Privacy Policy

Rewarding is published by Longbo Xian (“we”, “us”). Questions about this policy: feedback@rewarding.life.

Summary

• Your cards, benefits, memberships and journeys are stored on your iPhone. They leave the device only when you use an optional online feature, such as official cloud sync, sharing with friends or a backup you create.
• Recognition of screenshots and documents runs entirely on your iPhone. Selected images and the text read from them are not uploaded to us or to any cloud AI service.
• No advertising, no tracking across other companies’ apps or websites, no sale of personal data, and no third-party advertising, analytics or crash-reporting SDKs.
• An account is optional. You can buy and restore VIP without one. If you create an account, you can delete it in the app at any time.
• Backups you create are encrypted on your device with a passphrase only you know. The rest of the online service is not end-to-end encrypted: our server can read account, profile, synced-record and sharing data in order to provide those features.

Information that stays on your device

Records you enter or confirm — card names and optional last four digits, benefit usage, memberships and tiers, flights, hotels, cruises and private-aviation trips, reminders, preferences and any card image you add — are saved in the app’s storage on your iPhone. Widgets and Live Activities read a summary prepared on the device. We never ask for bank passwords, full card numbers or card security codes; please do not enter them.

Your iPhone’s own backup (iCloud Backup or a computer backup) may include app data, according to your Apple settings. That is separate from the backups you create inside Rewarding.

On-device recognition

When you choose a photo, screenshot or document to recognise, Rewarding uses Apple’s on-device frameworks: the on-device Apple Intelligence model where your device, region, language and settings support it (“model” mode), otherwise on-device text recognition with local rules (“basic” mode). The image and the extracted text stay on your iPhone; there is no cloud AI or cloud OCR fallback. Proposed fields are saved only after you review and confirm them. The system photo picker gives the app only the items you choose.

Information we process when you use online features

Each of the following happens only when you use that feature.

Account (optional)

• Your email address and an internal account ID. Email sign-in sends a one-time code to your address; the code is stored only as a keyed hash and expires after 10 minutes.
• With Sign in with Apple or Google: the provider’s stable user identifier and the email address the provider shares with us (with Apple, this may be a private relay address). Google sign-in requests only basic identity and email — not Gmail, Google Drive or contacts. Your Apple or Google password is entered on the provider’s own page and is never given to us.
• With Sign in with Apple, we also keep an encrypted Apple refresh token, used only to revoke Rewarding’s access to your Apple Account when you delete your account.
• Session tokens, stored as hashes, that keep you signed in for up to 7 days per sign-in.

Profile (optional)

• A nickname and avatar you choose. The avatar is cropped and reduced on your iPhone (at most 512 pixels) and re-encoded by our server without photo metadata such as location. The original photo is not uploaded.

Purchases

• Payments are processed by Apple; we never receive your payment details. VIP is verified on your iPhone by Apple’s StoreKit, and Restore Purchases works through the App Store without a Rewarding account.
• When you are signed in, the app links purchases to your account and sends App Store transaction identifiers to our server, which verifies them with Apple’s App Store Server API. We store the product, status, expiry and an encrypted copy of the transaction reference used for re-verification.

Official cloud (optional; requires an account and a VIP + official cloud plan)

• Synced records: the cards, memberships and journeys you sync, with their change history, are stored on our server so they can be synchronised and shared. They are protected in transit with TLS but are not end-to-end encrypted.
• Encrypted snapshots and the 30-day recovery hold are encrypted on your iPhone with your passphrase before upload. We store only the encrypted file and technical details (size, checksum and timestamps) and cannot read the contents.

Your own iCloud or OneDrive (optional)

• iCloud backups are written by Apple to your private iCloud (CloudKit) database; we do not receive them.
• If you connect OneDrive, Microsoft asks you to allow access to the Rewarding app folder only. Our server keeps the Microsoft tokens encrypted and passes your already-encrypted backup to that folder; it does not keep a copy of the file.

Friends and sharing (optional)

• The email address you invite, the connection status, and only the summary fields you choose to share for a record (for example a trip title, dates and city). Automatic sharing of new trips or cards is off by default and is set per friend. Co-stay matching needs both people’s consent. Friend updates are kept for up to 90 days.

Notifications (optional)

• Trip reminders are scheduled locally on your iPhone. If you turn on friend-update notifications, we store your Apple Push Notification service device token (encrypted), a random installation ID and your notification language, tied to that signed-in session. Notifications contain a generic message, not trip or card details. Signing out or session expiry removes the registration.

