The short version: We collect only what we need to run a rewards app — your email, a username, your city, and your in-app activity (Diamonds, drawings, badges, perks). We do not sell your data, scan your receipts or email, or track your precise location. You can delete your account and data any time.
1. Who this applies to
This policy explains how Perk Rocker ("we," "us") handles information in the Perk Rocker mobile app and related services (the "Service"). The Service is a rewards app for users in the United States. It is not directed at children under 13.
2. Information we collect
You give us
- Account: email and password (passwords are hashed by our auth provider; we never see your plaintext password).
- Profile: a public username and your city.
- Anything you send us by email or in-app feedback.
Created as you use the Service
- Earning activity (store QR scans, checkout amount shown, Diamonds credited).
- Earn activity (Rock Moments, Rocks, badges, referrals, leaderboards).
- Rewards activity (perks redeemed and whether used in a store).
- Device/technical data (device model, OS, app version, IP, diagnostics).
- Push token, if you enable notifications.
What we do NOT collect
- No legal name, phone number, or home address at sign-up.
- No email/receipt inbox scanning.
- No precise (GPS) location.
- No payment-card or bank information (there are no in-app purchases).
3. How we use information
To provide the app, prevent fraud, send notifications you opt into, secure and improve the Service, and comply with the law.
4. How we share information
We do not sell your personal information or share it for advertising. We share only with the service providers who run our infrastructure — Supabase (authentication, database, storage), Render (hosting), and Google Firebase Cloud Messaging (push notification delivery, only if you enable notifications) — with participating merchants in aggregate (and your username only when you present a perk to redeem in their store), for legal/safety reasons, or in a business transfer.
5. Retention
We keep data while your account is active and as needed for fraud prevention, dispute resolution, drawing-fairness auditing, and legal compliance. On deletion we remove or de-identify the personal identifiers tied to append-only ledgers.
6. Security
Encryption in transit, hashed credentials, signed single-use merchant QR codes, rate limiting, and access controls. No system is 100% secure — use a strong, unique password.
7. Your rights
Depending on where you live (e.g., California under the CCPA/CPRA or Texas under the Texas Data Privacy and Security Act), you may access, correct, delete, or port your data, and opt out of "sale"/"sharing" — we do neither for ads, and we do not sell sensitive personal data. Email [email protected] to exercise any right. We won't discriminate against you for it.
Delete your account in the app: go to Profile → menu → Delete account and confirm. This permanently removes your login and personal identifiers right away; append-only game ledgers are irreversibly de-identified (Section 5). You can also request deletion by email.
8. Children
The Service is not directed to children, and we don't knowingly collect data from anyone under 13. If you believe a child has provided us information, email [email protected] and we will delete it.
9. Rewards / financial-incentive notice
Diamonds and Rocks are in-app currencies with no cash value. Participation is voluntary; stop any time by deleting your account.
10. Changes
We'll post updates here with a new effective date and notify you in-app or by email of material changes.
11. Contact
Perk Rocker · [email protected]