The short version. We collect the least we can. No signup to see a coin or collect one. You create an account first, with Apple, Google, or an email and password. While the app is open it keeps your location ready so a tap is instant; only the location at the moment you tap is sent to us, and nothing is read in the background. To cash out you give us the email on your PayPal account, because we have to send the money somewhere. We do not sell your data and brands never receive your identity.
1. Who we are
This policy is issued by Piggie LLC, a Texas limited liability company, for the Piggie app, the piggietap.com website, and the Piggie brand portal. Contact for anything in this policy: the contact form (choose "App or coin support").
2. What we collect from shoppers
- Your account. Piggie starts with an account, so your coins and cash belong to you and not to one phone. You choose how: Sign in with Apple (Apple gives us an identifier, and an email only if you choose to share it), Sign in with Google (Google gives us an identifier and your verified email address), or an email address and a password. Passwords are stored only as a scrypt hash, which cannot be turned back into your password.
- A device identifier. Each phone also gets a random id, which is how your coins are tracked before and between sign-ins.
- Location while the app is open. So a tap never waits on GPS, the app keeps a location fix ready while it is open on your screen. Only the location at the moment you tap a sticker is sent to Piggie, to tell whether you are in the store (see the offer) or outside it (collect the coin). Nothing is read in the background and we keep no movement history. Each tap location is kept in our fraud log, rounded to about 11 meters.
- Tap and coin events. Which sticker was tapped, when, the offer shown, and the coin collected. This is the record of your balance.
- Cash-out details, only when you cash out. The email on your PayPal account, where your cash is sent, and your confirmation that you are 18 or older. Until you cash out, we hold no contact information for you unless you shared an email through Sign in with Apple.
- Receipt images, only if we ask. After a number of collects we may ask for a receipt to confirm a purchase. We read the retailer, date, and product line, and delete the image once checked.
- Basic technical data. App version and device type. Apple may share crash reports with us if you allow it in your iPhone settings.
3. What we collect from brands
Brand users of the portal give us business contact details, company information needed to set up and bill a campaign (including tax and payment details), and campaign settings. This is business information handled under the brand's signed agreement.
4. What we use it for
- Operate your balance: present offers, verify collects, hold value, and pay it out.
- Prevent fraud: confirm each coin is collected once, by a real purchase, away from the shelf.
- Send payouts by PayPal. Your PayPal email goes to PayPal for that purpose only.
- Keep you signed in, and send you a 6-digit code by email if you ask to reset your password.
- Report campaign results to the brand in aggregate: taps, collects, stores, and times. Brands do not receive your name, contact details, device ID, or precise location.
- Send brand messages inside the app only if you turn that on for a brand. Piggie delivers them; the brand never sees your email or phone number.
- Meet legal obligations, respond to lawful requests, and enforce our Terms.
4b. The website
piggietap.com runs its own visit measurement, built by us and hosted with the site: no Google Analytics, no advertising pixels, no cookies. We record which pages are viewed, what is clicked and where on the page, how far a page is scrolled, and where the screen sits during the visit. That lets us replay a visit as an outline of the page, to see where people get stuck. We never record what you type into a field. We also record the referring site, the device type, and the city and network a visit comes from. To name the network we send your IP address to our IP lookup provider, ipinfo.io; we do not store the IP address itself. Visitor and session identifiers live in your browser storage only. Browsers that send Do Not Track or Global Privacy Control are not measured at all. When you use the contact form, what you type is kept so we can reply and is not shared.
5. What we never do
- We do not sell personal data, and we do not share it for advertising.
- We do not track you across other apps or websites.
- We do not run background location tracking.
- We do not show third-party advertising.
6. Who we share with
Service providers who run parts of Piggie for us, each receiving only what it needs for that job and barred from using it for anything else: Vercel (hosting, storage and our database), Apple (Sign in with Apple), Google (Sign in with Google), PayPal (payouts), Google Workspace (email), ipinfo.io (network lookups for website visits), and, for brands only, Clerk (brand portal sign-in) and Stripe (brand billing). We share with authorities where the law requires it. We may share in connection with a merger or sale of Piggie, under the same protections.
7. Retention and deletion
You can delete your data from the app at any time: Profile, then Delete my data. That removes your coins, your profile and your account, including the password if you set one. We keep records of past cash-outs, because they are financial records, and our fraud log keeps each tap under a one-way code instead of your ID. Tap history and balance records are otherwise kept while you use Piggie and for the period needed to resolve disputes. You can also ask for deletion through the contact form (choose "App or coin support").
8. Your choices
- Location permission is controlled in your phone settings. Without it, coins cannot be collected.
- Brand messages are off by default and switched per brand inside the app.
- You can ask what we hold about you, ask for a correction, or ask for deletion, through the contact form (choose "App or coin support"). We answer within 30 days.
9. Children
Piggie is not directed at children under 13 and we do not knowingly collect their information. Cash-outs require users to be 18 or older. If you believe a child has used Piggie, contact us and we will delete the associated data.
10. Security
Data is encrypted in transit and at rest with our hosting providers, access is limited to the people who need it, and payout details are handled by payment providers built for that purpose. No system is perfect; if a breach affects you we will tell you as the law requires.
11. Changes
We will post any update here with a new date. Material changes will also be shown in the app.