Not yet final. Two details are still to be filled in before this page goes public, written [like this] below: the operating entity and a mailing address. Governing law is written as British Columbia, Canada, which is an assumption to confirm. This box is removed at the same time.
Privacy policy
CoupleSave is operated by [OPERATING ENTITY], [MAILING ADDRESS], Canada. We are the organisation responsible for the personal information described here. Our privacy contact is hello@couplesave.com, subject line “Privacy”.
We wrote this to be read, so it says what we actually hold, who else sees it, and how to make us delete it. Where Canadian federal law (PIPEDA), Quebec’s Law 25 or California’s CCPA and CPRA give you a specific right, it is named in the section that covers it.
1. Two stages, and today we are at the first one
The app is in development. Right now, the only personal information we collect is the alpha list on this website. Section 2 covers that. Section 3 describes what the app will collect when it launches, so that you can decide today whether you want to be on the list at all. We will update this page, and tell everyone on the list, before the app collects anything.
2. What this website collects
When you join the alpha list we store:
- the email address you type;
- the country you pick, because the app will launch in Canada before the United States;
- our record that you consented: the wording you agreed to, the date and time, your IP address and your browser’s user-agent string. Canada’s anti-spam law (CASL) requires us to be able to prove consent, and this is how.
That list lives in a single database file on a server we operate ourselves. It is not in a mailing-list service, a customer-relationship tool, or any other third-party product.
Our web server keeps ordinary access logs (IP address, page requested, time, user-agent) for operational and security reasons, and deletes them on a rolling basis.
This website sets no cookies. It runs no advertising scripts, no third-party analytics, no social-media pixels, no session recording and no fingerprinting. There are no third-party requests on any page: the fonts are the ones already on your device, and the stylesheet, script and images come from this domain.
This website contains no affiliate links today. If that ever changes, the rewards and affiliate disclosure page is updated first.
3. What the app will collect when it launches
Each partner signs in with their own identity, and the two accounts are linked into one couple. The village, the ledger and the goal are shared. The account is personal.
- Account: your name or chosen display name, email address, the sign-in method you used (Apple, Google or an emailed link), your country, and which couple you belong to. We do not store passwords.
- What you log: merchant, amount, date and category for each entry, plus the goal and the shared ledger that these roll up into.
- Receipt images, if you use them: the photo is read on your device, and you confirm or correct what it found. The image and the extracted lines are then stored for your household.
- Earning records: which offer was completed, by which partner, the amount credited, and the partner who paid it.
- Device and app data: a push notification token if you allow notifications, app version, device type, and crash or error diagnostics.
- Card-linked cashback, only if you turn it on: you enrol a payment card with our card-linking partner. We receive notice of a qualifying purchase at a partner merchant. We never see or store your full card number.
- Round-ups, only if you turn them on: you connect an account through a bank-connection provider (Flinks in Canada, Plaid in the United States). You enter your banking credentials with that provider, not with us, and we never see or store them.
- Payouts: the details needed to pay you, handled by a licensed payout partner. CoupleSave never holds your money. In the United States a payout partner may be required to collect tax identification once annual payouts to one person reach the reporting threshold set by the IRS; the partner, not us, owns that rule.
What your partner can see. This matters more than most policies admit: the ledger, the goal and the village are shared, so entries you log and rewards you earn are visible to the other partner by design. Do not log something you do not want them to see.
4. Why we collect it
To run the shared goal and the village; to show you offers and credit what you earn; to pay you out; to keep notifications and streaks working; to detect fraud and offer abuse; to answer your messages; and to meet our legal and tax obligations. Under PIPEDA we rely on your consent, which each partner gives for their own account, and which you can withdraw. Where Quebec’s Law 25 applies, consent for anything outside the obvious operation of the service is asked for separately and in clear terms.
We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are used in the CCPA and CPRA. We do not run ads.
5. Who else sees it
Only the parties below, only what each one needs:
- Reward and affiliate networks (Impact, CJ Affiliate, and survey or offer walls such as Bitlabs) see that a click or a completion happened, through a click identifier that is specific to that offer. Where a network needs an identifier for you, we send a pseudonymous one rather than your email address wherever the network supports it.
- The merchant or brand behind an offer receives what that offer requires, which you see before you start it. For a receipt reward, that is the receipt data for the receipt you submitted, and nothing else.
- Receipt-reward partners receive only the receipts you choose to submit for a reward.
- Our service providers: hosting, error reporting, push notification delivery, email delivery, the card-linking provider, the bank-connection provider and the payout provider. Each is bound to use the data only to provide that service.
- Authorities, when the law requires it, and only to the extent it requires.
We do not give a reward partner your other spending, your goal, your partner’s details, or anything from a receipt you did not submit to them.
6. Where it is processed
Our own servers are operated by us in Canada. Several of the partners above operate in the United States or elsewhere, so some of your information will be processed outside Canada, and outside Quebec, where it is subject to the laws of that country, including lawful access by courts and authorities there. PIPEDA and Law 25 require us to tell you this, and to use comparable protections by contract. If you are in Quebec, you may ask us for the privacy impact assessment summary for a transfer that concerns you.
7. How long we keep it
- Alpha list: until the app launches and we have written to you, until you ask us to delete it, or after 24 months with no contact, whichever comes first.
- Receipt images: 90 days, then deleted automatically, unless you pin a receipt to keep it.
- Entries, goal and earning records: while the account is open. After you close it, we delete or anonymise them, except what we must keep for tax and financial records.
- Consent and payout records: as long as the relevant law requires us to be able to prove them.
8. How it is protected
Traffic to this site and to the app is encrypted in transit. Access to the alpha list and to production data is limited to the people who operate the service, over a private network. We do not store card numbers or banking credentials, which removes the most sensitive category entirely. If a breach creates a real risk of significant harm, we will notify affected people and the Office of the Privacy Commissioner of Canada as PIPEDA requires, the Commission d’accès à l’information for Quebec residents, and any other regulator the law names.
9. Your rights, and how to use them
Write to hello@couplesave.com with “Privacy” in the subject line. One email covers every right below. We answer within 30 days, which is the PIPEDA and Law 25 deadline, and we do not charge for it.
- Everyone: ask what we hold about you, get a copy, have it corrected, withdraw your consent, unsubscribe, and ask us to delete your information.
- Quebec (Law 25): in addition, receive your information in a structured, commonly used technical format (portability), ask that information about you stop being disseminated, and be told if a decision about you was made only by automated processing, which the app does not currently do. Our privacy officer is reachable at the same address. Service in French is available on request, and the app’s French interface ships before we offer it in Quebec.
- California (CCPA and CPRA): in addition, know the categories and specific pieces we collected, the purposes, and the categories of recipients; delete; correct; and limit the use of sensitive personal information. We do not sell or share your information, so there is no “Do Not Sell or Share” link to click. We will not discriminate against you for exercising a right. You may use an authorised agent.
If you are not satisfied with our answer you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), to the Commission d’accès à l’information du Québec if you live in Quebec, or to your state attorney general in the United States.
10. Children
CoupleSave is for adults. The service is not directed at anyone under 18 and we do not knowingly collect information from them. If you believe a minor gave us information, write to us and we will delete it.
11. Changes
When this policy changes we update the date at the top. If a change affects what we collect or who sees it, we will tell you in the app or by email before it takes effect, and ask for consent again where the law requires it.