Privacy Policy
Last updated: June 2025
1. Information We Collect
When you use Barakah Rewards, we collect information you provide directly — such as your name, email address, and business details when signing up as a vendor partner. For customers earning or redeeming points, we collect transaction data including purchase amounts and point balances.
2. How We Use Your Information
We use your information to operate and improve the Barakah Rewards platform, process points transactions, provide vendor analytics, and communicate important updates about your account. We do not sell your personal data to third parties.
3. Data Security
We implement industry-standard security measures including encryption in transit (TLS), secure token handling for QR codes, and role-based access controls for vendor dashboards. All authentication is handled through secure, httpOnly cookies.
4. Data Retention
Transaction data is retained for as long as your account is active plus a reasonable period for analytics and legal compliance. You may request deletion of your personal data at any time by contacting us.
5. Third-Party Services
We use Supabase for authentication and data storage, and Vercel for hosting. These services have their own privacy policies. We do not share identifiable customer data with vendors beyond what is necessary to process point transactions.
6. Your Rights
You have the right to access, correct, or delete your personal information. Vendor partners can manage their data through the dashboard settings. For all privacy inquiries, contact us at privacy@barakahrewards.ca.
7. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use after changes constitutes acceptance of the updated policy.