Privacy Policy

Effective date: November 4, 2025

This Privacy Policy explains how Upswell (“Upswell,” “we,” “us,” or “our”) collects, uses, discloses, and protects information about you when you use our apps, websites, and related services that provide restaurant engagement and cash-back rewards (collectively, the “Services”).By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Services.

1. What We Collect

A. Information you provide to us

Account identifiers. Phone number (used as your primary identity), email address, display name.
‍Payout details. Venmo ID and/or PayPal ID to send cash back.
‍Content and profile. Reviews you post, your stated food preferences, and any optional profile info.
‍Social graph. Connections you choose to make or import (e.g., who you follow/are followed by in Upswell).
‍Support communications. Messages you send to cs@upswell.ai or in-app support.

B. Receipts & transaction verification

Receipt submissions. Photos/uploads of receipts and fields we extract using our OCR (e.g., restaurant, date/time, items, subtotal, tax, tip, total).
Card-linked validation via Plaid. If you choose to connect a payment card or account, we use Plaid to confirm that a purchase on your submitted receipt matches a transaction on your linked account. We do not store your bank or card login credentials. Plaid is used only for validation purposes. Your use of Plaid is also subject to Plaid’s own privacy policy.

C. Usage and device information

Engagement data. In-app actions (e.g., screens viewed, taps, voucher/redemption flows) to operate and improve the Services.
Device and log data. Basic device info, app version, IP address, timestamps, and diagnostics to maintain security and reliability.
Cookies/SDKs. We may use cookies, mobile SDKs, and similar technologies for core functionality, analytics, and fraud prevention.

*We do not require precise location to use Upswell unless you explicitly enable it for convenience features; if enabled, you can turn it off at any time in system settings.

2. How We Use Information

We use your information to:

Operate the Services. Create and manage your account (phone number as your primary identifier), process receipts, and deliver cash back to your Venmo or PayPal account.
Verify eligibility and prevent abuse. Validate receipts and transactions (via OCR and Plaid), detect and prevent fraud, spam, or policy violations.
Show social and review features. Display your chosen profile details, reviews, and connections in accordance with the visibility settings you control (see Section 6).
Improve and personalize. Send transactional messages (e.g., reward status), respond to support requests, and—where permitted—send product updates or offers (you can opt out).
Comply with law and enforce terms. Meet legal obligations and enforce our policies.

3. How We Share Information

We do not sell your personal information. We share information only as described below:

Service providers. Cloud hosting, analytics, customer support tools, fraud/OCR tools, payout partners (e.g., PayPal, Venmo), and Plaid for transaction validation—each bound by confidentiality and data-use limits.
Restaurant partners (aggregated). We may share aggregated or de-identified insights (e.g., total redemptions, campaign performance) as well as your profile information (e.g. Phone numbers, email address).
Legal and safety. To comply with applicable law, lawful requests, or to protect the rights, safety, and security of Upswell, our users, or others.
Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and notice.

4. No Sale of Personal Information

We do not “sell” or “share” your Personal Information as those terms are defined by the California Consumer Privacy Act (as amended by the CPRA). We also do not sell your personally identifiable information (PII) in the everyday sense. If this ever changes, we will provide required disclosures and an opportunity to opt out.

5. Your Choices & Controls

Visibility controls. You can choose whether your name/username, reviews, social activity (e.g., who you follow), and food preferences are visible to other users in Upswell.
Access, correction, deletion. You may request access to your data, ask us to correct inaccuracies, or request deletion of your account and associated personal information (subject to legal/operational retention needs).
Communications. You can opt out of non-transactional emails, SMS, and push notifications in the app or via the communication’s unsubscribe settings.
Cookies/SDKs. Manage preferences through your device/browser settings or in-app controls where available.

To exercise any rights, email cs@upswell.ai. We may take steps to verify your identity (typically via your phone number or email).

6. Data Retention

We retain information only as long as necessary to provide the Services and fulfill the purposes described in this Policy, including fraud prevention and legal obligations. For example, we may retain receipt and validation records for a reasonable period to prevent duplicate claims and to meet accounting or regulatory requirements. We also retain de-identified or aggregated data for analytics.

7. Security

We use administrative, technical, and physical safeguards designed to protect your information (e.g., encryption in transit, access controls, and monitoring). No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

8. Children’s Privacy

The Services are not directed to children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact cs@upswell.ai so we can take appropriate action.

9. California Privacy Notice (CCPA/CPRA)

If you are a California resident, you have the right to:

Know/Access the categories and specific pieces of Personal Information we collect, use, and disclose;
Delete Personal Information (subject to exceptions);
Correct inaccurate Personal Information;
Opt out of sale or sharing (not applicable—see Section 4);
Limit use/disclosure of sensitive Personal Information (we use sensitive identifiers—e.g., payout handles and phone number—only to provide the Services).

Categories collected: identifiers (phone, email, payout handles), customer records (contact/payout details), commercial information (receipts), internet/electronic activity (engagement logs), and inferences (food preferences you provide).

Sources: you, your device, receipts/OCR, and Plaid (transaction-match validation).

Business purposes: as described in Sections 2–3.

Financial incentive notice: Our cash-back program is a financial incentive because you may provide receipts and account identifiers to receive rewards. Participation is voluntary and you may withdraw at any time by deleting your account or contacting us. We believe the incentive is reasonably related to the value of your data and participation, estimated using factors like operational costs, average redemption value, and the incremental revenue/insights from verified transactions.

To exercise rights, email cs@upswell.ai. We will not discriminate against you for exercising these rights.

10. International Users

If you use the Services from outside the United States, your information may be processed in the U.S. and other countries that may not provide the same level of data protection as your jurisdiction. Where required, we use appropriate safeguards.

11. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you (e.g., by in-app notice or email) and update the “Effective date” above.

12. Contact Us

Questions or requests? Email cs@upswell.ai. We will respond as soon as reasonably possible.