Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, university affiliation, graduation year, username, profile photo
• Authentication Data: Google OAuth credentials, Apple Sign-In credentials, email verification
• User Content: Reviews, ratings, photos you upload, feedback, and communications with us or businesses
• Payment Information: Processed by third-party payment processors (we do NOT store full credit card numbers)

1.2 Information Collected Automatically

• Location Data: Precise GPS location (when you grant permission) for geofencing and showing nearby perks
• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Usage Data: Pages viewed, features used, search queries, clicks, scroll depth, navigation patterns, time spent on app/website
• Transaction Data: Perks viewed, saved, and redeemed; timestamps; business locations visited
• Log Data: IP address, browser type, referring/exit pages, crash logs
• Cookies and Similar Technologies: Browser cookies, web beacons, pixel tags (see Section 6)

1.3 Information from Third Parties

• Business Partners: Transaction information when you redeem perks
• Analytics Providers: Usage statistics and performance data
• University Verification Services: Student status confirmation (if applicable)
• FERPA Acknowledgment: Perk is not an educational institution and is not subject to the Family Educational Rights and Privacy Act (FERPA). We use .edu email verification solely to confirm student status and do not access, store, or process education records. Any student information we collect is limited to what you voluntarily provide during account registration.

2. How We Use Your Information

We use the information we collect to:

• Operate the Platform: Provide, maintain, and improve our marketplace services
• Personalization: Show you relevant perks based on your location, preferences, and behavior
• AI-Powered Recommendations: Use machine learning and algorithmic models to generate personalized perk recommendations, predict user preferences, and optimize the relevance of content displayed to you
• Analytics: Generate aggregated and de-identified analytics for business partners (e.g., foot traffic trends, popular categories)
• Communications: Send you account updates, perk notifications, marketing messages (with your consent), and customer support
• Safety and Anti-Fraud: Verify redemptions using multi-factor verification (NFC, GPS, visual confirmation) to prevent fraud and abuse
• Legal Compliance: Comply with legal obligations, enforce our Terms, and protect our rights and property

3. How We Share Your Information

WE DO NOT SELL YOUR PERSONAL DATA.

We may share your information in the following circumstances:

• With Business Partners: When you redeem a perk, we share your first name and redemption status with the business. We also share aggregated analytics (e.g., total redemptions, demographics) that do NOT identify you individually.
• With Service Providers: Third-party vendors who help us operate the Platform (e.g., cloud hosting, analytics, email delivery, payment processing) under strict contractual obligations to protect your data.
• For Legal Reasons: When required by law, subpoena, court order, or government request; to enforce our Terms; to protect our rights, property, or safety; or in connection with legal proceedings.
• Business Transfers: In connection with a merger, acquisition, sale of assets, or bankruptcy, where your information may be transferred to the acquiring entity.
• With Your Consent: When you explicitly authorize us to share information.
• Aggregated/De-Identified Data: We may freely share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you.

4. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active, plus 2 years after account deletion
• Transaction Records: Retained for 3 years for accounting and fraud prevention
• Location Data: Precise location retained for 1 year, then aggregated/anonymized
• Usage and Log Data: Retained for 2 years
• Communications: Retained for 3 years for customer service and legal purposes

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access and Update: Review and update your account information through your profile settings
• Delete Account: Request deletion of your account and personal data by contacting privacy@perkapp.co
• Location Permissions: Control location access through your device settings
• Push Notifications: Opt out of push notifications through your device settings or app settings
• Marketing Communications: Unsubscribe from marketing emails via the link in each email
• Cookie Management: Control cookies through your browser settings (see Section 6)

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for authentication, security, and basic Platform functionality (cannot be disabled)
• Analytics Cookies: Help us understand usage patterns. We currently use the following analytics providers: Vercel Analytics (web performance and usage), PostHog (product analytics and feature usage), and Supabase (database analytics). We may add additional analytics providers in the future and will update this list accordingly.
• Functional Cookies: Remember your preferences and settings

Note: We do NOT currently use advertising or tracking cookies for behavioral advertising. If we add such cookies in the future, we will update this policy and obtain your consent where required by law.

You can control cookies through your browser settings, but disabling essential cookies may affect Platform functionality.

7. Data Security

We implement industry-standard security measures to protect your information:

• TLS/SSL encryption for data in transit
• Encryption at rest for sensitive data
• Access controls and authentication requirements for employees and contractors
• Regular security audits and vulnerability assessments
• Breach notification procedures in accordance with applicable law

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Children's Privacy (COPPA Compliance)

The Platform is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

If we discover that we have collected information from a child under 13, we will promptly delete it. If you believe we have collected information from a child under 13, please contact us at privacy@perkapp.co.

9. State-Specific Privacy Rights

California (CCPA/CPRA)

California residents have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we collect, use, and disclose
• Delete: Request deletion of your personal information (subject to certain exceptions)
• Correct: Request correction of inaccurate personal information
• Opt-Out of Sale: We do NOT sell personal information, so this right does not apply
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Virginia, Colorado, Connecticut

Residents of Virginia, Colorado, and Connecticut have similar rights to access, delete, and correct personal information.

To exercise these rights, contact privacy@perkapp.co.

10. International Users

Perk is operated in the United States. If you access the Platform from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using the Platform, you consent to the transfer of your information to the U.S., which may have different data protection laws than your country of residence.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an in-app notification or email for significant changes

Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact us at:

Email: privacy@perkapp.co
Legal Entity: Perk Infrastructure LLC
Jurisdiction: Delaware, United States