Last Updated: 6/16/2025
1. What Data We Collect
We only collect data that is necessary to provide our digital punch card service:
For Business Users:
- Email address and password (for account creation and login)
- Business name and location
- Reward program details (number of punches required, prizes offered)
For Customers:
- Email address (if you create an account)
- Punch card progress (linked to participating businesses)
- Name (optional, for personalization)
What we DON'T collect: We do not collect payment information, location data, browsing cookies, phone numbers, or any other personal data not listed above.
2. How We Use Your Data
We use your information solely to provide and improve our service:
- Create and maintain your account
- Display your punch card progress
- Allow businesses to track customer visits and reward redemptions
- Send important account-related notifications (if applicable)
- Improve our service based on usage patterns
3. Data Sharing and Privacy
We do not sell, rent, or share your personal data with third parties.
Business Access:
- Businesses can only see punch card data specific to their store
- They can see visit counts and reward redemptions for their customers
- Customer email addresses are only visible to businesses if the customer created a pending card through that business
- Businesses cannot access customer data from other businesses
4. Security Measures
- All passwords are encrypted and secured through Firebase Authentication
- Data is stored securely using Google Firebase infrastructure
- We use industry-standard security protocols to protect your information
- While we take reasonable security measures, no online system is 100% secure
5. Your Rights and Control
- Account Deletion: You can delete your account at any time, which will remove all associated data
- Data Access: You can request to see what data we have about you
- Data Correction: You can update your account information through your dashboard
- Business Rights: Businesses can delete punch cards and customer records they created
To exercise these rights, please contact us at abdullah@mon10.org
6. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or through an in-app notice. Your continued use of the service after such changes constitutes acceptance of the new Privacy Policy.
8. Contact Us
If you have any questions about this Privacy Policy or our practices, please contact us at: