Staging draft

Privacy Policy

This draft describes the data practices currently expected for Reward Wallet staging. It must be verified against production providers and reviewed before public launch.

Effective date: [EFFECTIVE DATE TBD]

Operator: [LEGAL ENTITY NAME], doing business as Reward Wallet.

After formation is confirmed, update this to IshTech Systems LLC, doing business as Reward Wallet. Business mailing address remains [BUSINESS MAILING ADDRESS TBD].

Information we collect

Reward Wallet may collect or process:

Email address, display name, Reward ID/account handle, and account role.
Authentication metadata, session data, and MFA factor metadata managed by Supabase.
Business/store membership, status, and owner/admin access information.
Reward card enrollments, stamp/reward transactions, QR enrollment and earning activity.
Audit/security events and app operation records.
Optional purchase or order reference if provided by a business.
App preferences and appearance settings.
Camera access when you scan QR codes in the app.
Bot/CAPTCHA signals processed through Cloudflare Turnstile.
Email delivery records through the email provider selected for production.

Reward Wallet does not currently collect payment-card information, bank account information, GPS/location tracking, contacts, microphone data, advertising tracking identifiers, or SMS authentication data.

How we use information

To create, secure, and manage customer, owner, and admin accounts.
To send email OTPs, invitations, and security-related messages.
To operate digital loyalty cards, stamps, QR flows, and reward redemption.
To help participating businesses manage their reward programs.
To prevent fraud, abuse, unauthorized access, and QR misuse.
To provide support, investigate disputes, and maintain audit integrity.
To comply with applicable legal, security, and operational obligations.

Service providers

Reward Wallet uses Supabase for backend, authentication, database, functions, and related processing. Reward Wallet uses Cloudflare Turnstile for bot/CAPTCHA protection and plans to use Cloudflare Pages to host public policy and support pages.

Email provider details are [EMAIL PROVIDER TBD] and must be verified before final publication.

Deletion and retention

Customers can request deletion in the app or contact privacy@rewardwalletapp.com. Deletion may delete, anonymize, or replace account information where reasonably possible.

Limited records may be retained where needed for security, fraud prevention, legal compliance, dispute resolution, audit integrity, or operation of loyalty transaction records. No method of transmission or storage is completely secure.

Contact

Privacy questions and deletion requests: privacy@rewardwalletapp.com