Privacy Policy
Reward My Data · effective November 4, 2026 · version 2026-11-04.3
This policy explains what Reward My Data, a public benefit corporation ("Reward My Data", "we") collects through the Reward My Data app, website and shopping panel browser extension, how we use it, how long we keep it, and how you can use your rights.
The Short Version
•
You share receipts (and, if you choose, shopping activity from our extension). We reward you with DR points.
•
We sell only deidentified, aggregated data: totals and trends across many members that cannot be traced back to you.
•
We do not sell or share personal information. Never your name, email, phone number, address, card digits, location or health purchases.
•
We do not collect your location when you scan, and we remove health and pharmacy items from every receipt.
•
You can see, export, correct and delete your data at any time, wherever you live.
What We Collect
•
Account details you give us: email, password (stored only in scrambled, hashed form by our sign in provider), first and last name, date of birth, street address, city, state, ZIP and phone.
•
Receipts: the photo, and what we read from it: store, date and time, items, prices, discounts, totals and payment type. Health and pharmacy lines are removed as the receipt is read (see below).
•
Email receipts (only if you add them): the screenshot, and what we read from it, the same as a paper receipt plus the order number.
•
Card purchases (only if you upload a card file): for each purchase, the date, merchant name, amount and the category your bank gave it. Your phone reads the file and leaves out everything else before sending: card and account numbers, balances, payments, refunds, interest, fees, transfers, and purchases from pharmacies and medical providers. We never connect to your bank and never see your bank login.
•
App usage (only if you share it): the names of apps you use, their category and the minutes you spend in each, per day or week, from a Screen Time or Digital Wellbeing screenshot or, if you turn on automatic sharing in the Android app and allow Android's Usage access, read by the app once a day. Apps that reveal health, dating or sex life, religion or finances (for example health, period tracking, dating, prayer, banking and investing apps) are left out before storage. We do not read what you do inside any app, your messages, or the websites you visit.
•
Fraud signals from each scan: device details, and the name, card brand and last digits, and transaction number printed on the receipt.
•
Activity: your DR points history, redemptions, Prize Drop entries, referrals, and weekly ads and coupons you add.
•
Shopping panel (only if you install the extension and turn on sharing): products you view, store searches, cart opens and completed orders on supported shopping sites, as described in our Terms section 7.
•
Messages you send us, and technical data such as IP address, browser and app version, and a push notification token.
•
Community: posts, comments, reports and votes on causes. Other members see your posts under your display name, or "Anonymous" if you turn that on.
We do not collect Social Security numbers or full card numbers, and we do not use third party advertising trackers in the app or extension.
Why We Ask for Your Address and Date of Birth
Privacy and consumer laws are different in every state. Your address tells us which state's rules apply to your account. Your date of birth confirms you are old enough to join (18, or 19 in Alabama and Nebraska and 21 in Mississippi). We also use them to verify your identity before a redemption.
How We Use It
•
To run your account, read and verify receipts, credit DR points and pay redemptions and the monthly prize.
•
To prevent fraud: duplicate or edited receipts, fake accounts, and receipts scanned far from the store.
•
To build deidentified, aggregated datasets and insights, and to sell or license them.
•
To show prices and coupons, improve our software and AI models, and keep the service secure.
•
To send account messages and, if you allow them, push notifications.
•
To follow the law and respond to lawful requests.
What We Sell: Deidentified, Aggregated Data
What buyers get from us are aggregates: for example, the average price of a product in an area in a given week, or how a brand's share of baskets changed. Before anything is shared:
•
names, contact details, addresses, card details, transaction numbers, exact locations, device details and member IDs are removed;
•
times are rounded, and areas are no smaller than a 3-digit ZIP code or a metro area;
•
results are reported only for groups large enough that no member can be singled out, and small groups are suppressed;
•
health and pharmacy items are never included.
We publicly commit to keep this data in deidentified form and not to try to reidentify it, and we require every buyer, by contract, to make the same commitment and not to pass it on without the same terms. Data in this form is not personal information under state privacy laws.
We do not sell personal information, and we do not share it for cross context behavioral advertising. We have not done so in the past 12 months. If that ever changes, we will update this policy, ask for your consent where the law requires it, and honor opt out requests and Global Privacy Control signals.
Health Information
We do not want health information. Receipts can show pharmacy or health purchases, so as each receipt is read, we replace those lines with "Health item" and keep only the price. The extension does not work on pharmacy or health pages and skips health products, and the app leaves out card purchases from pharmacies and medical providers before a card file is sent, and health and fitness apps from app usage. The original photo, which may still show those lines, is seen only by our receipt reading system and, for flagged receipts, our reviewers, and is deleted when your account is deleted.
Washington and Nevada residents: this paragraph is our consumer health data policy. We collect consumer health data only as incidental content of receipt photos, use it for nothing, never sell or share it, and delete it with your account. You can ask to see or delete it, or withdraw consent, by emailing hello@rewardmydata.com.
