Privacy Policy

RewardSmart ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"), browser extension (the "Extension"), and related services.

Please read this Privacy Policy carefully. By using the App or Extension, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information You Provide

We may collect personal information that you voluntarily provide when using our App, including:

• Account Information: Email address, name, and password when you create an account
• Credit Card Information: Names of credit cards you own (we do NOT collect actual card numbers, CVV, or expiration dates)
• Financial Data via Plaid: If you choose to connect your accounts via Plaid, we receive transaction data to provide personalized recommendations (see Section 1.2)
• Communication Data: Information you provide when contacting our support team

1.2 Information Collected Through Plaid

If you choose to link your financial accounts through Plaid, Inc., we may receive:

• Account and routing numbers (tokenized for security)
• Transaction history and descriptions
• Account balances
• Institution names

We use this information solely to analyze your spending patterns and provide better card recommendations. We do not sell this data to third parties. Plaid's use of your data is governed by the Plaid End User Privacy Policy.

1.3 Information Collected Automatically

When you use the App, we may automatically collect:

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Features used, time spent in app, crash reports
• Analytics Data: Anonymous usage statistics to improve our services

1.4 Information Collected by the Browser Extension

When you install and use our browser extension, we may collect:

• Product URLs: When you use the "Track Price" feature, we collect the URL of the product page to monitor for price changes
• Bank Website Content: On supported bank websites (Chase, American Express), we extract credit card offer information displayed on those pages to sync with your account
• Merchant Detection: We detect the merchant name from websites you visit to show relevant card offers and deals (we do NOT store your browsing history)
• Email Content: If you enable Gmail integration, we scan for credit card offer emails to extract offer details (this data is processed locally and only offer information is stored)

Important: The browser extension only activates on specific websites where its features are relevant. We do not track your general browsing activity. All data collection is for the sole purpose of providing price tracking and offer extraction features.

2. How We Use Your Information

We use the information we collect to:

• Provide personalized credit card recommendations based on your spending habits
• Calculate estimated reward values for your cards
• Maintain and improve the App's functionality
• Send you important updates about the App or your account
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve our services
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with third-party vendors who help us operate our App (e.g., cloud hosting, analytics)
• Plaid: If you use Plaid integration, your financial data is shared with Plaid per their privacy policy
• Legal Requirements: We may disclose information if required by law or to protect our rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Regular security audits and updates
• Access controls and authentication requirements

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us at [email protected].

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Opt-Out: Unsubscribe from marketing communications
• Data Portability: Request your data in a portable format

To exercise these rights, contact us at [email protected].

7. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have it removed.

8. Third-Party Services

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Third-Party Services We Use:

• Plaid: Financial account linking and transaction data
• Supabase: Database and authentication services
• RevenueCat: Subscription management
• Google AdMob: Advertising (for free tier users)
• Google Gemini: AI-powered chat functionality

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the App, you consent to this transfer.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

• Email: [email protected]
• Website: rewardsmart.app