Privacy policy

Rebateful is built to know as little about you as possible. There is no account, no password and no email address. This policy explains what the app and this website do with information, and what you can do about it.

Rebateful is published by Sensimity by the RO Brand, [address], Leusden, the Netherlands ([Chamber of Commerce number]). Questions about this policy go to money@rebateful.net.

What the app stores

A device ID, not an account

When you first open the app it creates a random device ID and a secret token, kept in your phone's secure keychain. Your funds and receipts are linked to that ID. We never ask for your name, email address or phone number.

The last 4 digits of your card

You enter the last 4 digits of the cards you shop with. We compare them with the card digits printed on your receipts, so only your own receipts can be claimed. We never see or store a full card number, an expiry date or a security code.

Your receipts

For every receipt you approve, we store what the scanner read: the shop name and address, the date and time, the amounts, the tax rate and tax, the card's last 4 digits and the text read from the receipt. Reading happens on your phone. We need these details to check the tax adds up and that a receipt is claimed only once.

Receipt photos

You choose in Settings whether the receipt photo is uploaded and how long it is kept: until your trip ends, always, or never.

Trips

If you add a trip (the countries you visit, your dates and your departure flight), we use it to pick the right fund and to time reminders.

Location

The app uses your location only while it is open, to choose the right country fund and to notice when you are at the airport. It never tracks you in the background, and you can turn airport detection off in Settings.

Notifications

If you allow notifications, we send reminders before your tax expires, only when you are in that country or have a trip booked.

The ledger

Every amount added to or spent from a fund is written to an append-only, tamper-evident ledger, so claims can be audited and can't be made twice. Ledger entries hold amounts and references, not personal details.

When you spend at duty free

The code you show at the till is single-use and renews every 60 seconds. The shop sees the amount it charges to your fund, not who you are. We share with partner shops only what is needed to complete and reconcile the sale.

Who we share with

We don't sell your data and we don't use it for advertising. We use [hosting provider] to run our servers in [region], and we share information with tax authorities or auditors only where the law requires it.

How long we keep it

Receipt details are kept for as long as the tax on them can be spent and for [retention period] afterwards, for audit and tax purposes. Photos follow the setting you chose.

Deleting your data

Go to Settings → Delete my data in the app. This deletes your receipt photos and personal data straight away. Any balance left in your funds is forfeited; the ledger keeps a record of that, without personal details.

Your rights

Under the GDPR you can ask to see, correct, export or delete your data, and object to how it is used. Because there is no account, include your device ID (shown in the app's Settings) when you write to money@rebateful.net. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

This website

This website uses no cookies and no tracking. Our host keeps standard server logs for security.

Changes

If this policy changes, we update the date at the top. Significant changes are also announced in the app.