WeRewards
Privacy Policy

1. Who We Are

WeRewards ("we," "us," "our") is a loyalty rewards platform operated by Krish Chavan, an individual based in Pennsylvania. WeRewards is an independent service and is not affiliated with The Pennsylvania State University.

For privacy-related questions, contact us at: [email protected]

2. Information We Collect

2.1 Information You Provide (via Google Sign-In)

Signing in with Google does not by itself create a WeRewards account. After you choose your Google account we ask you to accept the Terms and this Policy, and your account is created only when you do. If you decline, the sign-in is discarded and nothing about you is kept.

Once you accept, we store:

• Your full name (from your Google profile)
• Your email address
• A unique user identifier assigned by our authentication provider (Supabase)

Your Google profile photo URL is displayed in the app but is fetched directly from Google's servers and is not stored in our database.

2.2 Transaction and Balance Data

Each time you earn or redeem points at a vendor, or move community points into a vendor balance, we record:

• The vendor involved
• The type of transaction (earn, redeem, or community-point move)
• The number of points earned, redeemed, or moved
• The community points credited or moved by the transaction
• The dollar amount of the purchase (for earn transactions)
• The reward redeemed (for redeem transactions)
• The date and time of the transaction

We also maintain your current point balance at each participating vendor and your community points balance (see Section 4.6 of the Terms of Service).

2.3 Engagement Score Data

We compute a rolling 30-day engagement score that determines your earn multiplier tier. This score is derived from your transaction history and reflects:

• How many different vendors you visit (breadth)
• How often you return to the same vendors (loyalty)
• Your spending volume across vendors (spend)

This score is stored and updated automatically.

2.4 Short-Lived Codes

We generate temporary earn codes (6-digit) and redemption codes (4-digit) for your account. Redemption codes are single-use and expire 120 seconds after you generate them. Earn codes expire 5 minutes after they are issued; while you have the app open, your existing code is refreshed rather than replaced, so the same 6 digits may stay valid for as long as you keep the screen open. Both are automatically deleted after use or expiration.

2.5 Error and Diagnostic Logs

If the app encounters an error, we may automatically record a crash report containing your user ID, the page you were on (path only — never the query string), the HTTP method and response status of the failed request, a technical error message and stack trace, your browser's user agent string, and a small amount of technical context about what the app was doing at the time. Error logs are retained for 90 days and then automatically deleted.

2.6 Deal Notification Data

If you grant your browser's notification permission to WeRewards, your browser gives us a push subscription: an endpoint URL at your browser vendor's push service (Google, Apple, or Mozilla, depending on your device) plus two encryption keys. We store these against your user identifier so we can deliver notifications to that device, and delete them when you turn deal alerts off, when you revoke permission, or when the push service tells us the subscription is dead.

For each deal you are selected to receive, we record which deal it was, whether a message was sent, which way it was sent (push notification or email), and whether you opened it. We also keep a small counter per account (when you were last messaged, and how many messages you have had in the current day and week) purely to enforce the frequency limits in Section 7.4. These records are deleted about 30 days after the deal expires, and immediately if you delete your account.

Where we could not reach you with a push notification, a deal may instead be sent to the email address on your account (Section 7.4). Our email provider tells us whether each message was delivered, could not be delivered, or was reported as spam. If an address permanently cannot receive mail, or its owner reports one of our messages as spam or uses an unsubscribe link, we record that address on an internal suppression list so that nothing further is sent to it. That list holds the email address and the reason only.

2.7 Consent Records

When you accept the Terms and this Policy after signing in, we record that you did so: your user identifier, which version of the documents you accepted, the date and time, and — as evidence that the acceptance was genuine — your IP address and browser user agent at that moment.

This is the only place we record your IP address. We keep these records for as long as your account exists; they are deleted with it. If we revise the documents and ask you to accept again, that creates a new record rather than replacing the old one, so the history of what you agreed to and when stays intact.

2.8 Information Stored on Your Device

WeRewards does not use tracking cookies, advertising cookies, or any third-party analytics. We do store the following in your browser's local storage:

• Your sign-in session. When you sign in with Google, our authentication provider (Supabase) stores an access token and a refresh token in your browser so you stay signed in between visits. These are what keep you logged in; clearing your browser storage signs you out.
• Your appearance preference. Your light/dark theme choice is saved locally so the app opens the way you left it.
• An offline app cache. The app registers a service worker that caches its own pages and styles so it loads quickly and works on a poor connection. This cache holds application files, not your personal data.

