Privacy Policy
Effective date: May 1, 2025
Points Champ ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the Points Champ mobile application and website at pointschamp.com (collectively, the "Service").
1. Information We Collect
Account Information
When you create an account, we collect your email address, password (stored as a secure hash), and optionally your full name, city, and state.
Financial Tracking Data
We collect the credit card names, issuers, and benefit information you add to the app. We do not collect, store, or request actual card numbers, CVVs, expiration dates, or any data that can be used to make financial transactions.
Loyalty Program Data
We store the names of loyalty programs and point/mile balances you manually enter.
Trip & Travel Data
If you log trips or flights, we store destination names, dates, flight numbers, and redemption details you provide.
Gmail (Optional)
If you choose to connect your Gmail account, we request read-only access to identify flight confirmation emails to automatically import trip data. We do not read, store, or share the content of your emails. Access can be revoked at any time from the app.
Usage Data
We may collect basic usage information such as app version, device type, and crash reports to improve the app.
2. How We Use Your Information
- To provide and operate the Points Champ Service
- To authenticate your account and keep it secure
- To sync your data across your devices
- To import trip data when Gmail is connected (with your permission)
- To diagnose and fix technical issues
- To communicate with you about your account or support requests
We do not sell your personal information. We do not use your data for advertising.
3. Third-Party Services
Supabase
We use Supabase for user authentication and database storage. Your account information and app data are stored on Supabase's secure infrastructure. Supabase's privacy policy is available at supabase.com/privacy.
Google (Gmail API)
If you connect Gmail, we use Google's OAuth 2.0 API with read-only access. We only process email metadata needed to identify flight bookings. We do not store your Gmail credentials. Google's privacy policy is available at policies.google.com/privacy.
4. Data Retention
We retain your data for as long as your account is active. You may delete your account at any time from the app (Profile → Delete Account), which will permanently remove all your data from our systems within 30 days.
5. Data Security
We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and secure cloud infrastructure. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
6. Children's Privacy
Points Champ is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us and we will promptly delete it.
7. Your Rights
You may access, update, or delete your personal information at any time through the app settings. To request a copy of your data or ask questions about our privacy practices, contact us at support@pointschamp.com.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date. Continued use of the Service after changes constitutes your acceptance of the revised policy.
9. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at: