Tenthcup Privacy Policy

Tenthcup has two kinds of users:

• Customers collect stamps, points and rewards at participating shops. Tenthcup is free for customers.
• Shops(cafés, bakeries, grocers and other businesses) create loyalty offers, scan customers' QR codes to add stamps or points and redeem rewards, and pay a subscription.

Account information. When you sign in with Google or Apple, we receive and store:

• your name
• your email address (if you use Sign in with Apple and choose "Hide My Email", we receive an Apple relay address instead of your real email)
• your profile photo link, if your Google account has one
• a unique user ID created by Google Firebase Authentication

We also store whether you use Tenthcup as a customer or a shop, and when your account was created. We never see or store your Google or Apple password.

Loyalty card information.For each loyalty card you hold, we store the shop and offer it belongs to, the offer details (title, reward and number of stamps needed, or for shop points the points name, earn rate, point value and claim threshold), your current stamps or points balance, your total points earned and total spend recorded for points, how many rewards you've redeemed or claimed, when the card was first created (shown as "Member since") and when it was last updated.

Stamp, points and reward history. Each time a shop adds stamps, records a purchase for points, redeems a reward or processes a points claim, we record the type of action, the number of stamps, the purchase amount and points earned, the points used and dollar value of a claim, the reward, which shop account recorded it, and the date and time.

Wallet order.If you rearrange your cards, we store your chosen order so it's the same on all your devices.

Apple Wallet pass.If you add your Tenthcup QR to Apple Wallet, we create a pass containing your name and your Tenthcup QR code (your user ID). The pass is stored in Apple Wallet on your device. We don't keep a separate copy, and the pass can't be shared from Wallet.

Shop information. If you use Tenthcup as a shop, we store your shop name, card colour and your offers (title, reward, stamps needed, colour, whether the offer is active and any expiry date) and, if you run shop points, your points name, earn rate, point value, claim threshold and large purchase confirmation amount. You can also add a shop address and phone number. These are optional.

Subscription information (shops only). Shop subscriptions are sold through the Apple App Store and Google Play. Apple or Google handles the payment, and we never see or store your card or bank details. We use RevenueCat, a subscription management service, to check whether your subscription is active. RevenueCat receives your Tenthcup user ID and details of your purchase from Apple or Google, such as the product, price, dates, and trial or renewal status.

Camera.Shops use the phone camera to scan customers' QR codes. The camera image is processed on the device only to read the code. Camera images are not uploaded or stored.

Crash and diagnostic data. If the app crashes or hits an error, Google Firebase Crashlytics collects a crash report: the error, the device model, operating system and app version, what the app was doing at the time, and your Tenthcup user ID. We use it only to find and fix bugs, never for advertising or tracking, and reports are kept for up to 90 days.

Information collected automatically.Like most apps that use cloud services, our service providers (Google and RevenueCat) receive technical information needed to run the service, such as IP address, device and operating system type and app version. We don't use this to identify or track you.

We use your information only to run Tenthcup, specifically to:

• create and manage your account and let you sign in
• show your loyalty cards, stamps, points and rewards
• let shops add stamps and points, redeem rewards and process points claims
• show shops a Sales tab with visits, stamps, spend, points, rewards and busiest times for their own shop
• manage shop subscriptions and free trials
• create your Apple Wallet pass when you ask for one
• keep the service secure and working, and find and fix crashes and problems
• respond to your questions and requests

No ads, no tracking, no selling.Tenthcup shows no advertising. We don't track you across other apps or websites, and we don't sell or rent your personal information to anyone.

When you show your QR code, the shop scans your Tenthcup user ID. The shop can then see your stamps, points, redeemed rewards and claims on its own cards only, and the history recorded at its shop, including purchase amounts it entered for points.

Shops cannot see your name, email address or profile photo through Tenthcup, and they cannot see your cards at other shops.

If you are a shop, customers who hold one of your cards can see your shop name, offer details and card colour, plus your shop address and phone number if you added them. Other signed-in Tenthcup users can see your shop name and offers.

We share information only with service providers who help us run Tenthcup, and only as needed for that purpose:

• Google (Firebase): Firebase Authentication for sign-in, Cloud Firestore to store your data, Cloud Functions to run tasks such as account deletion and creating Apple Wallet passes, and Crashlytics for crash reports.
• Apple and Google: for Sign in with Apple and Google sign-in, and for subscription payments through the App Store and Google Play, and Apple Wallet for your Tenthcup pass. Their own privacy policies apply to those services.
• RevenueCat: to manage shop subscriptions (see section 2).

We may also disclose information if the law requires it, or to protect the rights, safety or property of our users or ourselves.

Your information is stored and processed by Google (Firebase) and RevenueCat, whose servers may be located outside New Zealand and Australia, for example in the United States. When we use overseas providers, we take reasonable steps to make sure they protect your information to a standard comparable to New Zealand and Australian privacy law.

Data is sent over encrypted connections and stored with Google Firebase. Access is controlled by security rules: customers can only read their own cards, and shops can only change cards at their own shop, and the points maths is checked on our servers. No method of storage or transmission is completely secure, but we work to protect your information and limit who can access it.

We keep your information for as long as your account exists. When you delete your account, we delete your personal information as described in section 9. Apple, Google and RevenueCat keep purchase records under their own policies and legal obligations, for example tax and accounting rules.

You can delete your account at any time in the app:

• Customers: tap your profile picture at the top right of My Stamps, then Delete Account.
• Shops: open the Shop tab, then Delete account.

Deletion is permanent and removes:

• your account and sign-in record
• your profile (name, email, profile photo link and role)
• your loyalty cards (stamp cards and shop points) and their history
• for shops: your shop, all its offers, and all customer cards at your shop with their history

If you added a pass to Apple Wallet, remove it in the Wallet app (tap the pass, then ••• and Remove Pass).

Deleting a customer account also removes that customer's stamps, points and rewards from each shop's Sales history.

If you signed in with Apple, deleting your account also revokes Tenthcup's access to your Apple ID. If you signed in with Google, it disconnects Tenthcup from your Google account.

Deleting your account does not cancel a shop subscription. Please cancel it in your App Store or Google Play subscription settings.

If you can't use the app, email heyceynext@gmail.com from the email address linked to your account and ask us to delete it. We will confirm and complete the request within 30 days.

You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it's wrong. Your name, email and photo come from your Google or Apple account. Contact us at heyceynext@gmail.com and we will respond within a reasonable time, and within the time limits set by law.

If you're not happy with how we handled your request or complaint, you can contact:

• New Zealand: the Office of the Privacy Commissioner, www.privacy.org.nz
• Australia: the Office of the Australian Information Commissioner (OAIC), www.oaic.gov.au

Tenthcup is not directed at children under 13, and we don't knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

We may update this policy from time to time. We will post the new version on this page with a new effective date. If the changes are significant, we will let you know in the app or by email.

CeyNext
New Zealand
Email: heyceynext@gmail.com