Privacy Policy

Kupaca Credit is operated by Kupaca, LLC ("Kupaca", "we", or "us"). We collect as little as the product allows. On the free tier we never ask for a card number and we never connect to your bank. Connecting a financial account is optional, available only on a paid plan, and can be undone at any time.

We do not sell your data. We do not share it with advertisers or data brokers. We do not use your financial data to train machine learning models.

When you create an account we receive your email address, and if you sign in with Google, your name and profile photo. Authentication is handled by Firebase Authentication, which means your password, if you use one, is held by that service and not by us.

As you use the app you tell us which card products you hold, when you opened them, and which benefits you have used. We store that so the app can track reset dates and show your history.

We do not ask for and do not store your card number, your CVV, your full account number, your Social Security number, or your date of birth.

When you agree to our Terms of Service and this Privacy Policy by ticking the box, we record which version you accepted and when. We keep that record for as long as your account exists.

We collect basic technical information needed to run and debug the service, including device and browser type, app version, and crash diagnostics. Crash reporting is provided by Sentry.

If push reminders are available on your device and you turn them on, we store a device notification token so reminders can reach that device. We also store your reminder preferences and a record of the reminders we send, so we do not send the same one twice.

We record how Kupaca Credit is used, such as which screens are opened and when actions like adding a card or marking a benefit used succeed, so we can see what works and improve it.

Each record holds the event name, the time, the screen path, the app version and platform, and a pseudonymous identifier: your account ID when you are signed in, or a random device identifier when you are not. Records do not include your email address, your name, card numbers, or transaction details.

These records are stored in our own database. They are not sent to an advertising company, and no third-party analytics script runs in your browser or the app.

Your device sends usage events only after you accept analytics in our consent banner, and never while your browser sends a Global Privacy Control or Do Not Track signal. Our servers also note when account actions succeed, and skip those notes for requests that carry either signal. Two account events are always recorded because we need them to run your account: when your account is created and when your subscription changes.

We may forward these records from our servers to PostHog, Inc., an analytics service that helps us study them. PostHog receives the same pseudonymous identifier, event names, and event details described above. No PostHog code runs on your device. If you delete your account, we also delete your records from PostHog.

Usage records are deleted after 13 months, and when you delete your account.

If you buy Pro in the iOS or Android app, Apple or Google processes the payment and tells us whether your purchase is active. We do not receive your payment card details.

If you buy Pro on the web, Kupaca, LLC is the seller, checkout is provided by RevenueCat, Inc., and the payment is processed by Stripe, Inc. You enter your email address and payment details into their checkout, and they handle that information under their own privacy policies. We never receive your full card number.

Whichever way you buy, RevenueCat tells us your plan, the price you paid, whether it is active, whether it is set to renew, whether a renewal payment failed, and when it renews or ends, and we store that with your account.

If you report a problem, ask us to add a card, or tell us a benefit looks wrong, we store what you wrote along with the card or benefit it is about, the value the app showed you at the time, your app version, and your device type. We use it to fix problems and keep the card catalog accurate, and we show you the status of each report in the app.

Once a day, new reports are posted to a private channel in our team messaging service through a webhook, so a person reviews them. Each post includes what you wrote, the card or benefit it is about, and a shortened account ID. It does not include your email address or name.

Reports stored in the app are deleted when you delete your account. Posts already made to our team channel are not removed automatically. Ask us at the support address below and we will remove them.

Connecting a bank or card account is not available yet. When it is, it will be optional and available only on a paid plan. You can use Kupaca Credit fully without connecting anything. The rest of this section describes how connections will work; we will update it to name our bank-connection provider before connections open.

If you choose to connect, we will use a third-party bank-connection provider to establish and maintain that connection. You will enter your financial institution credentials directly into the provider's interface. We will never receive, see, or store those credentials. The provider's handling of your information is governed by its own privacy policy, which we will link here and which we encourage you to read before connecting an account.

We request two categories of data. The first is the list of card accounts at the institution you connect: each card's name, type, and last four digits, so you can tell us which of your tracked cards each one is. The second is the transaction history for those accounts. We use both for a single purpose, which is to identify transactions that appear to match a credit or benefit you are tracking on the card they were made with, so we can record that the benefit has been used.

We do not request or receive:

• Your bank or card login credentials
• Your full account numbers
• Your account balances
• Your credit score or credit report
• Your identity verification data

We do not retain a copy of your transaction history. Transactions are processed as they arrive from the bank-connection provider and are not written to our database.

