Privacy Policy

1.1 Information You Provide

• Account information (name, email address, phone number)
• Profile information and preferences
• Communications with us

1.2 Information We Collect Automatically

• Device information (device type, operating system, unique device identifiers)
• Location data (GPS coordinates, approximate location)
• Usage data (app interactions, features used, time spent)
• Log data (IP address, browser type, access times)
• Referral and attribution data (when you use a referral link or install via a campaign, we and our attribution partner may collect device and campaign-related data as described in Section 4.2).

3.1 What Location Data We Collect

We collect your device's location in the form of GPS coordinates and approximate location (e.g. when you view the map, when you attempt to claim a drop, or when you use other location-based features in the app).

3.2 When We Collect Location Data

We collect location data only while you are actively using the app (when the app is in the foreground or in use). We do not collect or track your location in the background unless you have explicitly granted background location permission for a specific feature, and we will clearly disclose that at the time we request it.

3.3 Why We Collect Location Data

We use your location data to:

• Show nearby drops and rewards on the map
• Verify that you are at a drop's location when you attempt to claim (redemption verification)
• Create aggregated, anonymized heat maps and analytics for our business partners (e.g. to understand foot traffic or popular areas)—these do not identify you individually
• Improve drop placement and user experience

3.4 Who We Share Location Data With

We do not share your individual location data with partners or third parties. We may share only aggregated, de-identified location data (e.g. heat maps or regional statistics that cannot be used to identify you) with business partners for analytics and improving services. No individual user location is shared.

You can control location permissions through your device settings at any time.

4.1 Supabase

We use Supabase for database services, authentication, and backend infrastructure. Supabase may collect device information and usage data as described in their privacy policy.

4.2 AppsFlyer (Referral and Attribution)

We use AppsFlyer to operate our referral program, measure campaign effectiveness, and attribute app installs and in-app events (e.g., signups, referrals). In connection with this service, AppsFlyer may collect or receive: device identifiers (e.g., IDFA, Android ID, advertising IDs), IP address, device type and model, operating system, timestamps, and engagement data (e.g., referral link clicks, installs, in-app events). This data is used to attribute referrals, prevent fraud, and support analytics. AppsFlyer acts as our service provider under our instructions. For more information, see AppsFlyer's Services Privacy Policy. By participating in referrals or using links that include attribution parameters, you acknowledge this data collection and processing.

6.1 GDPR Rights (EU Users)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to data portability
• Right to object to processing

6.2 CCPA Rights (California Users)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination

6.3 Consent and Withdrawal

Where we rely on your consent to process personal information (e.g., for marketing or certain analytics), you may withdraw that consent at any time by contacting us or adjusting your account settings. Withdrawal does not affect the lawfulness of processing before withdrawal. Some processing may continue where we have another legal basis (e.g., contract performance, legal obligation).

6.4 How to Exercise Your Rights

To exercise access, deletion, portability, or other rights, contact us at support@cedarlume.com or use our Account Deletion page. We will respond within the timeframes required by applicable law. You may have the right to lodge a complaint with a supervisory authority in your jurisdiction.

7.1 Account Deletion

You may request deletion of your account at any time through the account settings in the trouvé mobile app, or via our Account Deletion page. Once you submit an account deletion request:

Cancellation Period: You have up to 10 days from the date of your deletion request to cancel it by emailing support@cedarlume.com. After this 10-day period, the deletion process cannot be cancelled.

Data Deletion: Upon completion of the account deletion process, we will permanently delete all personal data associated with your account, including but not limited to:

• Account information (name, email address, phone number)
• Profile information and preferences
• Usage data and app interactions
• Location data

Retained Data: We will retain only anonymous, aggregated data that cannot be used to identify you, as required for legal compliance, fraud prevention, and business analytics purposes. This anonymous data will be maintained in accordance with applicable legal requirements.

8.1 Neutral Age Verification

Where required by applicable law (including laws governing age-restricted advertising and services), we use a neutral age verification mechanism. This means we may require you to enter your date of birth before we collect your personal information or before granting access to age-restricted content or features. Our age verification is designed to confirm eligibility only; we do not incentivize or encourage users to misrepresent their age. Providing false information may result in account termination and forfeiture of rewards.

8.2 Children Under 13 (COPPA)

We do not knowingly collect personal information from children under 13. Our service is not directed to children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at support@cedarlume.com and we will delete such information promptly.

8.3 Users Under 18

If we learn that we have collected personal information from a user under 18, we will take steps to delete that information. You may contact us at support@cedarlume.com to report underage use or request removal.