XRewards Privacy Policy
XRewards ("we", "us") respects your privacy. This policy explains how we collect, use, share, and protect information in our member rewards platform.
1. Information We Collect
- Account information: email address, sign-in method (email, Google, Apple), and Firebase user ID.
- Member profile: display name, member ID, and join date.
- Rewards data: point balances, activity/transactions, and monthly reward estimates.
- Customer lead information: when a member submits a lead through Earn, we collect the customer’s name, phone number, email address, and the selected business category (e.g., insurance, loans, real estate). This information relates to the prospective customer, not the member submitting the lead.
- Guest preview: if you use guest mode, Firebase anonymous sign-in is used for preview only — no real points or leads are saved.
- Device & security signals: information processed through Firebase App Check and related services to prevent abuse.
2. How We Use Information
- Provide sign-in, registration, guest preview, and account management;
- Record, verify, and reward verified business activity;
- Process and route customer leads to relevant business partners;
- Protect platform security and prevent fraud or unauthorized access;
- Improve the product and troubleshoot issues.
3. Sharing Customer Leads with Business Partners
When a member submits a customer lead, we may share that lead’s contact information and category selection with third-party business partners (such as insurance providers, lenders, real estate firms, or other service providers) so they can:
- Contact the customer about products or services related to the selected category;
- Follow up on the inquiry and evaluate a potential transaction;
- Conduct marketing, promotional, or sales outreach permitted by applicable law.
Partners receive only the information needed for the relevant category and follow-up. We do not sell member account credentials (such as your login email or password) to partners.
Member responsibility: by submitting a customer lead, you represent that you have a lawful basis to provide the customer’s contact information — for example, the customer’s consent or another valid permission under applicable law — and that the information is accurate.
Customer rights: customers whose information was submitted as a lead may contact us at support@xrewards.app to ask about how their information was used or to request deletion, subject to legal and contractual requirements.
4. Third-Party Service Providers
We use the following types of providers to operate the platform. They process data only as needed to deliver the service:
- Google Firebase (Authentication, Firestore, Cloud Functions, App Check)
- Google Sign-In
- Apple Sign In
Business partners who receive customer leads are independent third parties. Their use of customer information is governed by their own privacy policies and applicable law.
5. Data Storage & Security
We apply reasonable technical and organizational safeguards, including access controls, encryption in transit (HTTPS/TLS), and App Check validation. Member and lead data is primarily stored on Firebase/Google Cloud infrastructure.
6. Your Rights
- Review this Privacy Policy in the app or on the website;
- Edit your display name in Profile;
- Permanently delete your account and associated data via Delete Account (subject to legal requirements). After deletion, your points, lead submission records, and reward history cannot be recovered;
- Contact us regarding customer lead data you submitted or that was submitted about you.
7. Children's Privacy
XRewards is not directed to children under 13. If we learn we collected a child's information without parental consent, we will delete it promptly.
8. Policy Updates
We may update this policy and publish changes in the app or on our website. Continued use after an update means you accept the revised policy.
9. Contact Us
Privacy questions: support@xrewards.app