Privacy Policy

This Privacy Policy explains how Lumon LLC (“Lumon LLC,” “we,” “us,” or “our”), the operator of ChompIt, collects, uses, and shares personal data when you use the ChompIt app, the chompit.app website, and related services (the “Service”). By using the Service, you agree to this Policy.

• Account information — such as your name, email address, and password or login identifiers.
• Phone number — used for sign-in, verification, and account notifications.
• Receipt images and details — when you scan or photograph a receipt, we collect the receipt image and information drawn from it (such as the business, date, time, and total) to verify the purchase, prevent fraud, and calculate the cash back you earn.
• Payout information — to pay your cash back, you connect a payout account through our third-party payments processor. That processor collects the information it needs to pay you (which may include identity and bank-account details) and shares limited status information with us (such as whether your payout account is connected and whether a payout succeeded). ChompIt does not collect or store your full bank credentials itself, and does not process the payment between you and the business.
• Cash-back and purchase data — your runs, the receipts you scan, the cash back you earn, and your cash-out history, used to calculate and pay rewards and to prevent fraud.
• Location data — location is optional. With your permission, approximate or precise location may be used to show nearby businesses and to help match a receipt to the place you visited. Cash back never requires location access, and you can control it in your device settings.
• Usage data — how you interact with the Service, including businesses viewed, receipts scanned, and features used.
• Device and technical data — such as device type, operating system, app version, IP address, and identifiers.

• to provide, operate, and improve the Service;
• to verify purchases from your scanned receipts and to calculate and pay your cash back to your linked bank account;
• to show you nearby participating businesses and, where you allow it, to help match a receipt to the place you visited;
• to verify identity, prevent fraud, and comply with legal obligations;
• to communicate with you about your account, cash back, payouts, and updates; and
• to analyze usage and develop new features.

We do not sell your personal data. We share it only as needed to run the Service:

• Businesses — participating businesses receive information needed to reconcile verified purchases at their locations and any programs they fund, which may include receipt details for purchases at their locations.
• Creators — creators receive only aggregate performance data (such as the number of verified visits and resulting rewards); they do not receive your identity or your receipt images.
• Payments processor — our third-party payments processor receives the information needed to connect your payout account and pay your cash back to your bank.
• Service providers — vendors that host infrastructure, provide analytics, support, or communications on our behalf, under appropriate confidentiality obligations.
• Legal and safety — where required by law, to enforce our terms, or to protect the rights, safety, and security of users and the Service.

We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter as required to comply with legal, tax, accounting, and fraud-prevention obligations (which may apply to receipt and visit-verification records for extended periods). When data is no longer needed, we delete or de-identify it.

We use administrative, technical, and physical safeguards designed to protect personal data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please keep your account credentials confidential.

Scanning receipts and sharing location are your choice. You decide whether to scan a receipt to verify a visit, and you control location access in your device settings — you can turn it off at any time, though some features (like confirming you’re at the business) may not work without it. You can delete your account, or ask us to delete your receipt images, at any time in the app or by contacting us at support@chompit.app.

Depending on where you live, you may also have the right to access, correct, delete, or obtain a copy of your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@chompit.app. We will respond consistent with applicable law. Some data may be retained where we have a legal obligation or legitimate need to keep it.

If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, and to not be discriminated against for exercising your rights. We do not sell or “share” personal information for cross-context behavioral advertising. To make a request, contact us at support@chompit.app.

The Service is intended only for adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has provided us personal data, contact us and we will take appropriate steps to delete it.

The Service is operated from the United States and is intended for US users. If you access it from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by other reasonable means and update the “Last updated” date above.

Questions about this Policy or your personal data? Contact us at support@chompit.app.

Lumon LLC, United States