Location
We do not collect your location when you scan a receipt. We work out the store from what is printed on the receipt. If you use a "stores near me" price search, your phone's location is used only to run that search and is not stored.
Who We Share Personal Information With
•
Service providers who work for us under contracts that limit their use of it: hosting and database (Supabase, Cloudflare), receipt reading (AI models run for us by Cloudflare), email (Resend), push notifications (Expo), gift card fulfillment, and identity verification.
•
Authorities and others when the law requires it, to protect members, or to prevent fraud.
•
A buyer or successor if we are involved in a merger, acquisition or sale of assets, under this policy.
•
Anyone you choose, for example when you export your data and send it elsewhere.
On request we will give you a list of the specific third parties we have disclosed personal information to (a right in Connecticut, Oregon, Minnesota and Maryland, offered to everyone).
How Long We Keep It
•
While your account is open we keep what you share: account details, receipts, email receipts and their photos or screenshots, card purchases, app usage, the name, card brand and last digits and transaction number printed on them, DR points history, and extension activity (until you delete it in the extension). We keep it for fraud checks, disputes, taxes, and to improve our receipt reading.
•
When you delete your account we erase your account details, photos, sign in and DR points. Receipt contents (store, items, prices, totals and times) card purchases (date, merchant, amount, category) and app usage (app, category, minutes, day) are kept forever, but only in deidentified form, with nothing that links them to you.
•
To stop fraud after deletion we keep scrambled fingerprints of the card digits and printed names from your receipts. They cannot be turned back into the numbers or names, and they are used only to spot accounts closed for fraud that try to rejoin.
•
Records of privacy requests are kept for 36 months, without details that identify you.
Your Rights, in Every State
Wherever you live, you can:
•
know and access what we hold about you, and export it: Me, then Export my data (JSON or CSV);
•
correct it: Me, then Edit profile, or email us;
•
delete it: Me, then Delete my account, or email us;
•
opt out of the sale or sharing of personal information and of targeted advertising and profiling (we do none of these; residents of states with this right also see a switch on the Me tab);
•
limit the use of sensitive information (we use it only to provide the service);
•
get the list of third parties described above;
•
be treated equally: using any of these rights never lowers your DR points, prices or service.
How. Use the app or email hello@rewardmydata.com. To protect your account, we verify requests by confirming the email you sign in with, and may ask for more details. An authorized agent can act for you with your signed permission. We answer within 45 days, or tell you if we need 45 more. We honor Global Privacy Control signals as an opt out where the law requires it.
Appeals. If we turn down your request, email hello@rewardmydata.com with "Appeal" in the subject within 60 days. We reply within 45 days (60 in Colorado). If you still disagree, you can contact your state attorney general.
California
In the past 12 months we collected these categories of personal information: identifiers (name, email, address, phone, IP address); customer records (date of birth); commercial information (purchases on receipts, DR points history); internet activity (shopping panel activity, if you share it); and sensitive personal information (account sign in). Sources: you, your device, and the receipts and pages you share. Purposes: the uses listed above. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you.
Our rewards are a financial incentive. The notice of financial incentive, with our good faith estimate of the value of your data and how we calculate it, is at How we value your data. You opt in on the profile form and can leave at any time.
We do not disclose personal information to third parties for their own direct marketing (Shine the Light).
Colorado and Other Loyalty Program Disclosures
•
Program: the Reward My Data rewards program (DR points, the Monthly Prize Drop and the shopping panel).
•
Personal data collected: the categories listed in "What we collect".
•
Benefits that depend on selling personal data: none. We sell only deidentified, aggregated data, so no benefit is lost if you opt out of sale, targeted advertising or profiling.
•
Third parties that receive personal data: only the service providers listed above. No data broker or advertiser receives your personal data.
•
Ending benefits: if we end a benefit because you deleted data it depends on, we tell you at least 24 hours before.
Nevada
We do not sell covered information. You can still send a request not to sell to hello@rewardmydata.com.
Children
The service is only for adults (18 or older, 19 in Alabama and Nebraska, 21 in Mississippi). We do not knowingly collect information from anyone younger. If we learn that we have, we delete the account.
Security and Where Data Is Kept
Data is stored in the United States with encryption in transit and at rest. Access is limited to the people and systems that need it, and member data is protected by row level security so members can see only their own records. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Changes to This Policy
We will post changes here and update the effective date. For material changes we tell you in the app or by email at least 30 days ahead and ask you to agree again. We will not use data we already collected in a materially different way without your consent.
Contact
Reward My Data, a public benefit corporation. Email: hello@rewardmydata.com.
Join the Reward My Data community
A public benefit community centered around data privacy and economic inclusion. It's your data: protect it, get rewarded, and have a say.
Join free →