Data collection

We collect and process the following types of personal data:

• — Bank transaction data

  We use GoCardless, powered by Open Banking, to detect store visits and send feedback requests.

• — User contact information

  This includes your email address and phone number, which we use to notify you and manage your prize draw entries.

• — Feedback responses

  The feedback you provide is collected and used for research purposes.

How we use your data

We use your personal data for the following purposes:

• — Detecting store visits

  Bank transaction data is used to identify when you visit participating stores.

• — Sending feedback requests

  After a store visit is detected, we send you a message inviting you to provide feedback.

  Prize draw management: Your contact information is used to notify you of prize draw entries and potential winnings.

• — Business insights

  Feedback responses are anonymised and aggregated to provide insights to businesses. This is our primary revenue source.

Sharing data

We share feedback responses with businesses in an anonymised and generalised format, ensuring they cannot be directly linked back to individual users. We do not share identifiable personal information with third parties without your explicit consent.

Data retention

We retain your identifiable transaction data only as long as necessary to fulfil the service, which includes detecting store visits and sending feedback requests. Feedback responses are anonymised within 1 month of collection. Once data is anonymized, it may be retained indefinitely for aggregated analysis and research purposes.

Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures include encryption, secure servers, and access controls.

• — ACCESS

  You can request a copy of the personal data we hold about you.

• — CORRECTION

  You can request corrections to any inaccurate or incomplete data.

• — DELETION

  You can request the deletion of your personal data.

• — OBJECTION

  You can object to the processing of your data for certain purposes. To exercise any of these rights, please contact us at support@yourtwocents.io.

Opt-out and data deletion

You may opt out of receiving future feedback requests at any time by updating your preferences. Additionally, you can request the deletion of your personal data by contacting us directly. Once your request is processed, all identifiable information will be deleted in accordance with legal requirements. Please note that anonymised data, which cannot be linked back to you, will not be affected by deletion requests.

Third-party services

We work with trusted third-party providers to deliver our services securely and efficiently. Each provider adheres to strict data protection standards to ensure your information remains secure.

• — GOCARDLESS

  To facilitate secure Open Banking connections and access transaction data in compliance with Open Banking regulations.

• — SUPABASE

  To manage our backend database and handle authentication processes securely.

• — RESEND

  To manage transactional emails, including sending magic links for signing in and other essential notifications.

Changes to the Privacy Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through appropriate channels, such as email or an in-app notification. Please review this policy periodically to stay informed about how we protect your data.

Contact information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: