Last updated: [Effective date]
This policy explains what Pointsflare collects, why, who helps us run the service, and the choices you have. Pointsflare is run by [Operator legal name] ("we", "us"). Questions: [Contact email], or write to [Mailing address].
Pointsflare is in a private, invite only beta. It is for people in the United States who are 18 or older.
What We Collect
Your account
- Your email address, used to sign you in with a six digit code, or the email that Google or Apple shares when you use Continue With Google or Sign in with Apple. With Apple's Hide My Email, we receive a relay address instead of your real one.
- Whether you are on the invite list, who invited you if the invite link carried a tag (for example "friends"), and when you first signed in.
Your settings
- The names of the rewards cards you tell us you hold. We never ask for card numbers, bank logins or balances, and we never connect to your bank.
- Your bar for a good deal, the point values you set, the alert categories you watch, your alert choices, your daily digest time, your quiet hours and your time zone.
- The deals you save.
Notifications
- If you allow notifications in the iPhone app, a push token that lets Apple deliver our alerts to your device.
- A record of which deals we sent you and when, so we never send the same deal twice. We delete these records after 60 days.
How you use Pointsflare
We record six kinds of events, each tied to your account: an alert was sent to you, an alert email was opened, you viewed a deal, you opened a deal's source link, you saved a deal, and your answer when we ask whether a targeted offer is in your account. Each event holds only the deal or offer it concerns and a short label for where it happened. We use them to learn whether alerts are useful. We do not use advertising trackers, and we do not sell or share your information for advertising.
Our emails contain a tiny image that tells us when an email is opened. Some mail apps load images automatically, so an "open" may be recorded even if you did not read the email. You can block it by turning off images in your mail app.
The waitlist
If you join the waitlist, we keep your email address, where you signed up (for example the homepage), and a scrambled, one way code made from your internet address, used only to stop automated sign ups. We do not keep your internet address itself.
Cookies and storage
We use cookies to keep you signed in, to remember an invite link until you sign in, to return you to the page you were opening, and to remember an invite tag for 30 days. Your browser also keeps a few preferences (for example saved deals before you sign in, and whether you finished setup). We use no advertising or third party analytics cookies.
Server logs
Our hosting provider keeps standard request logs (such as internet address, browser type and the page requested) for security and troubleshooting.
What We Do Not Collect
We do not collect card numbers, bank or loyalty program logins, balances, your location, your contacts, or payment details. Pointsflare does not take payments today.
Where Deals Come From
Pointsflare reads public posts from points and miles blogs and public offer pages, and uses an AI model to pull out the offer details. Only those public posts are sent to the AI model. Your information is never sent to it.
Who Helps Us Run Pointsflare
We share information only with the providers that run the service for us, and only what each one needs:
| Provider | What It Does | What It Receives |
|---|---|---|
| Supabase | Database and sign in | Everything listed above |
| Vercel | Hosting | Requests to the app, including server logs |
| Resend | Sending email | Your email address and the content of your alerts |
| Apple | Push notifications, Sign in with Apple | Your push token and alert text; your Apple sign in, if you use it |
| Continue With Google | Your Google sign in, if you use it | |
| OpenRouter (and the model provider it routes to) | Reading deal posts | Public blog posts only, never your information |
| DuckDuckGo and Google favicon services | Small logos next to deals | Your internet address and which brand logo your device loads |
We may also disclose information if the law requires it, to protect people's safety, or as part of a sale or merger of the business, in which case this policy continues to apply.
How Long We Keep It
- Your account, settings, saved deals and events: until you delete your account.
- Sent alert records: 60 days.
- Push tokens: until you delete your account or Apple reports the token is no longer valid.
- Waitlist entries: until you are invited, or you ask us to remove you.
- Server logs: as long as our hosting provider keeps them, typically a few days to a few weeks.
Your Choices
- Email: every email has a one click Unsubscribe link. You can also change alerts in Settings.
- Push: turn notifications off in your iPhone's Settings or in Pointsflare's Settings.
- Delete your account: go to Settings, then Delete Account. This removes your account, settings, saved deals, push tokens, sent alert records, events, waitlist entry and invite right away. Copies in our providers' backups expire on their normal schedule.
- Access or correct: email [Contact email] and we will reply within 30 days.
If you live in a state with its own privacy law (for example California), you have the right to know what we collect, to have it deleted or corrected, and not to be treated differently for asking. We do not sell or share personal information as those laws define it. Email [Contact email] to make a request.
Security
Information travels over encrypted connections, access to your data is limited to your own account by database rules, and only the service itself can read send records and the waitlist. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.
Children
Pointsflare is not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has signed up, email [Contact email] and we will delete the account.
Changes
If we change this policy in a way that matters, we will update the date above and tell you in the app or by email before the change takes effect.
Contact
[Operator legal name] [Mailing address] [Contact email]