Privacy Policy

Last updated: July 2026

Loyalty Concierge ("we", "us", "our") is a Canadian rewards guidance service operated from Ontario, Canada. This policy explains, in plain English, what personal information we collect, why we collect it, how we use and share it, and the choices you have. We handle personal information in a manner consistent with the principles of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Accountability

We are responsible for the personal information under our control. The person accountable for our privacy practices can be reached at support@loyaltyconcierge.ca.

2. What information we collect and why

We intentionally collect only what we need to provide and improve the service — an approach known as data minimization.

• Account information — your name and email address when you create an account or join our early-access list. Used to sign you in, contact you about the service, and secure your account.
• Wallet information you choose to enter — the credit cards you carry, loyalty programs, rough monthly spending by category, favourite merchants, and your rewards goals. Used to generate personalized recommendations.
• Product usage — pages viewed, features used, and interactions with recommendations. Used to keep the service secure and improve it.
• Device and technical information — browser type, device type, approximate location derived from your IP address, and diagnostic information. Used for security, fraud prevention, and troubleshooting.

3. Information we do NOT collect

We do not ask for and never collect:

• Full credit card numbers
• Credit card CVV numbers
• PINs
• Online banking usernames, passwords, or credentials
• Your bank or credit card transaction history

Loyalty Concierge does not connect to your bank or credit card accounts. You tell us which cards you carry and roughly where you spend — that is enough for us to help.

4. How we use your information

• To generate personalized recommendations, scores, and audits.
• To operate, secure, and improve the service.
• To respond to your requests and send service-related emails.
• With your consent, to send occasional product updates you can unsubscribe from at any time.

We do not sell your personal information, and we do not share it for third-party advertising.

5. Meaningful consent

By creating an account or submitting information through the Rewards Audit, you consent to our collection and use of that information for the purposes described here. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by emailing support@loyaltyconcierge.ca. Withdrawing consent may limit our ability to provide parts of the service.

6. Who we share information with

We share limited information with trusted service providers who help us operate Loyalty Concierge. These providers are contractually required to protect the information they process on our behalf and to use it only for the services they provide to us.

• Hosting, database, and authentication — Supabase (via Lovable Cloud) hosts our application and database and powers account sign-in, including sign-in with Google.
• Application hosting and delivery — Lovable and Cloudflare host and deliver the site.
• Email delivery — transactional emails (welcome, service updates, replies to your requests) are sent through Lovable's managed email infrastructure.
• Analytics — Google Analytics 4 and Microsoft Clarity help us understand how the service is used so we can improve it. See "Cookies and analytics" below.
• AI recommendations — recommendation and concierge features use large language models accessed through the Lovable AI Gateway. We do not send your name, email, or other direct identifiers to these models.

We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a business transaction (for example, a merger or acquisition), in each case subject to appropriate safeguards.

7. Cross-border processing

Some of our service providers store or process information on servers located outside Canada, including in the United States. When personal information is processed outside Canada, it may be subject to the laws of that jurisdiction, including lawful access by government authorities. We take reasonable steps to ensure our providers offer a comparable level of protection.

8. How long we keep information

• Account and wallet information is retained for as long as your account is active.
• If you delete your account, we delete or de-identify your personal information within a reasonable period, except where we are required to retain it for legal, security, or fraud-prevention purposes.
• Encrypted backups may persist for a short additional period before being overwritten in the normal course of operations.
• Analytics data is retained according to the retention settings of each analytics provider.

9. Safeguards

We use reasonable technical and organizational safeguards to protect your information, including:

• Encrypted connections (HTTPS) across the entire platform.
• Secure authentication for member accounts, including sign-in with Google.
• Row-level access controls on our database so members can only access their own data.
• Access limited to team members who need it to operate the service.

No online service can be guaranteed to be 100% secure, but we work continuously to reduce risk. We do not hold certifications such as SOC 2 or ISO 27001; if that changes, this policy will be updated.

10. Your rights

You can:

• Access the personal information we hold about you.
• Correct information that is inaccurate or out of date — directly in your Profile and Wallet IQ, or by contacting us.
• Delete your account and associated personal information.
• Withdraw consent to marketing emails at any time using the unsubscribe link in the email.
• Ask questions about how your information is handled.

To make any of these requests, email us from the address on your account at support@loyaltyconcierge.ca. We will respond within a reasonable time, typically within 30 days. If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada.

11. Cookies and analytics

We use a small number of cookies and similar technologies to keep you signed in, remember your preferences, and understand how the service is used. Specifically:

• Google Analytics 4 — aggregate usage statistics with IP anonymization enabled. No advertising features or advertising cookies are enabled.
• Microsoft Clarity — anonymized session insights (heatmaps and interaction patterns) to help us improve the product. Clarity is disabled inside administrative areas.

Analytics do not receive your name, email, wallet balances, or the content of your Concierge conversations. You can decline analytics at any time using the consent banner or by controlling cookies through your browser settings.

12. Recommendations are not advice

Loyalty Concierge provides educational information and personalized rewards recommendations. Our recommendations are informational only and do not constitute financial, investment, tax, or legal advice.

13. Children

Loyalty Concierge is not directed to, and is not intended for use by, anyone under the age of majority in their province or territory. We do not knowingly collect personal information from children.

14. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email or in the app.

15. Contact

For privacy questions, access requests, correction requests, account deletion requests, or any other personal information inquiry, email support@loyaltyconcierge.ca.