Privacy Policy

We collect information you provide directly, such as your name, email address, business details, and any deals or listings you create. We also collect certain information automatically, including device type, browser version, approximate location (when you choose to share it), and usage data to help us improve the service.

We use your information to operate AlleyCat, show you relevant local deals, process transactions, communicate with you, improve our platform, and keep accounts secure. We may also use aggregated, de-identified data for analytics and product development.

We do not sell your personal information. We share information with service providers who help us run the platform (such as hosting, payment, and analytics providers), and we may share information when required by law or to protect our rights and users.

We use cookies and similar technologies to remember your preferences, understand how people use AlleyCat, and support features like authentication and analytics. You can change your choices at any time from Cookie settings, or through your browser. Analytics is off until you turn it on. Disabling cookies may affect some features.

On iOS, we ask for your permission before any tracking that could be linked to you across other companies' apps or websites. If you decline, AlleyCat still works and we do not use that tracking.

When you scan a receipt or screenshot to earn a punch, we process the image to confirm the merchant, date, and total. Verification is part of running the loyalty program and happens whether or not you allow analytics.

Separately, if you turn on analytics cookies we record product-usage events about these flows so we can fix failures and improve accuracy. Those events are limited to: a scan being started (including how many photos were attached), a scan needing you to confirm a merchant match, a scan being blocked by a guard such as a cooldown or duplicate, a scan failing with an error, a scan being verified, a punch being earned (and whether it came from a receipt, a code, or a QR scan), a reward being earned, a reward code being created, and a reward being redeemed.

These events contain the business involved, punch and reward counts, the source of the punch, and a short error reason when something fails. They do not contain your receipt images, card numbers, or line items. If you leave analytics off, none of these events are sent.

You can update your account information, delete your account, or adjust notification settings from your dashboard. Depending on where you live, you may also have the right to access, correct, delete, export, or restrict use of your personal information, and to opt out of the sale or sharing of it. Use the form below to submit a privacy request and we will respond within 30 days.

We keep your information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the type of data and the reason it was collected.

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No online service can guarantee complete security, so we encourage you to use strong passwords and keep your account credentials safe.

AlleyCat is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us so we can remove it.

We may update this Privacy Policy from time to time. We will post changes on this page and update the "Last updated" date. Your continued use of AlleyCat after changes means you accept the updated policy.

If you have questions about this Privacy Policy or how we handle your information, please contact us at support@holmeslabs.dev or visit our Support page.