Privacy Policy

1. Who We Are

UrbanPass ("we", "us", "our") is a mobile loyalty and coupon platform that connects customers with local merchants. For questions about this policy, contact us at privacy@urbanpass.co.

2. Data We Collect

2.1 When you register

• Account details — name, email address, and a hashed password.
• Profile preferences — optional profile photo and category interests.

2.2 When you use the app

• Location — approximate location (GPS) to surface nearby merchants. Only collected while the app is in use, and only with your permission.
• Redemption history — which coupons you redeemed, at which merchants, and when.
• Loyalty points — your points balance and transaction log per merchant.
• QR tokens — short-lived tokens generated at redemption time. These are cryptographically tied to your account and expire in 5 minutes.

2.3 Automatically collected

• Device information — device model, operating system version, and app version for diagnostics.
• Crash reports — anonymised error logs to improve stability.
• Analytics — aggregate usage patterns (screens visited, feature engagement). No personally identifiable data is shared with analytics providers.

3. How We Use Your Data

• To operate your account and provide the coupon and loyalty features.
• To generate secure QR tokens for each redemption.
• To show you relevant nearby merchants and personalised Today's Picks.
• To record your savings and loyalty point balances accurately.
• To detect and prevent fraudulent redemptions.
• To send you important service notifications (account, security, policy changes).
• To improve app performance and fix bugs using aggregated analytics.

4. Legal Basis for Processing

• Contract — processing necessary to deliver the services you signed up for.
• Legitimate interests — fraud prevention, security, and service improvement.
• Consent — location access, push notifications, and marketing emails. You can withdraw consent at any time in app Settings.

5. Data Sharing

We do not sell your personal data. We share it only where necessary:

• Merchants — when you redeem a coupon, the merchant receives your display name and the offer redeemed. They do not receive your email, phone number, or payment details.
• Firebase / Google Cloud — our backend infrastructure (Firestore, Authentication, Storage). Data is stored in the EU region under Google's data processing agreement.
• Crash reporting tools — anonymised stack traces only; no personal data.
• Legal authorities — where required by law or to protect safety.

6. Data Retention

• Account data — retained while your account is active and for 2 years after deletion, for fraud prevention purposes.
• Redemption history — retained for 3 years from the date of redemption.
• QR tokens — automatically deleted after expiry (5 minutes) or redemption.
• Anonymised analytics — retained indefinitely in aggregate form only.

7. Your Rights

You have the right to:

• Access — request a copy of all personal data we hold about you.
• Correction — update inaccurate information directly in-app or by contacting us.
• Deletion — request account and data deletion. Use Settings → Account → Delete Account or contact us.
• Data portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interests at any time.
• Withdraw consent — turn off location, notifications, or marketing preferences in Settings at any time.

To exercise any right, email privacy@urbanpass.co. We respond within 30 days.

8. Security

• All data in transit is encrypted with TLS 1.3.
• Passwords are hashed with bcrypt; we never store plaintext credentials.
• QR tokens are single-use, cryptographically signed, and expire in 5 minutes.
• PIN confirmation requires both parties to be physically present — no remote replay is possible.
• Firestore security rules enforce that users can only read/write their own data.

9. Children's Privacy

UrbanPass is not directed at children under 16. We do not knowingly collect data from minors. If you believe a child has registered, contact us and we will delete the account promptly.

10. Changes to This Policy

We will update this page when our practices change and notify you via the app for material changes. The "Last updated" date at the top reflects the most recent revision.

11. Contact