Privacy Policy

You Get A Point ("the app," "we," "us") is a private web application for friends to award each other points. This policy explains what personal data we collect and how we use it.

1. Information We Collect

• Account information — your name and email address, provided when you register or sign in via Google.
• Phone number — optionally provided in your preferences if you choose to receive SMS notifications. Stored in E.164 format (e.g. +15551234567).
• Notification preferences — whether you have opted in to SMS or email notifications.
• Points data — points given and received, including the reason text and timestamp.

2. How We Use Your Information

• To authenticate you and maintain your session.
• To display your points history and leaderboard standing.
• To send you notifications when you receive a point, if you have opted in. Notification frequency depends on how often your friends award you points — typically a few messages per month.

3. SMS Notifications

If you provide your phone number and enable SMS notifications in your preferences, you consent to receive text message notifications from us via Amazon Web Services Simple Notification Service (AWS SNS) when another user awards you a point.

• Message frequency: Varies based on how often you receive points. Typically a few messages per month.
• Message and data rates may apply based on your mobile carrier plan.
• To opt out: Reply STOP to any message, or remove your phone number from your preferences page at any time. We will honor your request immediately.
• For help: Reply HELP or contact us at vann@combiconsulting.com.

Your phone number is transmitted to AWS SNS solely for the purpose of delivering notifications. We do not sell or share your phone number with any third party for marketing purposes.

4. Email Notifications

If you enable email notifications in your preferences, we will send notification emails to the address associated with your account when you receive a point. You can disable this at any time in your preferences.

5. Data Sharing

We do not sell your personal data. We share data only with the following service providers as necessary to operate the app:

• Turso — database hosting (stores your account, preferences, and points data).
• AWS SNS — SMS delivery (receives your phone number only when sending a notification).
• Google OAuth — authentication (we receive your name and email from Google upon sign-in).
• Fly.io — application hosting.

6. Data Retention

Your account data and points history are retained for as long as your account exists. You may request deletion of your account and associated data by contacting us at vann@combiconsulting.com. Phone numbers are deleted from our database if you remove them from your preferences or request account deletion.

7. Security

Data is stored in an encrypted database hosted by Turso. Sessions are managed using industry-standard HMAC-signed cookies. We take reasonable precautions to protect your information, though no system is perfectly secure.

8. Contact

Questions about this policy? Email us at vann@combiconsulting.com.