Legal

Privacy Policy

Effective date: November 4, 2026 · Version 2026-11-04

This document has not yet been reviewed by a lawyer.

This policy explains what Reward My Data ("Reward My Data", "we") collects through the Reward My Data app, website and shopping panel browser extension, how we use it, how long we keep it, and how you can use your rights.

The short version

You share receipts (and, if you choose, shopping activity from our extension). We reward you with DR.
We sell only de-identified, aggregated data: totals and trends across many members that cannot be traced back to you.
We do not sell or share personal information. Never your name, email, phone number, address, card digits, location or health purchases.
We delete receipt photos after 90 days and scan locations after 30 days, and we remove health and pharmacy items from every receipt.
You can see, export, correct and delete your data at any time, wherever you live.

What we collect

Account details you give us: email, first and last name, date of birth, street address, city, state, ZIP and phone.
Receipts: the photo, and what we read from it: store, date and time, items, prices, discounts, totals and payment type. Health and pharmacy lines are removed as the receipt is read (see below).
Fraud signals from each scan: your location at the moment you scan (only if you allow location on your phone), device details, and the name, card brand and digits, and transaction number printed on the receipt.
Activity: your DR history, redemptions, contributor pool weeks, referrals, weekly ads and coupons you add.
Shopping panel (only if you install the extension and turn on sharing): products you view, store searches, cart opens and completed orders on supported shopping sites, as described in our Terms section 7.
Messages you send us, and technical data such as IP address, browser and app version, and a push notification token.

We do not collect Social Security numbers or full card numbers, and we do not use third-party advertising trackers in the app or extension.

Why we ask for your address and date of birth

Privacy and consumer laws are different in every state. Your address tells us which state's rules apply to your account. Your date of birth confirms you are old enough to join (18, or 19 in Alabama and Nebraska and 21 in Mississippi). We also use them to verify your identity before a redemption.

How we use it

To run your account, read and verify receipts, credit DR and pay redemptions and the contributor pool.
To prevent fraud: duplicate or edited receipts, fake accounts, and receipts scanned far from the store.
To build de-identified, aggregated datasets and insights, and to sell or license them.
To show prices and coupons, improve our software and AI models, and keep the service secure.
To send account messages and, if you allow them, push notifications.
To follow the law and respond to lawful requests.

What we sell: de-identified, aggregated data

What buyers get from us are aggregates: for example, the average price of a product in an area in a given week, or how a brand's share of baskets changed. Before anything is shared:

names, contact details, addresses, card details, transaction numbers, exact locations, device details and member IDs are removed;
times are rounded, and areas are no smaller than a 3-digit ZIP code or a metro area;
results are reported only for groups large enough that no member can be singled out, and small groups are suppressed;
health and pharmacy items are never included.

We publicly commit to keep this data in de-identified form and not to try to re-identify it, and we require every buyer, by contract, to make the same commitment and not to pass it on without the same terms. Data in this form is not personal information under state privacy laws.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. If that ever changes, we will update this policy, ask for your consent where the law requires it, and honor opt-out requests and Global Privacy Control signals.

Health information

We do not want health information. Receipts can show pharmacy or health purchases, so as each receipt is read, we replace those lines with "Health item" and keep only the price. The extension does not work on pharmacy or health pages and skips health products. The original photo, which may still show those lines, is deleted after 90 days and is seen only by our receipt-reading system and, for flagged receipts, our reviewers.

Washington and Nevada residents: this paragraph is our consumer health data policy. We collect consumer health data only as incidental content of receipt photos, use it for nothing, never sell or share it, and delete it as described above. You can ask to see or delete it, or withdraw consent, by emailing hello@saverscommunity.com.

Location

If you allow it, the app records where you are at the moment you scan, to check that the receipt was scanned near the store. We use it only for that and for fraud checks, never sell or share it, and delete it 30 days after the receipt is reviewed. You can turn location off in your phone settings; the app still works.

