Privacy Policy

Last updated: March 19, 2026

ThriftyNifty ("we", "our", or "us") operates the ThriftyNifty mobile application and website (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

1. Information We Collect

Account Information

• Name, email address, and password when you create an account
• Phone number, if you choose to set up a rewards card (verified via SMS)
• ZIP code (optional, used for location-based features)

Location Information

• Approximate location from your ZIP code or IP address, used to show nearby stores and item requests
• Precise location (latitude/longitude) only if you explicitly grant browser permission by tapping "My Location" — this is never collected automatically

Transaction & Rewards Data

• If you participate in a store's rewards program, we may store your points balance, transaction history, and estimated point values
• Rewards data is associated with your phone number and may be shared with the participating store

Store Owner Data

• Business name, address, phone number, and website
• Subscription and billing information processed through Stripe
• Product listing images and descriptions

Automatically Collected Data

• IP address and browser user agent (stored in your session for security)
• Session cookies required for the Service to function

2. How We Use Your Information

• To provide and maintain the Service, including matching shoppers with nearby stores
• To verify your phone number for rewards card functionality
• To process store subscriptions and billing
• To send transactional emails (reservation confirmations, store responses, account notifications)
• To send promotional emails from stores you follow (only if you opt in)
• To calculate distances between you and stores for item request matching
• To maintain a reputation score based on reservation activity (pickups, no-shows)
• To prevent fraud and abuse via reCAPTCHA verification

3. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing for store subscriptions. We do not store full credit card numbers; Stripe handles this directly. See Stripe's Privacy Policy.
• Twilio — SMS delivery for phone verification codes. See Twilio's Privacy Policy.
• Mailgun — transactional and promotional email delivery. See Mailgun's Privacy Policy.
• Google Cloud Platform — application hosting and image storage. See Google Cloud's Privacy Notice.
• Google reCAPTCHA — bot prevention during registration. See Google's Privacy Policy.

We do not sell your personal information to any third party.

4. Information Shared with Stores

When you interact with a store on ThriftyNifty, certain information may be shared with that store:

• Your name and email address when you make a reservation
• Your item request details (title, description, price range) when browsing
• Your approximate distance from the store (not your exact location)
• Your phone number and rewards data if you participate in that store's loyalty program

5. Cookies & Sessions

We use a session cookie ("thriftynifty-session") to keep you logged in and maintain your preferences. This cookie is essential for the Service to function and cannot be disabled while using the app. Sessions expire after 2 hours of inactivity.

We do not use advertising cookies, tracking pixels, or third-party analytics tools.

6. Data Retention

• Account data is retained as long as your account is active
• Session data is automatically deleted after 2 hours of inactivity
• Phone verification codes expire after 10 minutes
• You may request deletion of your account and associated data at any time by contacting us

7. Your Rights & Choices

• Access & update — you can view and edit your profile information at any time through your account settings
• Phone number — you can remove your phone number (and rewards barcode) from your profile at any time
• Email preferences — you can control promotional emails per store by updating your follow preferences
• Location — you can decline browser location access; the Service will use your ZIP code instead
• Account deletion — contact us to request complete deletion of your account and data

8. Data Security

We use industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), hashed passwords, and secure cloud infrastructure. However, no method of transmission over the Internet is 100% secure.

9. Children's Privacy

ThriftyNifty is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell your data)
• Not be discriminated against for exercising your privacy rights