ReceiptPal Privacy Notice

EFFECTIVE DATE: March 20, 2024

ReceiptPal (“ReceiptPal,” “Company,” “we” or “us”) is provided to you by Circana. Circana has been conducting market research for over 50 years. Circana’s clients encompass over 2,000 businesses, including many Fortune 500 companies. ReceiptPal is a part of Circana’s consumer receipt panel. In exchange for consumer participation, consumers have the opportunity to earn points for rewards as well as have their receipt information digitally organized to allow for easy look-up and analysis. The ReceiptPal mobile application (the “App”) is a mobile app that the Company uses to conduct market research.

In addition to being a committed leader in market research, we are committed to protecting the privacy and security of your information. This Company Privacy Policy (“Policy”) describes how the Company collects, uses, discloses and otherwise processes the personal information described in this Policy, as well as the rights and choices individuals have regarding such personal information.

For information about the privacy choices you have regarding your personal information, review Section 7. Your Privacy Choices below, as well as Section 12. Additional Privacy Information for Certain Jurisdictions , which includes additional information about privacy rights for residents of certain states. If you are a resident of California, please also refer to Section 12.B Additional Privacy Information for California Residents below for information about the categories of personal information we collect and your rights under California privacy laws.

Your use of our Services (defined below), and any dispute over privacy, is subject to this Policy and our Terms of Service, available at https://www.receiptpalapp.com/terms#OverallTerms.

1. Scope

Except as otherwise noted below, this Policy applies to the personal information that ReceiptPal processes related to:

Not In Scope. This Policy does not apply to the personal information that we collect and process outside of the Services, about ReceiptPal employees and personnel, or about job applicants and candidates. Additionally, this Policy does not apply to vendors and partners of ReceiptPal; however, vendors and partners can view information regarding the collection and use of their personal information in Circana’s privacy policy here.

Additional Notices. In some cases, additional or supplemental privacy notices (each an “additional notice”) may be provided and will apply to certain personal information collected and processed by us. For example, we may provide an additional notice in order to provide more specific information about how we use and disclose personal information if you choose to take advantage of a particular partner promotion. The additional notice will control to the extent there is a conflict with this Policy, with respect to your personal information that is subject to that notice.

2. Personal Information Collected

As further described below, we collect personal information directly from individuals, from third parties, and automatically when such data relates to the use of our Services or other interactions with us.

Personal Information Collected Directly. The personal information we collect from you depends upon how you use our Services or otherwise interact or engage with us, but generally includes:

Personal Information from Third Parties. We may collect personal information about you from third party sources, such as public databases, joint marketing partners, social media platforms or other third parties.

Personal Information Collected Automatically. We automatically collect personal information related to your use of our Services and interactions with us and others, including information we collect automatically (e.g., using cookies and pixel tags), as well as information we derive about you and your use of the Services. Such information includes:

3. Purposes of Use and Processing

Generally, we collect, use, disclose and otherwise process the personal information we collect for the following purposes:

4. Disclosures of Personal Information

We may disclose the personal information that we collect for the purposes described above, in order to provide our Services to you, to respond to and fulfil your orders and requests, as otherwise directed or consented to by you, and as follows:

5. Aggregate Data and Non-identifiable Data

We may also receive, use, and disclose aggregate and other non-identifiable data related to our business and the Services for quality control, analytics, research, development, and other purposes. Some of this information may be considered “deidentified” under U.S. privacy laws (i.e., data that is no longer linked or reasonably linkable to an identified or identifiable consumer). Where we rely on data that has been “deidentified” as defined by U.S. privacy laws, we will maintain and use such information in deidentified form and will not attempt to reidentify such information, except in order to determine whether our deidentification processes are reasonable and adequate or as otherwise set forth by applicable law.

6. Cookies and Analytics

We and our third-party service providers use cookies, pixels, local storage objects, log files, APIs, and other mechanisms to automatically collect information browsing, activity, device and similar information within our Services. We use this information to, for example, analyze and understand how users access, use our Services, as well to identify and resolve bugs and errors in our Services and to assess secure, protect, optimize and improve the performance of our Services. When you use the App to connect to a third party online or email account, such third party will likely employ cookies on your computer or device to assist with the signing into such third-party account. From time to time, we may redeploy these third party cookies on our App for a better user experience by maintaining account connectivity to such third-party online or email account. For example, this will occur if you purchase a new phone and redownload the App. You have certain choices about our use of cookies and tracking within the Services, as described in this section. For more information on the types of personal information we collect via cookies and similar mechanisms, please see Section 2. Personal Information Collected .

Cookies. Cookies are alphanumeric identifiers that we transfer to your device’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track activity and usage data within Service.

Pixel tags. Pixel tags (sometime called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users, help us manage content and compile usage statistics. We may also use these in HTML e-mails we send, to help us track e-mail response rates, identify when our e-mails are viewed, and track whether our e-mails are forwarded.

Local storage objects. Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order enable faster loading of pages and content when you return to our websites. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.

Third-Party Analytics and Tools. We may use third party tools, such as Firebase, which are operated by third party companies. These third-party analytics companies may collect usage data (using cookies, pixels and similar tools) about our Services in order to provide us with reports and metrics that help us to evaluate usage of our Services and improve performance and user experiences. You can also download the Google Analytics Opt-out Browser Add-on to prevent their data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Custom Lists and Matching. We may share or make available certain participant list information (such as your name, email address and other contact information) with third parties for analytical and research purposes.

Managing Your Preferences. We make available ways for you to manage your preferences regarding cookies within our Services. These are browser and device specific, which means that you need to set the preference for each browser and device you use to access our Services; in addition, if you delete or block cookies, you may need to reapply these preferences.

7. Your Privacy Choices

We make available a number of ways that you can manage your privacy choices and submit privacy requests related to your personal information. These include:

Residents of certain jurisdictions have additional rights, as set forth below, in Section 12. Additional Privacy Information for Certain Jurisdictions . Further, if you are a California resident, please review Section 12.B Additional Privacy Information for California Residents below, for specific information about your California Privacy Rights and how to exercise them.

For more information about our privacy practices and your privacy choices, you may contact us as set forth in the ‘Contact Us’ section below.

8. Children/Minors

Our Services are not designed for children, and we do not knowingly collect personal information from children under 16. If we discover that a child under 16 has provided us with personal information in violation of applicable law, we will delete such information from our systems. If you’re a parent and you believe we have collected your child’s information in violation of applicable law, please contact us as set forth below, in Section 11. Contact Us.

9. Security

We establish, implement, and maintain administrative, technical, and physical data security practices that protect the personal information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

10. Changes to this Policy

This Policy is current as of the Effective Date set forth above. We may change this Policy from time to time, so please be sure to check back periodically. If any material changes are made to this Policy, we will notify you through our website and/or through the App.

11. Contact Us

If you have questions about this Policy or our privacy practices, you may contact us at support@receiptpalapp.com.

12. Additional Privacy Information for Certain Jurisdictions

Residents of certain states have additional rights under applicable privacy laws, as described in this section.

Please review Subsection A. below for additional information about rights residents of certain U.S. states, including Colorado, Connecticut, Utah and Virginia, may have under applicable state privacy laws.

If you are a resident of California, please review Subsection B. below for additional information about the categories of personal information we collect about you and your privacy rights under applicable California privacy laws.

A. State Privacy Rights

Residents of certain states, including Colorado, Connecticut, Utah, and Virginia, have additional rights under applicable privacy laws, subject to certain limitations, which may include:

You may submit a request to exercise your privacy rights online using our webform . See Section 7. Your Privacy Choices for additional information about the privacy choices we provide and how to exercise them. We will respond to your request as required under the applicable privacy law(s). If we deny your request, you may appeal our decision by selecting the appropriate request using our webform .

B. Additional Privacy Information for California Residents

This subsection provides California residents with additional information regarding our collection, use and disclosure of their personal information, as well as their privacy rights, under California privacy laws.

In this subsection, we provide additional information to California residents about how we handle their personal information, as required by the California Consumer Privacy Act (“CCPA”). This section does not address or apply to our handling of publicly available information or other personal information that is exempt under the CCPA.

Categories of Personal Information Collected and Disclosed. While our processing of personal information varies based upon our relationship and interactions with you, the table below identifies, generally, the categories of personal information (as defined by the CCPA) that we have collected about California residents, as well as the categories of third parties to whom we may disclose this information for a business or commercial purpose. We may also disclose the personal information we collect from you to law enforcement, regulators, government entities, and others, where required by applicable law.