All three are stored on your device rather than sent to us as a separate collection of data. You can clear them at any time through your browser's site-data settings.

2.9 Location

Two features in WeRewards can use your location. Both ask your permission first, both work only while the app is open, and you can refuse or switch off either one without losing anything else.

The map

The app includes a map of the spots you can earn points at. Opening that map does not involve your location at all: it shows the vendors' own addresses, which they gave us.

The map also has a "show my location" button. If you tap it, your browser will ask your permission to share your position, and you can say no. If you allow it:

• Your position is read by your browser and drawn as a dot on the map on your own screen.
• It is never sent to our servers, never stored, never logged, and never shared with anyone, including the vendors and OpenStreetMap.
• It is discarded as soon as you close the map, and nothing about it survives to your next visit.

Declining, or never tapping the button at all, leaves the map completely usable.

Nearby spot alerts

If you turn on Nearby spots (Account → Notifications), the app can let you know when you are next to a spot you have never earned points at. It is off until your browser grants us location permission, and we ask for that permission once, from a card that explains what it is for.

How it works, precisely:

• While the app is open, your browser reads your position and your device compares it to the vendor addresses it already downloaded. That comparison happens entirely on your phone.
• Your coordinates are never sent to us. We do not receive, store, or log your latitude and longitude, and no vendor ever sees where you are.
• When your device decides you are next to a spot you have not tried, it asks our server one question — "may I show a notification about this spot?" — naming the spot only. We record that we told you about that spot, and when.
• That record is coarse location information, and we want to be plain about it rather than hide it: it means you were near that spot at that time. It is not a track of your movements, we keep no other position data, and you can see the whole list in Download my data.
• We use it for one purpose only: making sure you are never told about the same spot twice, and never interrupted more often than our limits allow.

This does not run in the background. Web apps cannot read your location when they are closed, and WeRewards does not try to. If the app is not open on your screen, nothing here is happening.

You can switch Nearby spots off at any time in Account → Notifications, or withdraw location permission in your device settings — the switch turns itself off when you do. Turning it off stops the alerts and no further records are made. It is separate from Deal alerts: switching one off does not affect the other.

2.10 Receipt Photos

You can claim points by photographing a paper receipt from a participating spot. Taking that photo is entirely up to you — you can always earn at the counter instead, and nothing here happens unless you tap submit.

When you submit a receipt photo:

• It is sent to our server and held only in memory for the few seconds it takes to read. It is never written to disk, never saved in our database, and never written to a log. Nobody at WeRewards can look at it, then or later.
• It is passed to Google's Gemini API, which reads the printed text and checks that the image is a photograph of a real printed receipt rather than a screenshot or an edited image. Google receives the photo itself. It is processed for that one request; see Section 4 for their policy, and note that Google's terms for free-of-charge API use allow them to use submitted content to improve their models.
• If that service is unavailable, the photo is read instead by an offline text-recognition engine running inside our own server, and does not leave it.
• Once we have read it, the photo is discarded. What we keep is only what any counter purchase would record: the spot, the dollar amount, the date and time printed on the receipt, and the points awarded (Section 2.2). We also keep those three values together as a fingerprint so the same receipt cannot be claimed twice.

A receipt photo may incidentally include whatever else is in the frame — the table, your hand, the card type printed on the receipt. Please photograph just the receipt. We never look for anything beyond the business name, the total, and the printed date and time.

2.11 Referrals, Promotions, and Bonus Points

Section 4.7 of the Terms of Service describes promotions that credit community points to your account for something other than a purchase. To run them we store:

• Your invite code. A six-character code generated for your account when it is created, whether or not you ever use it. It is yours alone and does not change.
• A record of every bonus we credit you: how many points, what the bonus was for, when, and (if a member of our team credited it by hand) a short note describing why.
• The link between two accounts, when one person uses another's invite code: which account invited which, the code that was used, whether the bonus conditions have been met, and what each side was paid. See Section 2.12.
• The email domain of your account, for a promotion limited to addresses at a particular domain. We compare the address we already hold (Section 2.1) against the promotion's list. We do not collect any additional information for this, and it is not a check of your enrollment or student status (see Section 11).

2.12 What Referrals Reveal About Other People

An invitation necessarily connects two accounts, so this section states exactly what each side can see, and what we can see.