Who we share personal information with

Service providers who work for us under contracts that limit their use of it: hosting and database (Supabase, Cloudflare), receipt reading (AI models run for us by Cloudflare), email (Resend), push notifications (Expo), gift card fulfillment, and identity verification.
Authorities and others when the law requires it, to protect members, or to prevent fraud.
A buyer or successor if we are involved in a merger, acquisition or sale of assets, under this policy.
Anyone you choose, for example when you export your data and send it elsewhere.

On request we will give you a list of the specific third parties we have disclosed personal information to (a right in Connecticut, Oregon, Minnesota and Maryland, offered to everyone).

How long we keep it

Scan location: 30 days after the receipt is reviewed.
Receipt photos: 90 days after the receipt is reviewed.
Name, card brand and digits, and transaction number printed on a receipt: 12 months.
Account details, receipt contents and DR history: while your account is open.
Extension activity: while your account is open, or until you delete it in the extension.
Records of privacy requests: 36 months, without details that identify you.
When you delete your account, everything that identifies you is erased. Receipt contents are kept only in de-identified form, with no link to you.

Your rights, in every state

Wherever you live, you can:

know and access what we hold about you, and export it: Me, then Export my data (JSON or CSV);
correct it: Me, then Edit profile, or email us;
delete it: Me, then Delete my account, or email us;
opt out of the sale or sharing of personal information and of targeted advertising and profiling (we do none of these; residents of states with this right also see a switch on the Me tab);
limit the use of sensitive information (we use it only to provide the service);
get the list of third parties described above;
be treated equally: using any of these rights never lowers your DR, prices or service.

How. Use the app or email hello@saverscommunity.com. To protect your account, we verify requests by confirming the email you sign in with, and may ask for more details. An authorized agent can act for you with your signed permission. We answer within 45 days, or tell you if we need 45 more. We honor Global Privacy Control signals as an opt-out where the law requires it.

Appeals. If we turn down your request, email hello@saverscommunity.com with "Appeal" in the subject within 60 days. We reply within 45 days (60 in Colorado). If you still disagree, you can contact your state attorney general.

California

In the past 12 months we collected these categories of personal information: identifiers (name, email, address, phone, IP address); customer records (date of birth); commercial information (purchases on receipts, DR history); internet activity (shopping panel activity, if you share it); geolocation (scan location); and sensitive personal information (precise geolocation and account sign-in). Sources: you, your device, and the receipts and pages you share. Purposes: the uses listed above. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you.

Our rewards are a financial incentive. The notice of financial incentive, with our good-faith estimate of the value of your data and how we calculate it, is at How we value your data. You opt in on the profile form and can leave at any time.

We do not disclose personal information to third parties for their own direct marketing (Shine the Light).

Colorado and other loyalty program disclosures

Program: the Reward My Data rewards program (DR, the contributor pool and the shopping panel).
Personal data collected: the categories listed in "What we collect".
Benefits that depend on selling personal data: none. We sell only de-identified, aggregated data, so no benefit is lost if you opt out of sale, targeted advertising or profiling.
Third parties that receive personal data: only the service providers listed above. No data broker or advertiser receives your personal data.
Ending benefits: if we end a benefit because you deleted data it depends on, we tell you at least 24 hours before.

Nevada

We do not sell covered information. You can still send a request not to sell to hello@saverscommunity.com.

Children

The service is only for adults (18 or older, 19 in Alabama and Nebraska, 21 in Mississippi). We do not knowingly collect information from anyone younger. If we learn that we have, we delete the account.

Security and where data is kept

Data is stored in the United States with encryption in transit and at rest. Access is limited to the people and systems that need it, and member data is protected by row-level security so members can see only their own records. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Changes to this policy

We will post changes here and update the effective date. For material changes we tell you in the app or by email at least 30 days ahead and ask you to agree again. We will not use data we already collected in a materially different way without your consent.

Contact

Reward My Data. Email: hello@saverscommunity.com.