Categories of Personal Information Collected Categories of Third Party Disclosures
Identifiers Includes direct identifiers, such as name, alias, user ID, username, unique personal identifier; email address, address and other contact information; IP address and other online identifiers • Advisors and agents
  • • Affiliates and subsidiaries
  • • Advertising networks
  • • Data analytics providers
  • • Social networks
  • • Internet service providers, operating systems and platforms
  • • Data partners
  • • Business customers
Customer Records Includes personal information, such as name, account name, user ID, contact information, education and employment information that individuals provide us when they engage in the Services. For example, this may include information collected when an individual registers for an account or voluntarily chooses to take part in our surveys.
  • • Advisors and agents
  • • Affiliates and subsidiaries
  • • Data Partners
Commercial information Includes records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies. For example, this may include demographic information that you choose to provide through our voluntary surveys. • Advisors and agents
  • • Affiliates and subsidiaries
  • • Advertising networks
  • • Data analytics providers
  • • Social networks
  • • Internet service providers, operating systems and platforms
  • • Data partners
  • • Business customers
Internet and electronic network activity information Including, but not limited to, browsing history, clickstream data, search history, and information regarding interactions with an internet website, application, or advertisement, including other usage data related to your use of any of our Services or other online services. 
  • • Advisors and agents
  • • Affiliates and subsidiaries
  • • Advertising networks
  • • Data analytics providers
  • • Social networks
  • • Internet service providers, operating systems and platforms
  • • Data partners
  • • Business customers
Professional information Includes professional and employment-related information.
  • • Advisors and agents
  • • Affiliates and subsidiaries
  • • Advertising networks
  • • Data analytics providers
  • • Social networks
  • • Internet service providers, operating systems and platforms
  • • Data partners
  • • Business customers
Education Information Information about an individual’s educational history.
  • • Advisors and agents
  • • Affiliates and subsidiaries
  • • Advertising networks
  • • Data analytics providers
  • • Social networks
  • • Internet service providers, operating systems and platforms
  • • Data partners
  • • Business customers
Profiles and inferences Including inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior or attitudes. For example, we combine such information with predictive analytics to uncover new consumer insights. • Advisors and agents
  • • Affiliates and subsidiaries
  • • Advertising networks
  • • Data analytics providers
  • • Social networks
  • • Internet service providers, operating systems and platforms
  • • Data partners
  • • Business customers
Protected classifications We collect some information that is considered a protected classification under California/federal law, such as your gender, birth month and year, race and ethnic origin. • Advisors and agents
  • • Affiliates and subsidiaries
  • • Advertising networks
  • • Data analytics providers
  • • Social networks
  • • Internet service providers, operating systems and platforms
  • • Data partners
  • • Business customers
Sensitive personal information We may collect racial or ethnic origin and contents of a consumer’s email, including their purchase information. • Advisors and agents
  • • Affiliates and subsidiaries
  • • Advertising networks
  • • Data analytics providers
  • • Social networks
  • • Internet service providers, operating systems and platforms
  • • Data partners
  • • Business customers

Sales and Sharing of Personal Information. California privacy laws define a “sale” as disclosing or making available to a third-party personal information in exchange for monetary or other valuable consideration, and “sharing” broadly includes disclosing or making available personal information to a third party for purposes of cross-context behavioral advertising. We may “sell” or “share” (as defined by the CCPA) identifiers, customer records, commercial information, professional information, education information, profiles and inferences, protected classifications, and sensitive personal information to/with business customers and data partners. We may also “sell” or “share” internet and electronic network activity information with third-party data analytic, marketing, and advertising partners. We do so in order to provide and improve our Services and to improve and evaluate our advertising campaigns to better reach customers and prospective customers.

We do not sell or share personal information about individuals who we know are under sixteen (16) years old.

Sources of Personal Information. In general, we may collect personal information from the following categories of sources:

Purposes of Collection, Use and Disclosure. As described in more detail in Section 3. Purposes of Use and Processing and Section 4. Disclosures of Personal Information, we collect, use, disclose and otherwise process the above personal information for the following business or commercial purposes and as otherwise directed or consented to by you:

We retain the personal information we collect only as reasonably necessary for the purposes described above or otherwise disclosed to you at the time of collection.

California Residents’ Rights. Under the CCPA, California residents have the following rights (subject to certain limitations):

Submitting CCPA Requests. California residents may exercise their CCPA privacy rights as set forth below.

Request to know/access, correct, delete and limit. California residents may submit CCPA requests to access/know, correct, or delete their personal information and limit the use and disclosure of their sensitive personal information by submitting a request via our webform . Alternatively, California residents may submit a request by emailing us at support@receiptpalapp.com.

We will take steps to verify your request by (i) sending you an email confirmation link which you must click to confirm your request; and (ii) matching the information provided by you with the information we have in our records. You must complete all required fields on our webform (or otherwise provide us with this information via the above toll-free number) to verify your request. We will process your request based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor.

Authorized agents may initiate a request on behalf of another individual by contacting us at support@receiptpalapp.com or using our online webform ; authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.

Requests to Opt Out of Sales/Sharing. California residents may exercise their right to opt out online by submitting an opt out request via our webform or emailing us at support@receiptpalapp.com. We will apply your opt out based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request.

Financial Incentives. If you are a California resident, you have a right to receive this Notice of Financial Incentive, as defined by the CCPA. This Notice is to provide you with information regarding any financial incentive that may be provided to you in exchange for your Personal Information. All terms are used in this Notice as defined in the CCPA or applicable regulations thereunder

Rights Under California Shine the Light Law. Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year for information about any relevant third-party sharing in the prior calendar year. To submit a “Shine the Light” request, email us at support@receiptpalapp.com, and include in your request a current California address and your attestation that you are a California resident.

For more information about our privacy practices, you may contact us as set forth in Section 11. Contact Us, above.