Privacy Policy

This policy covers the Supapoints app for iPhone and the service behind it (together, “Supapoints”), including Supapoints Plus. Supapoints is operated by Charles McQuain in the United States. Questions or requests: hello@supapoints.com.

The supapoints.com website has its own privacy policy.

• —Account details. Your email address and time zone. If you use Sign in with Apple, the identifier Apple gives us, the email Apple shares with us (often a private relay address) and, if you choose to share it, your name. We keep Apple's sign-in token encrypted so we can revoke it when you delete your account.
• —What you enter. The card products you hold (the product, never the card number), the month you opened each, benefit usage you record, points balances, certificates, welcome bonus progress, retention offers, status progress (nights, stays, points and spend), award goals, spending you share, trips and stays you plan, recorded prices, offers and award prices you keep, and notes.
• —Household sharing. If you create or join a household, its members and invitations, and what each person shares. Each person's points stay their own.
• —Items read from what you share. When you share a screenshot, statement, CSV file or email, the items read from it that you review, and whether you applied them (see below).
• —What Supapoints writes for you. Weekly briefings, trip copilot conversations, and the counts behind “What Plus did for you” (how many statements, emails and notes Plus handled).
• —Purchases. If you subscribe, Apple tells us your subscription status and transaction identifiers. Apple handles payment; we never see your payment card.
• —Notifications. If you allow notifications, your iPhone's push token, so we can send the reminders you set up. It is removed when you sign out.
• —Support messages. What you send us when you ask for help.
• —Usage analytics, only if you say yes. Which features are used (for example “a card was added”), with a random identifier for this install and your plan. It is never stored with your account, and the identifier is replaced when you sign out. We ask once when you first use the app; until you answer, nothing is sent, and if you say no, nothing ever is. You can change it in Profile at any time.
• —Security and service logs. Technical information such as IP address, device type and app version, used to run, secure and rate-limit the service, and records of the AI features you use (which feature, when, and what it cost, never what was sent). We don't put the contents of your wallet in these logs.

• —Bank or card-issuer logins, passwords, or account numbers. Supapoints never connects to your bank or signs in to any card, airline or hotel account.
• —Payment card numbers. If a statement or screenshot shows one, it is removed before anything is saved.
• —Credit reports or credit scores.
• —Your location. "Cards at your places" works entirely on your iPhone (see below).

• —On your iPhone first. Screenshots and statements you share are read on your iPhone where it can. The file stays on your iPhone.
• —On our server, only if you allow it. If your iPhone can't read a screenshot or statement and you have given permission (see Optional AI features), the file is sent to our server and to Anthropic to be read. Our server holds it only in memory while it is read; it is never stored or logged.
• —CSV files are read once on our server, in memory, and not kept.
• —Forwarded emails. With Plus and your permission, you get a private Supapoints address. An email you forward there is received by our email provider, Resend, which keeps it for up to 30 days; we read it from Resend and send it to Anthropic to be read, and we don't keep it. We keep only a short record that it arrived and what came of it, for 40 days.
• —You decide what's kept. What was read is shown to you first and nothing changes until you apply it. Items you haven't reviewed are deleted after 14 days, and items you turned down 30 days after you did. Items you applied are kept with your account.

Some features use an AI model from Anthropic. They send information to Anthropic only after you give permission in the app, and only for the features you use. With permission off, explanations, trip plans, wallet strategy, renewal memos, briefings and answers come from Supapoints itself, screenshots are read only on your iPhone, forwarded emails aren't read, and nothing is sent. You can turn it off in Profile › Notifications.

With permission, Supapoints sends Anthropic these eight kinds of things:

• —A shortlist's facts (the hotels, your trip's dates and party, and prices you recorded) to write “Why these?”.
• —Your trip, your household's hotel balances (with names like “You” or “Jordan”, never emails), certificates and recorded prices when you ask the trip copilot.
• —Your household's cards, the spending you've shared, credits left unused and how many cards each person opened in the last two years when you ask about your wallet strategy.
• —A card's fee, renewal date and the credits, perks and certificates recorded on it, with no names, emails or card numbers, when you ask for a renewal memo.
• —Your Today list (credits, cards and dates, with the catalog's terms), once a week, for your weekly briefing.
• —Your question and your household's cards with their earning rates, credits, balances and certificates when you ask your wallet a question, in the app or through Siri.
• —An email you forward to your Supapoints address.
• —A screenshot or statement you choose to have read on our server when your iPhone can't read it.

