Privacy Policy
Effective date: May 29, 2026
1. Information We Collect
1.1 Information you provide directly: email address (required to create account), display name (optional, shown to cashiers), business name/address/type (business owners only), Google Review link (optional, business owners only).
1.2 Collected automatically: visit timestamps, stamp and reward activity, device push notification tokens (if enabled), referral codes.
1.3 Payment information: we do not store card data — all payments processed by Stripe. See stripe.com/privacy.
2. How We Use Your Information
To operate the loyalty platform, send transactional emails, send push notifications (if enabled), provide business analytics, process payments, prevent fraud, improve the Service with anonymized data only.
3. How We Share Your Information
We do not sell your data. We share only with:
- the business you visit (your name and email)
- Stripe (payments)
- Resend (email delivery)
- Supabase (database/auth, SOC 2 certified)
- and as required by law
4. Data Retention
Customer accounts retained while active. Visit/stamp history retained 24 months then anonymized. Request deletion anytime at support@scanns.com.
5. Your Rights
Access, correction, deletion, portability, opt-out of emails (unsubscribe link in every email), disable push notifications (device settings). Contact support@scanns.com within 30 days.
6. Cookies
Essential cookies and localStorage only for login session and notification preferences. No advertising or cross-site tracking cookies.
7. Children's Privacy
Not directed to children under 13. Contact support@scanns.com to report and delete any such data.
8. Security
HTTPS encryption, row-level security, secure authentication via Supabase. No method is 100% secure — use a strong password.
9. International Data Transfers
Data stored in US (us-east-1). Users outside the US consent to this transfer by using the Service.
10. Changes
Material changes notified by email or in-app notice. Continued use = acceptance.