PraiseBuddy Privacy Policy

1. Information We Collect

We collect different types of information depending on whether you are a Business Manager or a Customer.

1.1 Information from Business Managers

When you register as a Business Manager, we collect:

• Account Information: Business name, business address, contact person name, email address, phone number, and account credentials.
• Business Profile Data: Business type (restaurant, retail, service), operating hours, business description, and promotional content.
• Analytics Data: Information about your use of the Service, including number of active customers, check-in patterns, reward redemption rates, and campaign performance metrics.
• Communication Data: Records of your communications with us, including support requests and feedback.

1.2 Information from Customers

When you participate in a loyalty program as a Customer, we collect:

• Basic Profile Information: Name and either email address or phone number (depending on Business Manager requirements).
• Loyalty Activity Data: Check-in timestamps, business locations where you check in, loyalty card progress, rewards earned and redeemed.
• Device Information: Mobile device identifiers, device type, operating system, and app version.

1.3 Information We Do Not Collect

During the beta period, we do not collect:

• Payment or financial information
• Real-time GPS location data
• Social Security numbers or government identifiers
• Health or medical information

2. How We Use Your Information

2.1 Business Manager Information Uses

We use Business Manager information to:

• Create and maintain your business account
• Enable you to create and manage loyalty programs
• Provide analytics and insights about customer engagement
• Communicate with you about Service updates and features
• Provide customer support
• Improve and develop new features
• Comply with legal obligations

2.2 Customer Information Uses

We use Customer information to:

• Enable participation in loyalty programs
• Track check-ins and reward progress
• Facilitate reward redemptions
• Prevent fraud and abuse
• Provide customer support
• Send transactional communications about your loyalty activity
• Improve the Service experience

2.3 Fraud Prevention

We monitor check-in patterns and QR code usage to detect and prevent fraudulent activity. This includes analyzing check-in frequency, timing patterns, and device identifiers to identify potential abuse of the loyalty system.

3. How We Share Your Information

3.1 Sharing Between User Types

Customer data is shared with Business Managers whose loyalty programs you join. This includes your name, contact information, check-in history, and reward status at their establishment.

Business Manager data is never shared with Customers, except for publicly visible business information like name and address.

3.2 Service Providers

We share information with third-party service providers that help us operate the Service:

• Supabase: Provides database hosting and authentication services
• Expo/React Native: Provides mobile application framework services
• Stripe (post-beta): Will provide payment processing services

These providers are contractually required to protect your information and use it only for the services they provide to us.

3.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect rights, property, or safety.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

3.5 Aggregate Information

We may share aggregated, anonymized information that cannot identify you individually for research, marketing, or other business purposes.

4. Your Privacy Rights

4.1 Rights for All Users

Under applicable privacy laws, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request your information in a portable, machine-readable format.
• Opt-Out: Opt out of certain uses of your information, including marketing communications.

4.2 Connecticut Residents

Connecticut residents have additional rights under the Connecticut Data Privacy Act (CTDPA):

• Universal Opt-Out: We honor universal opt-out preference signals sent by your browser or device.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Appeals: You may appeal our decision regarding your privacy rights request by contacting us at support@praise-buddy.com.

4.3 Exercising Your Rights

To exercise any of these rights, please contact us at support@praise-buddy.com or through the settings in your account. We will respond to your request within 45 days, as required by law.

For your protection, we may need to verify your identity before processing your request.

5. Data Retention

We retain your information only as long as necessary for the purposes outlined in this Privacy Policy:

• Business Manager Data: Retained for the duration of your account plus 3 years after account closure for legal and analytical purposes.
• Customer Data: Retained for 2 years after your last loyalty program activity, unless you request earlier deletion.
• Analytics Data: Aggregated analytics data may be retained indefinitely in anonymized form.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

8. International Data Transfers

Currently, PraiseBuddy operates only in the United States and stores data within the United States. We do not transfer personal information internationally.

9. Marketing and Communications

9.1 Business Managers

Business Managers may receive:

• Service updates and feature announcements
• Best practices and tips for loyalty programs
• Beta testing updates and feedback requests
• Marketing communications (with opt-in consent)

9.2 Customers

Customers may receive:

• Transactional messages about check-ins and rewards
• Notifications from Business Managers whose programs you join
• Service-related announcements

You can manage your communication preferences in your account settings or by clicking unsubscribe links in emails.

10. Cookies and Tracking Technologies

Our mobile application does not use cookies. We may use mobile analytics tools to understand app usage patterns, but these tools collect only aggregated, non-identifying information.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Privacy Policy for Business Managers

If you are a Business Manager, this section provides additional information specific to your use of the Service.

12.1 Your Role as Data Controller

When you collect Customer information through your loyalty program, you act as the data controller for that information. You are responsible for:

• Obtaining appropriate consent from Customers
• Using Customer data only for loyalty program purposes
• Securing Customer data in your possession
• Responding to Customer privacy rights requests related to your program
• Complying with applicable privacy laws

12.2 Data Processing Agreement

By using the Service, you agree that PraiseBuddy acts as your data processor for Customer information. We will process Customer data only according to your instructions and this Privacy Policy.

13. Privacy Policy for Customers

If you are a Customer, this section provides additional information specific to your participation in loyalty programs.

13.1 Business Manager Access

When you join a Business Manager's loyalty program, that business can access:

• Your name and contact information
• Your check-in history at their location
• Your reward earnings and redemptions
• Communication preferences for their program

13.2 Multiple Programs

You may participate in multiple loyalty programs. Each Business Manager can only see your activity within their own program.

13.3 Leaving a Program

You may leave a loyalty program at any time by contacting the Business Manager or through the app settings. Upon leaving, the Business Manager will retain your historical data as required by law but will not receive updates about future activity.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending notice to your registered email address for material changes

Your continued use of the Service after changes indicates acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

For Connecticut residents: You may also contact the Connecticut Attorney General's Office at: