Privacy Policy

Effective Date: June 20, 2026 · Last Updated: October 9, 2026

BetterRewards (“we,” “us,” or “our”) operates the BetterRewards mobile application (the “App”) and the website at betterrewards.co (the “Site”), including the Chip AI assistant feature. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using BetterRewards, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App or Site.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: Your email address and password (or authentication credentials if you sign in with Apple or Google). We do not store your Apple or Google account password. If you sign in with Apple, we store an Apple-issued token on our server so we can ask Apple to revoke the connection when you delete your account.
• Profile information: Your name, if you choose to provide it during account setup.
• Card information: When you manually add a credit card, we collect the card issuer, product name, and reward category preferences. We never collect or store full card numbers, CVVs, or expiration dates.
• Spending preferences: Your stated spending goals and optimization preferences (e.g., travel, cashback, dining) used to personalize recommendations.
• Rewards tracking data: Figures you enter yourself, including points, miles, or cashback balances, the amounts of card benefits you record, and offers you report using. If you link a bank, we also use its transactions to calculate spending and record supported statement credits.
• Support requests: Information you provide when you contact us or submit a bug report, including your email address and the content of your message.
• Waitlist signup metadata: When you join our website waitlist, we store your email address, IP address, and browser user-agent string for signup delivery and abuse prevention. To request deletion, contact support@betterrewards.co.

We send website quiz answers to Anthropic to generate card suggestions. If you request emailed results, we store your email address and quiz answers and use Resend to send the results. Requesting results does not opt you into marketing emails.

We store IP-based request counters for website abuse prevention.

1.2 Information Collected Through Plaid

If you choose to link a financial account, we use Plaid Inc. (“Plaid”) to securely connect to your bank or card issuer. When you link an account through Plaid, we receive:

• Account identifiers: A tokenized account reference and your card issuer and product names, which we use to identify which cards you hold. We never receive or store your full account number or bank login credentials.
• Transaction data: Plaid asks for your permission to access transaction history when you connect an account, and its consent screen will tell you so. We request up to two years of history, and we store the individual transactions we receive. For each one we keep the date, the amount, the merchant name, and the spending category Plaid assigns it. We use these transactions to calculate spending, estimate rewards, and record supported statement credits.

Plaid’s use of your data is governed by the Plaid End User Privacy Policy. We access your financial data in read-only mode — BetterRewards cannot move money, make payments, or modify your accounts in any way.

What we keep from a linked account: The tokenized connection itself (so the App can tell your account is linked), the name of the institution, the cards it matched to your wallet, the individual transactions described above, and the monthly category totals we calculate from them. We never receive or store your full account number, your account balance, or your bank login credentials. We do not delete transactions on a fixed schedule: we keep them for as long as the account stays connected. If you disconnect the account or delete your account, we instruct Plaid to revoke the connection and we delete the transactions and the totals derived from them at the same time.

1.3 Information Collected Automatically

• Analytics data: We use PostHog to collect app usage data, including screens viewed, features used, and actions taken. After you sign in, this data is linked to your account through an internal user ID. PostHog also estimates your approximate location from your internet connection. We use this information to understand how people use BetterRewards and improve the experience.
• Vercel hosts our website and provides website traffic analytics using page and device information.
• On the website, PostHog collects page views, page URLs, quiz views, and button clicks. It uses a browser identifier stored locally to associate activity.
• Crash and error data: We use Sentry to collect crash reports and error logs. These may include your account ID, device model, operating system version, app version, and technical details about the error. Sentry does not collect your financial data.
• Device information: Device type, operating system, app version, and a unique device identifier for push notification delivery.

1.4 Location Data

In-store location alerts are not available in the App Store launch build.

BetterRewards may request access to your device’s location to provide in-store card recommendations via push notification (e.g., alerting you to use your best card when you enter a store).

• Your phone’s GPS coordinates are processed on your device only. They are never transmitted to or stored on our servers.
• When a location-based recommendation is triggered, we send only the merchant’s name and category code to our server, never your phone’s GPS coordinates.
• Our analytics and error-reporting tools estimate your approximate location (city and region) from your internet connection, to understand where the app is used. This is not your phone's GPS location.
• You can disable location access at any time in your device settings. The App will continue to function without location data, but in-store push recommendations will be unavailable.

1.5 Subscription and Payment Data

Subscription payments are processed by Apple (via App Store). We do not directly collect or store your payment card details for subscription billing. We receive confirmation of your subscription status (active, trial, cancelled, expired) and plan type (monthly or annual) to manage your access.

1.6 Chip AI Assistant Conversations

The BetterRewards website (betterrewards.co) includes Chip, an AI-powered credit card assistant. When you use Chip:

• Message content: The text of messages you send to Chip is stored in our database. We store this to improve Chip’s responses, understand what questions users have, detect misuse or abuse, and improve the BetterRewards product and content.
• Session identifiers: We use a browser session identifier to enforce daily message limits and associate messages with a session. If you sign in on the website, Chip usage and conversation records can also be associated with your account ID.
• Usage metadata: We log the number of messages sent per session, timestamps, and whether a usage limit was reached. This is used for rate limiting, cost management, and abuse detection.
• Conversation logging: We do not use your Chip conversation content to train AI models. Conversations are reviewed by BetterRewards staff only for product improvement and abuse monitoring purposes.