Flight schedule lookup (optional)

• When you look up a flight, the date, airports and optional flight number are sent to our server, which queries AeroDataBox, through the RapidAPI marketplace, for published schedules. No screenshot, passenger name, booking reference or loyalty number is sent. Results are cached in server memory for about 10 minutes.

Apple Wallet passes (optional)

• When you add a trip to Apple Wallet, the selected title, dates, time and place are sent to our server to sign the pass and are returned to your iPhone. We do not keep the pass.

Feedback and support (optional)

• When you press Send in Feedback, we receive the category and message, any photos or the one video you attach, and your account email so we can reply. Attachments are re-encoded on your iPhone and their metadata is removed; whatever is visible in them, and any audio in a video, remains. Device information (app version, build, iOS version, device model and app language) is added only if you switch it on. Feedback is delivered by email through Resend to our support mailbox. Emails you send to feedback@rewarding.life reach the same mailbox.

Technical and security data

• Like any online service, Cloudflare (our network edge) and Render (our hosting) process IP addresses and request metadata to deliver and protect the service. Our server uses IP addresses for rate limiting and stores them only as one-way hashes for about 24 hours. We do not log the contents of your records or messages.

What we do not do

We do not use your information for advertising, do not track you across other companies’ apps or websites, do not sell personal information or share it for cross-context behavioural advertising, and do not include third-party advertising, analytics or crash-reporting SDKs. The app does not request your location; maps show only the places you choose, using Apple Maps.

Service providers

We use these providers only to run the features described above. They process information on our behalf or, for Apple, Google and Microsoft sign-in and storage, under your own account with them.

• Apple — App Store purchases (StoreKit and the App Store Server API), Sign in with Apple, iCloud (CloudKit), Apple Push Notification service, Apple Wallet and Apple Maps.
• Google — Google Sign-In. Our support mailbox is hosted on Gmail.
• Microsoft — OneDrive, only if you connect it.
• Render — hosting of our server and database, in the United States.
• Cloudflare — network ingress, TLS and email routing for rewarding.life.
• Resend — delivery of sign-in codes and feedback emails.
• AeroDataBox (via RapidAPI) — published flight schedules for lookups.

How long we keep information

• On your iPhone: until you delete the records or the app.
• Account, profile, synced records, sharing data and purchase records on our server: until you delete them or your account. Deleting your account removes them from our live database immediately.
• Sign-in codes: 10 minutes. Sessions: up to 7 days. Feedback delivery receipts (no message content): 7 days. Friend updates: 90 days. Recovery hold: 30 days from its first upload. Rate-limit counters: about 24 hours.
• Server database backups are made daily and kept for 7 days, so deleted data can remain in a backup until it rotates out. Our hosting provider’s disk snapshots follow its own retention.
• Support emails are kept as long as needed to handle your request; you can ask us to delete them.
• After an account is deleted, a pending Sign in with Apple revocation may be retried for up to 30 days, without your account ID or email.

Security

Connections use TLS. Session tokens and sign-in codes are stored as hashes; Apple, Microsoft and push tokens and stored purchase references are encrypted with AES-256-GCM. Backups you create are encrypted on your device with AES-256-GCM using a key derived from your passphrase (PBKDF2-SHA256, 600,000 iterations); the passphrase never leaves your device and we cannot recover it. No system is perfectly secure, and Rewarding as a whole is not end-to-end encrypted.

Your choices and rights

• View and edit your records and profile in the app, and export an encrypted backup at any time.
• Delete records, cloud copies or your whole account in the app — see Account deletion.
• Turn off sharing, automatic sharing or notifications at any time.
• Remove Rewarding’s access in your Apple Account (Sign in with Apple), Google Account or Microsoft account settings.
• Depending on where you live — for example in the EEA, the UK or California — you may have rights to access, correct, delete or port your personal information, or to object to its processing. To exercise them, email feedback@rewarding.life; we will verify that the request comes from the account holder. You may also complain to your local data protection authority.
• For users in the EEA and the UK: we process information to provide the features you request (contract), to keep the service secure and prevent abuse (legitimate interests), and with your consent for optional features such as notifications and sharing, which you can withdraw at any time.

Children

Rewarding is not directed to children under 13, and we do not knowingly collect their personal information.

International processing

Our server and several providers are located in the United States, so your information may be processed outside your country.

Changes to this policy

If we change this policy, we will update this page and its date. If a change materially affects how your information is used, we will tell you in the app before it applies.

Contact

Longbo Xian · feedback@rewarding.life