When a transaction matches a benefit you are tracking, we retain only what is needed to show you why we detected a use:

• The merchant name on the transaction
• The transaction amount and date
• An identifier for the transaction supplied by the bank-connection provider
• The same details for an offsetting statement credit, when we find one

To keep the connection working we also store the name of your financial institution, a connection identifier, and an access credential issued by the bank-connection provider. That credential is encrypted at rest. It is not your bank password, and it cannot be used to move money. For each card account at that institution we store its name, its last four digits, and which of your tracked cards you paired it with, if any.

Detection is automatic. When a transaction looks like a qualifying purchase, we record it as a likely use of the matching benefit. We mark the benefit used when the issuer's matching statement credit posts, or when the usual time for that credit to post has passed without one.

Detection can be wrong in both directions. We may mark a benefit used when it was not, and we may miss a benefit you did use. You can edit any benefit's usage in your wallet at any time. See the No guarantee of outcome section of our Terms of Service.

We use what we collect to operate the service: to show your benefits and reset dates, to send the reminders you asked for, to detect benefit usage from accounts you connect, to provide support, to keep accounts secure, and to fix problems.

We use financial data only for the purpose described above. If we ever want to use it for something else, we will ask you first.

We do not sell your personal information and we do not share it with advertisers, data brokers, or marketing partners.

We rely on service providers who process data on our behalf, under contract, only to run the service:

• Firebase Authentication, for sign-in
• A bank-connection provider, for financial account connections, once available and if you choose to connect one
• RevenueCat, for subscription management, and Stripe, for payments made on the web
• Apple and Google, for purchases made in the iOS and Android apps
• Firebase Cloud Messaging, for push reminders, if you enable them
• Sentry, for crash diagnostics
• PostHog, for usage analytics, if we turn it on
• Our team messaging service, which receives a daily digest of new feedback reports
• Our hosting and database providers, which run the service infrastructure

We may also disclose information if we are legally required to, or to protect the rights and safety of our users or the service.

Data is encrypted in transit. Access credentials issued by the bank-connection provider are additionally encrypted at rest, and your data is scoped to your account so that it is not reachable by other users.

No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by law.

We keep your account information for as long as your account is open. Benefit history is kept so the app can show your capture rate over time.

If you sign up with an email address and password and do not verify the address within 7 days, we delete the account in the same way as when you delete it yourself. An unverified account that already tracks a card or has a paid plan is kept until you verify the address or delete the account.

Usage analytics records are deleted after 13 months. Records of the reminders we sent are deleted after 180 days. Feedback reports are deleted one year after they are closed. Unfinished bank connection attempts are deleted within a day.

If you disconnect a financial account, the connection and its stored credential are deleted. Usage already detected stays in your history unless you change it or delete your account.

When you delete your account, we revoke your bank connections through the bank-connection provider, immediately delete the data we store, and ask RevenueCat and PostHog to delete what they hold about you. Copies in database backups and server logs expire on their normal schedule. Crash reports already sent to Sentry are kept for Sentry's retention period. Feedback already posted to our team channel is removed if you ask. We keep anything we are required to retain by law.

We use your browser's or device's storage to keep you signed in, open the app quickly, and remember your settings. We do not use advertising cookies or track you across other sites. The analytics identifier described above is stored only after you accept analytics. Our Cookie Policy lists every item we store and why.

You can disconnect a linked account at any time by contacting support, or by deleting your account. Disconnecting instructs the bank-connection provider to revoke our access and deletes the connection from our systems.

You can get a copy of your data at any time. In the app, open Account, then Privacy & security, then Export data. You receive a file with the data we hold about your account, including your cards, benefit history, sign-up bonuses, linked account details, notification settings, subscription status, feedback reports, your record of accepting these terms, and usage analytics records. To keep the file safe to store, it leaves out the access credentials for linked accounts and device notification tokens. You can also ask for a copy at the support address below.

You can turn reminders off in notification settings, and you can delete your account and its data from the app or by contacting support. Deleting your account does not cancel a subscription bought through the App Store or Google Play. Cancel it in the store first, or it will keep renewing.

You can decline analytics in the consent banner, or turn on Global Privacy Control or Do Not Track in your browser, and your device will not send usage events.

[COUNSEL: add the state privacy rights section once thresholds are assessed, including CCPA and CPRA categories collected, the right to know, delete, and correct, and the do-not-sell statement.]

Kupaca Credit is intended for adults. It is not directed to children and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us information, contact us and we will delete it.

We may update this policy as the service changes. When we do, we will revise the date at the top of this page. If a change materially affects how we handle your information, we will give you notice in the app or by email before it takes effect.

Kupaca Credit is operated by Kupaca, LLC, a limited liability company organized in [COUNSEL: state of formation].

Questions about this policy, or requests about your data, can go to support@kupaca.com.

Mailing address for legal notices: Kupaca, LLC, [COUNSEL: mailing address].