Privacy Policy

This Privacy Policy explains how Lumon LLC (“Lumon LLC,” “we,” “us,” or “our”), the operator of MunchCard, collects, uses, and shares personal data when you use the MunchCard app, the munchcard.app website, and related services (the “Service”). By using the Service, you agree to this Policy.

• Account information — such as your name, email address, and password or login identifiers.
• Phone number — used for sign-in, verification, and account notifications.
• Receipt images and details — when you scan or photograph a receipt to confirm a visit, we collect the receipt image and information drawn from it (such as the business, date, time, and total) to verify the visit and calculate creator commissions. We do not collect or store your full payment card number or banking credentials; MunchCard does not process your payment.
• Munch and visit data — the Munches you claim and the visits verified from your scanned receipts, used to apply creator commissions and prevent fraud.
• Location data — with your permission, approximate or precise location may be used to show nearby deals and to help confirm that you are at the business when you redeem a Munch. You can control location access in your device settings.
• Usage data — how you interact with the Service, including Munches claimed, reels viewed, and features used.
• Device and technical data — such as device type, operating system, app version, IP address, and identifiers.

• to provide, operate, and improve the Service;
• to verify visits from your scanned receipts and calculate and pay creator commissions;
• to show you nearby deals and confirm that you are at the business when you redeem a Munch;
• to verify identity, prevent fraud, and comply with legal obligations;
• to communicate with you about your account, Munches, and updates; and
• to analyze usage and develop new features.

We do not sell your personal data. We share it only as needed to run the Service:

• Businesses — participating businesses receive information needed to honor a claimed Munch and reconcile verified visits, which may include receipt details for visits at their locations.
• Creators — creators receive only aggregate performance data (such as the number of verified visits and resulting commissions); they do not receive your identity or your receipt images.
• Service providers — vendors that host infrastructure, provide analytics, support, or communications on our behalf, under appropriate confidentiality obligations.
• Legal and safety — where required by law, to enforce our terms, or to protect the rights, safety, and security of users and the Service.

We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter as required to comply with legal, tax, accounting, and fraud-prevention obligations (which may apply to receipt and visit-verification records for extended periods). When data is no longer needed, we delete or de-identify it.

We use administrative, technical, and physical safeguards designed to protect personal data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please keep your account credentials confidential.

Scanning receipts and sharing location are your choice. You decide whether to scan a receipt to verify a visit, and you control location access in your device settings — you can turn it off at any time, though some features (like confirming you’re at the business) may not work without it. You can delete your account, or ask us to delete your receipt images, at any time in the app or by contacting us at support@munchcard.app.

Depending on where you live, you may also have the right to access, correct, delete, or obtain a copy of your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@munchcard.app. We will respond consistent with applicable law. Some data may be retained where we have a legal obligation or legitimate need to keep it.

If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, and to not be discriminated against for exercising your rights. We do not sell or “share” personal information for cross-context behavioral advertising. To make a request, contact us at support@munchcard.app.

The Service is intended only for adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has provided us personal data, contact us and we will take appropriate steps to delete it.

The Service is operated from the United States and is intended for US users. If you access it from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by other reasonable means and update the “Last updated” date above.

Questions about this Policy or your personal data? Contact us at support@munchcard.app.

Lumon LLC, United States