What Chip does not collect or store:

• Chip does not have access to your financial accounts, card data, or transaction history unless you are logged in as a premium subscriber and have linked accounts (a future feature — not active at launch).
• If you type sensitive information into Chip, it is sent to Anthropic with your message. We mask some recognizable patterns before storing messages, but this may not catch everything. Do not share card numbers or other sensitive account details in chat.

Chip conversation retention: We store Chip conversations, session identifiers, and usage records in our database. We do not currently delete or anonymize them on a fixed schedule. To request deletion, contact support@betterrewards.co.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the BetterRewards service
• Generate personalized credit card recommendations based on the cards in your wallet, the spending information you enter, and, if you have linked an account, the transactions we receive from Plaid
• Send push notifications about optimal card usage, expiring offers, and rewards insights (with your permission)
• Process and manage your subscription
• Respond to your support requests
• Review Chip conversations to improve responses and the product
• Detect and prevent fraud, abuse, security incidents, and misuse of AI features
• Comply with legal obligations

We do not use your information to:

• Sell your personal data to third parties
• Make lending or credit decisions
• Share your individual financial data with advertisers
• Build profiles for ad targeting
• Train third-party AI models on your conversation data

3. How We Share Your Information

We share your information only in the following limited circumstances:

3.1 Service Providers

We use the following third-party service providers who process data on our behalf:

Each provider is contractually bound to use your data solely for the purpose of providing their service to us and in accordance with applicable data protection laws.

3.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of BetterRewards, our users, or the public.

3.3 Business Transfers

If BetterRewards is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change via email or prominent notice within the App.

4. Affiliate Relationships and Recommendations

BetterRewards may earn a commission when you apply for a credit card through a link in our App or on our Site. This does not affect our recommendations. Our recommendation engine evaluates cards based solely on your spending data, card reward rates, and optimization preferences — not on whether we earn a commission from a particular issuer.

Where affiliate relationships exist, they are disclosed inline at the point of recommendation. For full details, see our Affiliate Disclosure.

5. Data Security

We take the security of your data seriously:

• Data sent between your device and our services is encrypted in transit using HTTPS/TLS.
• All personal and financial data at rest is encrypted.
• Full card numbers are never stored. We retain only tokenized references and last-four digits.
• Bank login credentials are never accessible to us — they are handled entirely by Plaid.
• Supabase Row Level Security (RLS) policies ensure users can only access their own data.
• Your phone’s GPS coordinates are processed on your device and never stored on our servers.
• Chip conversation logs are stored with access restricted to authorized BetterRewards staff only.
• We conduct periodic security reviews of our codebase and infrastructure.

No system is 100% secure. While we implement commercially reasonable measures to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@betterrewards.co.

6. Data Retention

Delete your account from Profile > Delete account in the app. This deletes your account and its associated app data and requests revocation of linked bank and Apple sign-in connections. Bug reports and copies held by service providers may remain as described above. Deleting your account does not cancel an App Store subscription. Manage or cancel it in your Apple account settings.

7. Your Rights and Choices

7.1 All Users

• Access your data: You can request a copy of your personal data by contacting us at support@betterrewards.co.
• Delete your account: Delete your account from Profile > Delete account in the app. This deletes your account and its associated app data and requests revocation of linked bank and Apple sign-in connections. Bug reports and copies held by service providers may remain as described above. Deleting your account does not cancel an App Store subscription. Manage or cancel it in your Apple account settings.
• Disconnect financial accounts: You can unlink any connected bank or card account at any time from the App. This revokes the Plaid access token, stops all data syncing for that account, and deletes the transactions and spending totals we hold from it.
• Manage notifications: You can enable or disable push notifications in your device settings at any time.
• Manage location access: You can revoke location permission at any time in your device settings.
• Chip conversation data: To request deletion of Chip conversations, contact support@betterrewards.co.

7.2 California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Delete your personal information
• Opt out of the sale of your personal information — we do not sell your personal information
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@betterrewards.co. We will verify your identity before processing your request.

7.3 UK and EU Residents (UK GDPR / EU GDPR)

If you are located in the United Kingdom or European Economic Area, you have additional rights including:

• Access, rectification, and erasure of your personal data
• Data portability — receive your data in a structured, machine-readable format
• Restriction of processing in certain circumstances
• Object to processing based on our legitimate interests
• Lodge a complaint with your local data protection authority (in the UK, this is the Information Commissioner’s Office at ico.org.uk)

Our legal basis for processing your data is:

• Contract performance: Processing necessary to provide the BetterRewards service you subscribed to
• Legitimate interests: Analytics and service improvement, fraud prevention, Chip conversation analysis for product improvement
• Consent: Location data, push notifications, Plaid financial account linking

To exercise your rights, contact us at support@betterrewards.co.

8. Children’s Privacy

BetterRewards is not intended for anyone under the age of 18. We do not knowingly collect personal information from children under 18. All users must confirm they are 18 or older during account creation. If we learn that we have collected data from a child under 18, we will delete that data promptly. If you believe a child under 18 has provided us with personal information, please contact us at support@betterrewards.co.

9. Third-Party Links

The App and Site may contain links to third-party websites, including credit card issuer sites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this page and, where appropriate, providing notice within the App. Your continued use of BetterRewards after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

Email: support@betterrewards.co

Website: betterrewards.co

This privacy policy is provided for informational purposes. We recommend having it reviewed by a qualified legal professional before publication.