PointSense

Privacy Policy

Effective August 1, 2026

This policy explains what PointSense ("PointSense," "we," "us") collects, how we use it, and the choices you have. PointSense is a loyalty-points tracker with an AI valuation layer. Our guiding principle: we collect the minimum needed to run the app, we never connect to your bank or airline accounts, and we never sell your data.

Information we collect

Category	What	Why
Account	Your email address (used for one-time-code sign-in)	Create and secure your account
Your content	Loyalty programs, balances, and activity dates you enter; travel-document images, labels, and expiry dates you add to the vault; goals you type into the AI advisor	Provide the core features you use
Forwarded emails (optional, Pro)	If you enable email sync, statement emails you forward to your private address. We extract the balance and store only the sender domain, subject, and parsed balance — never the email body	Keep your balances up to date automatically
Subscription	Your subscription status (via Apple / RevenueCat). We do not receive your card or payment details	Unlock Pro features
Device token	A push-notification token	Send expiry, devaluation, and update alerts
Install measurement	Limited device and installation information (device model, operating-system version, Apple's vendor identifier, and app install / app-open events). We do not collect the advertising identifier (IDFA)	Measure which of our own ads lead to app installs

We do not collect location, contacts, or the advertising identifier (IDFA), and we do not track you across other companies' apps or websites. PointSense shows no ads and contains no advertising SDKs. It does include one measurement SDK, used solely to attribute installs to our own ad campaigns — see Ads measurement below.

How we use your information

• To provide the service: valuations, expiry and devaluation alerts, the document vault, email sync, household sharing, and account security.
• AI processing: program valuations and the "best use" guidance are generated at the program level (not tied to you). When you use the AI Advisor, your relevant balances and the goal you type are sent to our AI provider to generate advice. When email sync is on, forwarded email text is processed by AI to extract a balance. AI outputs are estimates for guidance only.
• Household sharing: if you create or join a household, other members can see your shared points balances. Your document vault stays private unless you explicitly turn on sharing.

We do not use your content to train AI models, and we do not sell or rent your personal information.

Service providers

We share data only with vendors that help us run the app, under their own security and privacy commitments:

• Supabase — database, authentication, and encrypted file storage.
• Anthropic (Claude) — AI valuations, advisor, and email balance extraction.
• Apple & RevenueCat — subscription processing and management.
• Resend — receiving the statement emails you forward for sync.
• Expo — delivering push notifications.
• AppsFlyer — measuring which of our ad campaigns lead to app installs.

Ads measurement (no tracking)

We advertise PointSense on platforms such as Apple Search Ads, Meta, and TikTok, and we need to know which campaigns actually bring people to the app. To measure that we use AppsFlyer together with Apple's SKAdNetwork, which reports installs to us in an aggregated, privacy-preserving form.

We have deliberately configured this the strictest way available: the advertising identifier (IDFA) is disabled in the app, no App Tracking Transparency prompt is shown because we do not track you, and install measurement is not linked to your PointSense account or to the content you store in the app.

How your data is protected

• Data is encrypted in transit and at rest.
• Row-level security isolates your data so only you (and household members you invite) can access it.
• Document images live in a private storage bucket and are opened only through short-lived, authorized links — there is no public access.
• We store the minimum: for email sync we keep the parsed balance and basic metadata, never the message body.

Data retention & your choices

• Access & edit: you can view and change your data anytime in the app.
• Deletion: you can delete your account in the app, or email us to have your data removed. Deleting your account removes your programs, balances, documents, and history.
• We retain your data while your account is active and delete it after account deletion, except where we must keep limited records to meet legal or tax obligations.

Children

PointSense is a general-audience app and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy as the app evolves. We'll revise the "Effective" date above and, for material changes, provide notice in the app.

Contact

Questions or requests about your privacy? Email info@tenhetapp.com.