Privacy Policy

Updated at 2025-09-05

PASCOVICI SERBAN-CONSTANTIN II (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by FidelityPoints when you use our website and its associated subdomains (collectively, our “Service”). By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

1. Data Controller

The data controller for your personal information is:

2. Information We Collect

We collect information about you from different sources. This includes information you provide to us directly and information we collect automatically when you use our Service.

  • Information You Provide: When you register using Google Sign-In, we receive your email address and unique user ID. If you register as a Customer, we collect your date of birth. If you register as a Business, we collect your business name, address, and an optional business logo.
  • Information Collected Automatically: We use Google Analytics to collect data about your interaction with our Service, but only if you provide consent. This may include your IP address, browser type, operating system, pages viewed, and the dates and times of your visits.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain our Service, including managing your account and tracking loyalty points.
  • To improve our Service by analyzing how users interact with it.
  • To communicate with you, including sending service-related announcements and responding to support requests.
  • To ensure the security of our Service and prevent fraud.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with the following third-party service providers who perform services on our behalf:

  • Google (Firebase & Google Analytics): We use Firebase for backend services (authentication, database, file storage) and Google Analytics for usage analysis.
  • Stripe: We use Stripe for payment processing for Business subscriptions. We do not collect or store your payment card details; this information is provided directly to Stripe.

5. Data Retention and Deletion

We retain your personal data for as long as your account is active or as needed to provide you the Service. You can delete your account at any time through the "Manage Account" section in the app, which will permanently remove your primary account data from our systems.

6. Your Data Protection Rights (GDPR)

As we are based in the European Union, we adhere to the General Data Protection Regulation (GDPR). If you are a resident of the European Economic Area (EEA), you have the following rights:

  • The right to access, update, or delete the information we have on you.
  • The right of rectification if that information is inaccurate or incomplete.
  • The right to object to our processing of your personal data.
  • The right of restriction on the processing of your personal information.
  • The right to data portability for the information you provide to us.
  • The right to withdraw consent at any time where we relied on your consent to process your information.

To exercise any of these rights, please contact us at contact@fidelitypoints.com.

7. Your California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information. While FidelityPoints may not be subject to the CCPA at this time, we are committed to transparency.

  • We do not "sell" your personal information as the term is traditionally understood. We do not exchange your data with third parties for monetary compensation.
  • Under the CCPA, using third-party analytics services can be considered "sharing." You have the right to opt-out of this sharing. You can exercise this right at any time by clicking "Reject" on our cookie consent banner or by managing your cookie preferences.

8. Children's Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us.

9. Governing Law & International Transfers

This Privacy Policy is governed by the laws of Romania. Your information may be transferred to and maintained on computers located outside of your jurisdiction where data protection laws may differ. We ensure such transfers are protected by appropriate legal mechanisms, such as Standard Contractual Clauses.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

11. Contact Us

Don't hesitate to contact us if you have any questions regarding our Privacy Policy.