Privacy Policy

1.Information You Provide

When you create an account or use the Service, we collect information you provide directly:

• Account: full name, email address, hashed password (we never store passwords in plain text).
• Loyalty program data you add: brand, points, membership numbers, barcodes, notes.
• Expenses & receipts: merchant, amount, tax, tip, date, category, and optional receipt images.
• Trips: destination, dates, client name, notes.
• Reminders: meal-time preferences you set.
• Referral code you apply, if any.

2.Information Collected Automatically

When you use the Service we automatically collect:

• Device information (OS, model, app version, language).
• Usage data (screens viewed, features used, session length, errors).
• IP address and coarse geolocation derived from IP.
• Precise location — only when you grant permission and open a location-aware screen (fuel prices, nearby places).

3.How We Use Your Information

We use your information to:

• Operate the Service (sync your loyalty cards, expenses, reminders across devices).
• Provide AI-powered reward tips, receipt OCR, and personalized recommendations.
• Process subscription payments and manage your tier.
• Send transactional notifications (trial ending, receipt of payment, reminders you scheduled).
• Detect fraud, abuse, and enforce our Terms of Service.
• Improve the Service through aggregated analytics.

4.AI Processing

When you use AI features (reward tips, receipt OCR, explore recommendations, meal-time picks) your relevant data is sent to Anthropic Claude (via the Emergent Universal Key gateway) for processing. Requests do not include your email, hashed password, or payment details.

Third-party AI providers are contractually required NOT to use your data to train their models.

AI outputs are provided as informational suggestions only and are not tax, legal, or financial advice.

5.How We Share Information

We do not sell your personal information. We share only with:

• Stripe — for payment processing. Your card details go directly to Stripe (we never see them).
• Anthropic (via Emergent gateway) — for AI features, as described above.
• Foursquare Labs — when you use nearby-places features, coordinates (lat/lng) and search terms are sent.
• Sentry — crash and error reports (may include device / user ID).
• PostHog — aggregated product analytics (event names, tier, timestamps).
• Cloud infrastructure providers (MongoDB Atlas or equivalent) where your data is stored.
• Government authorities if compelled by valid legal process.
• A successor entity in the event of a merger, acquisition, or sale of assets.

6.Data Retention

We keep your account data as long as your account is active. If you delete your account, we permanently delete your data within 30 days, except:

• Payment and tax records: retained for at least 7 years to comply with financial regulations.
• Anonymized analytics that cannot be re-linked to you.
• Backups: purged from routine rotation within 90 days.

7.Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, download, or delete your personal information.
• Object to or restrict certain processing.
• Withdraw consent (e.g., revoke location or camera access in device Settings).
• Opt out of marketing communications (transactional emails will continue).
• Lodge a complaint with your local data-protection authority.
• For US residents (California, Virginia, Colorado, Utah, Connecticut): the specific rights granted under the CCPA/CPRA, VCDPA, CPA, UCPA, and CTDPA respectively.
• For EU/EEA residents: the rights granted under the GDPR.

To exercise any of these rights, email admin@perkstackerapp.app. We respond within 30 days.

8.Cookies & Tracking

Our mobile app does not use browser cookies. Our website (perkstackerapp.app) uses only essential cookies to keep you logged in and process payments.

See our full Cookie Disclosure at perkstackerapp.app/cookies.

9.Children Under 13

Perkstacker is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact admin@perkstackerapp.app and we will delete it.

10.Security

We use industry-standard security measures: TLS in transit, encryption at rest via MongoDB, bcrypt-hashed passwords, JWT-based auth, PCI-compliant payments via Stripe, and least-privilege access controls. No system is 100% secure — please notify us immediately at admin@perkstackerapp.app if you suspect unauthorized access to your account.

11.International Data Transfers

Our infrastructure may be located in the United States. If you access the Service from outside the US, you consent to the transfer and processing of your data in the US, subject to appropriate safeguards where required by law.

12.Changes to This Policy

We may update this Policy from time to time. Material changes will be announced in-app or by email at least 14 days before they take effect. The Effective date at the top of this page reflects the most recent revision.

13.Contact

Questions about this Policy? Contact us at:

Perkstacker LLC · admin@perkstackerapp.app · perkstackerapp.app