your device's app settings without affecting core loyalty features

To exercise any of these rights, please contact us using the details in Section 9 below.

Section 08

Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Section 09

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page and, where required, notify you via push notification or a prompt within the App. Continued use of the App after changes are posted constitutes acceptance of the updated policy.