Your data should have a clear job.

This policy explains what BonusBites collects, why it is needed, how long it is kept, and how you can delete it.

Kept on-device

Your sign-in secrets.

Restaurant passwords, one-time codes, cookies, and session tokens stay on your iPhone in protected app storage. BonusBites does not upload those secrets to its servers.

Stored by BonusBites

Your account and reward wallet.

We store your name, email address, BonusBites user ID, installation ID, connected restaurant names, and normalized balances, rewards, offers, and refresh history so your wallet works across sessions.

Membership

Purchases and notifications.

We retain Apple-signed subscription transaction identifiers, product, purchase, expiration, renewal, and revocation status to verify Gold access. Reward notifications are optional and can be changed in the app or iOS Settings.

How data is used

App functionality, security, and support.

We use collected data to authenticate your account, display and sync your reward wallet, enforce Free and Gold limits, verify App Store purchases, deliver notifications you request, prevent abuse, diagnose failures, and respond to support requests. We do not sell personal data, use it for cross-app tracking, or serve third-party advertising.

Service providers

Limited access to operate BonusBites.

Authentication, database, hosting, and infrastructure providers process only the information needed to run BonusBites. Apple processes subscriptions and sends signed purchase status to us. Restaurant services receive requests directly from your iPhone when you connect or refresh an account. Providers are limited to operating their service, must protect the data they process, and may not use it for their own advertising. We may also disclose information when required by law or necessary to protect users and the service.

Retention and deletion

Kept while your account is active.

Account details, device records, normalized reward snapshots, refresh history, and purchase verification records are retained while your BonusBites account is active. Use Profile → Delete Account to remove your live account and linked cloud data, including reward and purchase records. Deletion begins immediately and is retried automatically if a provider is temporarily unavailable. Data already present in encrypted provider backups may remain until those backups rotate and are not returned to normal use. A minimal deletion record containing technical identifiers and a one-way email hash is retained for 90 days to finish deletion retries and prevent an old session from restoring the deleted account. It does not contain restaurant credentials or reward contents. Removing the app deletes its local protected data from that iPhone.

Your choices

Access, correction, and questions.

You can review core account information in the app, disconnect a restaurant, change notification permissions, or delete the entire BonusBites account. To request access to or correction of personal information, ask about deletion, or report a privacy concern, email support@bonusbites.app. We may update this policy when the product or legal requirements change and will revise the effective date above.