• The person who invited you is not told who you are. They see counts only: how many people have joined using their code, how many have not yet made a purchase, and how many points they have earned in total. Your name, email address, and the identifier for your account are never shown to them, and are not included if they export their data.
• You are not told anything about them either. Entering a code credits your bonus; it does not show you their account.
• Your purchase triggers their payment. If you were invited by someone, the fact that you have earned points at a vendor is what causes their bonus to be paid. They are not told where you went, when, or how much you spent — only that their bonus became payable.
• We can see both sides. The platform operator can see, on an administrative screen, the email addresses of both accounts in a referral, its status, and the points paid. This is used to run and audit the promotion and to detect abuse, and for no other purpose. Vendors never see any of it.

If you would rather not be part of this, simply do not use an invite link, and do not share your own code. Nothing about the rest of the Service depends on it.

2.13 Information We Do NOT Collect

• Payment card numbers or bank account information. (A receipt often prints the last four digits of a card; we do not read, extract, or store them.)
• Precise GPS location. Two features can read your position with your permission — the map's locate button and Nearby spot alerts — but in both cases the reading stays inside your browser and your coordinates never reach us. For nearby alerts we learn only which spot you were next to, never where you are. See Section 2.9.
• Penn State student ID numbers or academic records
• Biometric data
• Contacts, or files from your device
• Your photo library. The receipt scanner reads the single image you choose to submit and keeps none of it (Section 2.10); it has no access to any other photo on your device.

3. How We Use Your Information

We do not use your data for targeted advertising. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Third-Party Services

We use the following third-party services to operate WeRewards. Each service receives only the data necessary for its function.

5. Data Retention

6. Account Deletion and Data Removal

You may delete your WeRewards account at any time through the Account tab → Delete my account. When you delete your account:

• Your profile (name, email, user ID) is permanently deleted.
• Your point balances, community points balance, and engagement scores are permanently deleted.
• Your active earn and redemption codes are permanently deleted.
• Your consent records, including the IP address recorded at acceptance, are permanently deleted.
• Your invite code and every referral record involving your account are permanently deleted — both the invitations you sent and the one you used, if any. If someone who invited you has not yet been paid their bonus, deleting your account means it will not be paid.
• Your transaction history records are retained but permanently anonymized — the link between those records and your identity is severed. This is necessary to preserve the accuracy of vendors' business records (e.g., total revenue statistics) which we are contractually obligated to maintain.
• Your bonus-point records are retained but permanently anonymized in the same way: the amount, the reason, and the date remain so that a promotion's spending still adds up, and the link to you is severed. What is left is an amount and a reason attached to nobody.

One exception. If the app recorded a diagnostic error log for your account before you deleted it (see Section 2.5), that log keeps your user identifier until it is purged on its normal 90-day schedule. These logs contain no name, email, or transaction data — only the identifier and technical debugging fields. After 90 days, no identifier associated with your account remains anywhere in our systems.

Deletion is irreversible. Once deleted, your account and points cannot be recovered.

7. Your Rights and Choices

7.1 Data Export

You can download a full copy of your WeRewards data at any time through Account tab → Download my data. The file is provided as a JSON file and includes your profile, your balances and community points balance, your full transaction history, your engagement scores, your deal-notification records, every bonus we have credited you and what it was for, your invite code, and your referral records.

Your referral records are limited to your side of each invitation, in line with Section 2.12: an invitation you sent appears as its date, status, and what you were paid, without any identifier for the person you invited.

7.2 Account Deletion

As described in Section 6, you may delete your account at any time through the app.

7.3 Correction

If you believe your account information is inaccurate, contact us at [email protected].

7.4 Opt-Out of Communications

Deal notifications. Participating vendors can send offers ("deals") to students who have earned points at that vendor. These can reach you two ways, and they always appear in the app's Deals list whether or not anything was sent to you:

• A push notification, if you have granted your browser's notification permission to WeRewards.
• An email to the address on your account, only where we could not reach you with a push notification. Many browsers and devices cannot receive push notifications at all, and email is the only way we can tell those students about a deal. You will never receive both for the same deal.

Nearby spot alerts. Separately from deals, the app can notify you when you are next to a spot you have never earned points at (Section 2.9). This is a notification your own device shows while the app is open; nothing is sent to you by us, and you are told about any given spot at most once, ever. It has its own switch, Nearby spots, and turning off Deal alerts does not turn it off.

