Privacy Policy
Last updated: March 2026
1. What data we collect
| Data | Purpose | Basis |
|---|---|---|
| First name, last name | Account identification, verification | Contract / Consent |
| Email address | Authentication, reward delivery, communication | Contract |
| Password (hashed) | Authentication | Contract |
| Survey answers | Research / data collection as described per survey | Consent |
| Points & transaction history | Reward programme administration | Contract |
| Referral relationships | Referral bonus programme | Legitimate interest |
| Verification data | Identity confirmation (processed by our verification partner) | Consent |
2. How we use your data
- To operate and maintain your account and the points/rewards system.
- To verify your identity for fraud prevention before reward redemption.
- To analyse survey responses for research purposes (answers may be aggregated and anonymised).
- To communicate with you about your account, rewards, or changes to the Service.
3. Data sharing
- We do not sell your personal data.
- Survey answers may be shared in anonymised, aggregated form with research partners.
- Your name is shared with our identity verification partner solely for account verification.
- We will disclose data if required by law or legal process.
4. Referral privacy
When you refer someone, the referred user's personal details (such as name or email) are never shared with you. On your referral page you only see anonymised information: join date, whether they have verified their account, and whether you have received the referral points. No identifiers are shown.
5. Data retention
We retain your account data for as long as your account is active. If you request account deletion, we will erase your personal data within 30 days, except where retention is required by law.
6. Your rights (GDPR)
If you are in the EEA/UK, you have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict or object to processing.
- Data portability β receive your data in a structured format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us using the details below.
7. Security
We take reasonable measures (including encrypted connections where applicable) to protect your data. However, no system is completely secure.
8. Cookies
We use a session cookie to keep you logged in. We do not use tracking or advertising cookies.
9. Changes
We may update this Privacy Policy. We will notify registered users of significant changes via email or on-site notice.
10. Contact
For privacy-related inquiries or to exercise your rights, contact us through the information provided on the site.