Anthropic deletes what it is sent within 30 days. Its exceptions are content its automated safety systems flag, which it may keep for up to 2 years, and anything the law requires it to keep. Anthropic doesn't use what it is sent to train its models. Supapoints doesn't store renewal memos or answers to your questions; weekly briefings and copilot conversations are kept with your account (see Retention).

The AI never decides a number you see. Balances, totals and values come from your own records and Supapoints' calculators, and Supapoints checks every number in an AI's answer against your records before showing it.

• —Cards at your places. The places you pick and your arrivals at them stay on your iPhone, which watches for them itself; nothing about your location is sent to Supapoints. When you search for a place to add, the search text goes to Apple Maps. It is off until you turn it on, and cleared when you sign out.
• —Widgets. Widget data is kept on your iPhone, in the app's own storage. Lock Screen widgets show only counts unless you turn details on. It is removed when you sign out.
• —Siri and Shortcuts. Apple handles what you say to Siri under Apple's own privacy policy. Asking your wallet a question through Siri works as it does in the app (see Optional AI features); the other Siri actions use only your own data.

• —To provide the service: track benefits and their periods, show what you entered, send the reminders and emails you set up, run the features you use, and share with your household.
• —To process purchases and keep your plan in sync with Apple.
• —To answer support requests.
• —To keep the service secure, prevent abuse, apply plan limits, and fix problems.
• —To improve the app, using analytics only if you said yes.
• —To meet legal obligations.

We do not sell your data, use it for advertising, or track you across other companies' apps or websites.

We email you sign-in codes, a note before a Plus trial ends, a link when your export is ready, the weekly email if you turn it on, and a message when your account has been deleted. Notifications are sent through Apple's push service, only if you allow them.

We share data only with service providers who process it on our behalf to run Supapoints:

• —Supabase: database and sign-in.
• —Vercel: hosting for our API.
• —Resend: sign-in codes and service emails, and receiving the emails you forward.
• —Apple: Sign in with Apple, notifications, in-app purchases, Siri, and Apple Maps search.
• —Anthropic: the optional AI features, only with your permission.
• —GitHub and Cloudflare: our nightly backup job runs on GitHub, which encrypts the backup before Cloudflare stores it.

We may also disclose information if the law requires it, to protect people's safety, or as part of a sale or transfer of the service (in which case this policy continues to apply to your data).

What you enter, and what Supapoints keeps for you, stays with your account until you delete it or your account. That includes weekly briefings, offers and award prices. Trip copilot conversations are deleted after 90 days without use unless you pin them.

You can delete your account in the app at any time. Deletion starts immediately: you are signed out, Sign in with Apple access is revoked, and after a 7-day grace period (in case you change your mind) your account and everything you entered are permanently deleted. We email you when deletion is complete.

Some records are kept for a set time, then deleted:

• —Encrypted backups, used only for disaster recovery: up to 30 days. If we ever restore one, we re-apply deletions.
• —Data exports: the download link works for 24 hours, and the export is deleted after 30 days.
• —Records of the AI features you used (which feature, when, and its cost, never what was sent): 13 months, no longer linked to you once your account is deleted.
• —Security records: up to 2 years, with your user identifier replaced by a one-way code when your account is deleted.
• —Apple’s notices about subscriptions: up to 2 years. Subscription records, without your account details, for up to 7 years for tax and dispute purposes.
• —Opt-in analytics events, which are not linked to your account: 13 months.

• —Export your data from the app at any time.
• —Correct or delete what you entered, or delete your whole account.
• —Turn notifications, emails, analytics and AI permission on or off in Profile.

Depending on where you live, for example California, you may have rights to access, correct, delete or obtain a copy of your personal information. We honor these requests for every user. Email hello@supapoints.com and we will respond within the time the law requires.

Data is encrypted in transit and at rest by our providers. Access to customer data is restricted, and each household's data is isolated at the database level. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Supapoints is intended for adults in the United States and is not directed to children. We do not knowingly collect information from anyone under 18. Data is stored and processed in the United States.

If we change this policy, we will update the date above. If a change is significant, we will tell you in the app before it takes effect, and we ask for your AI permission again whenever what the AI features send changes.

Charles McQuain, operator of Supapoints. Email hello@supapoints.com.