1. Who we are

Uzimate operates a customer-loyalty platform consisting of a merchant dashboard and a customer mobile app. When we refer to “we”, “us”, or “Uzimate”, we mean the company providing these services. When we refer to “you”, we mean either a merchant or a customer using the app.

2. Information we collect

We only collect information necessary to operate the service.

• Account details: name, email, hashed password, role (customer or merchant), and verification status.
• Business details (merchants only): business name, store locations, reward rules, and QR codes.
• Loyalty activity: QR scans, points earned, rewards redeemed, spin-wheel results, and survey responses.
• User content: profile images and receipt images that you upload or capture through the app.
• Device & technical data: device type, operating system, app version, and push-notification tokens.
• Communications: messages and support requests you send to us.

We do NOT collect or store payment-card numbers — payments are handled by third-party providers such as Stripe.

We do NOT collect precise location data from your device.

3. How we use your information

We use the information above to:

• Create and authenticate your account securely.
• Operate loyalty rewards, QR scans, and app features.
• Allow users to capture or upload images (profile or receipts).
• Send transactional notifications (OTP, password reset, rewards updates).
• Send optional marketing communications (you can unsubscribe anytime).
• Detect, prevent, and investigate fraud or misuse.
• Improve app performance and user experience.
• Comply with legal obligations.

4. Sharing your information

We only share information when necessary:

• Service providers (hosting, notifications, analytics) under strict confidentiality agreements.
• Merchants you interact with (e.g., when you scan QR or claim rewards).
• Authorities if required by law.

We do not sell your personal information to advertisers or third parties.

5. Data retention

We retain your data while your account is active and for a reasonable period afterward for legal and operational purposes. Data is deleted or anonymized when no longer needed.

6. Your rights

• Access your data
• Correct inaccurate information
• Request deletion
• Restrict processing
• Request data copy
• Withdraw marketing consent

To exercise your rights, contact us at privacy@uzimate.com.

7. Security

We use industry-standard security including encryption, secure authentication, and access controls to protect your data.

8. International transfers

Your data may be processed in other countries with appropriate safeguards in place.

9. Children’s privacy

Our app is not intended for children under 13. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. Updates will be posted with a new date.