Privacy Policy: MAV Rewards

This Privacy Policy explains how Mini Mavericks ("MAV Rewards," "we," "us," or "our") collects, uses, and shares information when you use the MAV Rewards website (https://mavrewards.ca), mobile app, and merchant portal (together, the "Service"), as a Customer or as a Merchant.

1. Information we collect

Account information. When you create an account, we collect your email address and, if you sign in with Google or Apple, basic profile information they share with us (like your name). Merchants also provide a business name and contact email.

Profile information. You can optionally tell us your age range and interests to earn bonus Medals; we only collect these if you choose to provide them.

Transaction & activity data. We keep a record of your Medal balance, Medals issued to you or by you, redemptions, and related activity history, so both Customers and Merchants can see an accurate record of what happened.

Device & usage data. We collect basic technical information (like device type and app version) and, if you enable push notifications, a device token used to deliver them.

Digital wallet passes. If you add your loyalty card to Apple Wallet or Google Wallet, the pass contains your Medal balance and loyalty QR code so it can be used at checkout.

Merchant billing information.If you subscribe to a merchant plan, payment is processed by Stripe. We receive confirmation of your subscription and billing status, but we don't receive or store your full card number.

2. How we use this information

To operate the Medal-earning and redemption system itself.
To authenticate you and secure your account.
To show Customers relevant rewards and show Merchants their own issuance and redemption activity.
To send transactional notifications you've enabled (like redemption confirmations).
To process merchant subscription billing.
To detect and prevent fraud and abuse of the Service.
To respond to support requests and improve the Service.

3. Third-party services we use

We rely on a small number of service providers to run MAV Rewards, each of which processes information on our behalf under their own security and privacy commitments:

Convex: hosts our application backend and database.
Stripe: processes merchant subscription payments.
OneSignal: delivers push notifications, if you've enabled them.
Google and Apple: provide optional sign-in, and Wallet pass storage on your device.

We don't sell your personal information to third parties.

4. How we share information

Customer account identifiers and redemption details are visible to the Merchant a Customer is transacting with, only as needed to issue Medals or fulfill a redemption. We may also share information if required by law, to protect the rights and safety of MAV Rewards or our users, or in connection with a merger, acquisition, or sale of assets, in which case we'll let affected users know.

5. Data retention

We keep account and activity information for as long as your account is active, and for a reasonable period afterward to resolve disputes, enforce these policies, and comply with legal obligations (including tax and accounting requirements for merchant billing records). You can request deletion of your account as described below.

6. Your rights & choices

Depending on where you live, you may have rights to access, correct, or request deletion of your personal information, consistent with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and similar provincial laws. You can update most profile information directly in the app, or contact us at team@mavrewards.cato request access to, correction of, or deletion of your information. We'll respond within a reasonable time and may need to verify your identity first.

7. Children's privacy

MAV Rewards is not directed at children, and we don't knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we'll delete it.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

9. International data transfers

Our service providers may process and store information outside of Canada, including in the United States. Where this happens, we take steps to ensure your information continues to receive an appropriate level of protection.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you through the Service.

11. Contact

Questions about this policy or your information? Reach us at team@mavrewards.ca or through our contact page.