1. Who We Are
myREWRD (“myREWRD,” “we,” “our,” or “us”) operates the myREWRD platform, including the myREWRD mobile applications distributed to guests of participating live music venues (“Venue Apps”) and the venue management dashboard at app.myrewrd.com.
Our registered business address is available upon request at privacy@myrewrd.com.
2. Information We Collect
2.1 Information You Provide
- Account registration: name, email address, and password when you create a guest account in a Venue App.
- Profile information: optional profile photo and display name.
- Contact form submissions: name, email, and message content when you contact us through myrewrd.com.
- Venue onboarding: business name, contact details, and billing information provided by venue operators.
2.2 Information Collected Automatically
- Usage data: pages viewed, features used, check-ins, reward redemptions, and session timestamps.
- Device information: device type, operating system version, app version, and unique device identifiers.
- Log data: IP address, browser type, referring URLs, and error logs.
- Push notification tokens: to deliver event and reward notifications (only if you grant permission).
2.3 Information From Third Parties
We may receive information from Apple (Sign in with Apple) or Google (Sign in with Google) if you choose to authenticate using those services. We only receive the information those services make available under your privacy settings.
3. How We Use Your Information
We use the information we collect to:
- Operate and improve the myREWRD platform and Venue Apps.
- Manage your loyalty points, rewards, and check-in history.
- Send you event notifications, reward alerts, and service updates (you may opt out at any time).
- Provide venue operators with aggregated, anonymised analytics about guest engagement.
- Detect, investigate, and prevent fraudulent or unauthorised activity.
- Comply with legal obligations.
We do not sell your personal information to third parties. We do not use your data for targeted advertising outside the myREWRD platform.
4. Sharing Your Information
We may share your information with:
- Participating venues: The venue whose app you use can see your check-in history and reward activity within their venue. They cannot see your activity at other venues.
- Service providers: We use trusted third-party providers (such as Supabase for database hosting, Expo/EAS for app delivery, and Vercel for web hosting) who process data on our behalf under strict data processing agreements.
- Legal requirements: We may disclose information when required by law, court order, or to protect the rights, property, or safety of myREWRD, our users, or the public.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal or accounting purposes.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your personal information (“right to be forgotten”).
- Opt out of marketing communications at any time.
- Lodge a complaint with a supervisory authority (for EEA/UK residents).
To exercise any of these rights, please contact us at privacy@myrewrd.com.
7. Children’s Privacy
The myREWRD platform is intended for users aged 17 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
8. Security
We use industry-standard security measures including encrypted connections (TLS), hashed passwords, and role-based access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Continued use of the platform after changes constitutes acceptance of the updated policy.