You can turn any of them off at any time under Account tab → Notifications: Deal alerts controls push notifications, Deal emails controls email, Nearby spots controls nearby alerts, and all three are independent. Turning off Deal alerts removes the push subscriptions stored for your account. Every deal email also carries an unsubscribe link, and your email or webmail app may show its own one-click "Unsubscribe" button; either one turns Deal emails off for your account. Whatever you turn off, deals continue to appear in the app's Deals list, which you can simply not open.

Other email. We do send you email about your account when something happens that you need to know about, for example a password reset code you asked for. These are not marketing, and turning off Deal emails does not stop them.

Vendors do not receive your identity for this purpose. A vendor composes the message and chooses a category of recipients (for example, "my most frequent customers over the last 90 days"). WeRewards selects the matching accounts and delivers the message. The vendor is shown only aggregate counts (how many accounts matched, how many were sent to, how many opened the message). Vendors are not given your name, email address, or any identifier as part of this feature.

Frequency limits. We cap how many of these messages any one account can receive: at most two per day and five per week, never less than four hours apart, and none between 10:00 PM and 9:00 AM Eastern Time. These are limits on all of the above taken together, not per channel and not per feature — an email counts against them exactly as a push notification does, and so does a nearby spot alert. Two per day is the total number of times WeRewards will interrupt you, whatever the reason. Where several vendors would reach you at once, we combine them into a single message. These limits are enforced by us, not by vendors.

8. Security

We implement reasonable technical and organizational measures to protect your data, including encrypted data transmission (HTTPS), server-side authentication token validation, and database access controls. No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Earn codes and redemption codes are short-lived and single-use, which limits the impact of code interception.

9. Pennsylvania Breach Notification

In the event of a data breach that affects your personal information (as defined under Pennsylvania's Breach of Personal Information Notification Act, 73 P.S. §§ 2301–2329), we will notify you without unreasonable delay and in accordance with applicable law. If a breach affects 500 or more Pennsylvania residents, we will also notify the Pennsylvania Attorney General's Office as required.

10. Children's Privacy

WeRewards is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at [email protected] and we will delete it promptly.

11. Not Affiliated with Penn State

WeRewards is not affiliated with, sponsored by, or endorsed by The Pennsylvania State University. Use of a Penn State email address as an eligibility criterion does not create any relationship between WeRewards and Penn State. Penn State does not receive your WeRewards data and has no involvement in the operation of this platform.

This applies equally to any promotion limited to accounts at a Penn State email domain (Section 2.11). Such a promotion is offered by WeRewards alone. We compare the address already attached to your account against a list of domains and nothing more: we do not contact the university, we do not verify that you are enrolled, and we do not collect or infer your student status, ID number, or academic records. A university address that has been kept after graduation qualifies exactly as any other does, because we cannot and do not distinguish them.

12. Vendor Applicants and Vendor Contacts

This section applies to businesses applying to join WeRewards, not to students. If you are a student, Sections 1–11 cover you and this section does not.

12.1 What We Collect from Applicants

When a business submits the WeRewards vendor application form, we collect: the business name, a contact person's name, a contact phone number, a contact email address, a password chosen for the future vendor terminal login, and optionally a street address, a business logo image, and a free-text message.

Passwords are stored only as a bcrypt hash — we never store or have access to the password itself.

12.2 How We Use It

Application information is used solely to evaluate the application, contact the applicant, and — if the application is approved — create and operate the vendor's terminal account. We do not sell vendor contact information or use it for marketing unrelated to WeRewards.

12.3 Address Geocoding

If a business address is provided, we send that address to Nominatim, a geocoding service run by the OpenStreetMap Foundation, to convert it into map coordinates for display in the student app. Only the business address is sent.

12.4 Retention

Applications are retained while under review and, if approved, for as long as the vendor account is active. Declined and withdrawn applications are retained only as long as needed for our records. A vendor's own obligations and data rights are governed by the vendor agreement signed with WeRewards.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available in the app and at /legal/student-privacy-policy.html, and the "Last Updated" date at the top reflects the latest revision.

For material changes we will prompt you to review and accept the revised Policy the next time you open the app, and record that acceptance as described in Section 2.7. For minor changes, your continued use after the revision is posted constitutes acceptance.

14. Contact

For questions, concerns, or requests regarding this Privacy Policy or your data, contact:

Krish Chavan
WeRewards
Email: [email protected]