Privacy Policy

1. Who We Are

Perkora (“we”, “us”, “our”) operates the Perkora loyalty rewards platform at perkora.me. This policy explains what personal data we collect, how we use it, and your rights in relation to it. If you have questions, contact us at perkorasupport@proton.me.

2. Data We Collect

We collect the following when you use Perkora:

• Account data: your name, email address, and phone number (phone is optional).
• Profile data: avatar choice, profile photo (optional), horoscope sign (optional), and profile colour preference.
• Location data: the store and city you associate with your account, used to place you in a local community group.
• Transaction data: points earned from purchases, points redeemed, and reward history.
• Payment data: we do not store your payment card details. Purchases are processed by Square; we receive only the transaction amount and your Square customer ID to award points.
• Community content: messages and photos you post in community groups.
• Referral data: records of members you referred to Perkora.
• Technical data: authentication tokens managed by Supabase. We do not use tracking cookies or advertising pixels.

3. How We Use Your Data

• To create and manage your Perkora account.
• To award and track loyalty points based on your purchases.
• To display your points balance, tier progress, and rewards.
• To operate community features such as city-based chat and the photo of the day.
• To process reward redemptions.
• To credit referral bonuses to you and the person you referred.
• To send transactional emails (e.g. password reset). We do not send marketing emails without your separate consent.
• To improve and maintain the platform.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, our legal bases for processing your data are: (a) contract — processing necessary to provide the loyalty service you signed up for; (b) legitimate interests — operating and improving the platform; and (c) consent — for optional data such as your profile photo and horoscope sign, which you may withdraw at any time by updating or deleting your account.

5. Sharing Your Data

We do not sell your personal data. We share data only with:

• Supabase (supabase.com) — our database and authentication provider. Data is stored on their infrastructure.
• Square (squareup.com) — payment processing. We exchange your Square customer ID and transaction amounts to trigger point awards.
• Vercel (vercel.com) — our hosting provider. They process requests to serve the platform.
• Participating merchants — we may share aggregated, anonymised analytics (e.g. total visits, point redemption rates) with store owners. We do not share your individual name, email, or phone with merchants.

All third-party providers are bound by their own privacy policies and applicable data protection law.

6. Data Retention

We retain your account data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are required to retain it by law (e.g. transaction records for tax purposes, which we keep for 7 years).

7. Your Rights

Depending on your location, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data (“right to erasure”).
• Restrict or object to certain processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time for processing based on consent.

To exercise any of these rights, email us at perkorasupport@proton.me. We will respond within 30 days.

8. Children's Privacy

Perkora is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS), row-level security on our database, and authenticated access controls. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your data.

10. California Residents (CCPA)

California residents have the right to know what personal data we collect, to request deletion, and to opt out of the sale of personal data. We do not sell personal data. To submit a request, email perkorasupport@proton.me.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new “last updated” date. Continued use of Perkora after changes are posted constitutes your acceptance of the updated policy.