Privacy
policy

Texas law requires that notice from any business that may sell sensitive data. Here is what it means at Piggie: if you are 18 or older and turn on Share my coupon activity with brands (section 5.3), a brand may receive a record of which of its stores you tapped in, and when. Store visits are location data, which the law treats as sensitive. We do this only with your prior opt-in consent, and you can turn it off at any time. Without your opt-in we never sell sensitive data.

1. Who we are
2. What we collect
3. How we use it
4. Your location, in detail
5. What brands receive
6. De-identified and aggregated data
7. Selling, sharing and ads
8. Who else receives data
9. Emails and messages
10. Teens and children
11. Your rights and choices
12. How long we keep it
13. Deleting your account
14. Security
15. The website
16. State notices
17. Changes
18. Contact

1. Who we are

This policy is issued by Piggie LLC, a Texas limited liability company based in San Antonio, Texas, for the Piggie app, the piggietap.com website, and the Piggie brand portal (together, the "Service"). Piggie decides how and why your information is used, so in privacy law terms Piggie is the "controller". Once a brand receives your information because you turned on a brand switch in section 5, the brand's own privacy policy also applies to its copy. Questions: privacy@piggietap.com or the contact form.

2. What we collect

What we do not collect: location in the background, unless you choose Allow all the time (section 4); your contacts; your photo library (only a single photo you choose for your profile); health or fitness data; biometric data (your profile photo is never used for face recognition); your phone's advertising identifier; or which other apps you use. Apple or Google may share crash reports with us if you allow it in your phone's settings.

3. How we use it

• Run Piggie: create and keep your account, show offers, verify collects, keep your balance, and keep you signed in on any phone.
• Tell in-store from outside and match each tap to a store (section 4).
• Prevent fraud and keep Piggie secure. Our systems check every tap and cash-out automatically (location against the store, fake location check, internet connection location and VPN check, travel speed between taps, daily limits, App Attest on iPhone and Play Integrity on Android, one collect per sticker) and may hold or refuse one. A person reviews a hold if you ask through Report a problem or the contact form.
• Review cash-outs with AI. Before we send cash, an AI system (Claude, by Anthropic) reads the cash-out, the coins in it, your tap history and flags, and any notes you wrote in Report a problem, and gives us a summary. Your name, email, account ids and exact tap locations are removed before it reads them. A person at Piggie makes every decision.
• Pay you through PayPal, Venmo or Zelle.
• Run paid surveys and reviews. We use your answers to pay you, to bill the brand, and to give that brand its results.
• Apply brand features you qualify for, such as a ladder tier, a birthday bonus, or an age limit a brand sets (for example 21 or older).
• Tailor offers inside Piggie. We may choose which offers and deals you see in the app based on your activity in Piggie (for example the brands you collect from and your ladder tier). We do not use information from other companies' apps or websites to do this.
• Bill brands and report results to them as described in section 5.
• Create de-identified and aggregated data and insights, which we may use, publish, sell, or license (section 6).
• Improve Piggie: understand how the app and website are used, fix problems, and build new features.
• Talk to you: account messages, replies to your requests, and marketing emails from Piggie you can unsubscribe from (section 9).
• Meet legal duties: keep financial records, respond to lawful requests, report unclaimed property where required, enforce our Terms, and defend claims.
• Anything else you agree to when we ask.

4. Your location, in detail

• When. Piggie asks for location "while using the app" only, on iPhone and Android. While the app is open, it uses your location and sends it to us when you tap a coin (with the last few readings it took), when you cash out, and whenever we need to check your location for security. Nothing is read in the background, when Piggie is closed, unless you choose the option below. When you finish a paid survey or review, your location goes with it for the same security checks as a cash-out.
• Allow all the time (optional). If you choose Allow all the time in your phone's settings, Piggie may also use your location while it is closed, to tell you when you are near or inside a store with Piggie coins. When it does, it may send your location to us to find those stores, to check security, and to count store visits in aggregated reports (section 6). Brands never receive these locations. It is never required: taps and cash-outs need only "while using the app", and you can switch back at any time in your phone's Settings.
• Your consent. When you allow location when your phone asks, you agree that Piggie may use your precise location as this section describes. You can withdraw that consent at any time in your phone's Settings, but coins cannot be collected and cash cannot be cashed out without it. You can still sign in and see your balance.
• No VPNs. We check the location of your internet connection on every tap and cash-out. Taps and cash-outs made through a VPN, proxy or data center network are refused. We must know where you are, with no exceptions; if you do not want that, do not use Piggie.
• Why. To tell whether you are in the store (you see the offer) or have left it (you collect the coin), to match the tap to a store, to stop faked locations and harvested stickers, and to produce aggregated store reports.
• What we keep. Each tap's location rounded to about 11 meters, its accuracy, the store it was matched to, and the distance to it, and the location of each cash-out, in our fraud records. We also keep your most recent tap position to check travel speed between taps. We do not keep a trail of where you go between taps.
• What we never do with it. The exact spot where you collect a coin (which may be your home) is never given to a brand or anyone else outside Piggie and its service providers, and is never sold, even if you turn on brand sharing. We never use your location for advertising on other companies' apps or websites and never give it to data brokers or advertising networks.
• Store visits. The store a tap is matched to, and when, goes to a brand only in aggregated or de-identified form (section 6), or as part of your own activity if you turn on brand sharing (section 5.3).

5. What brands receive

5.1 For every coupon a brand pays for (everyone)

To bill the brand, audit the campaign, and investigate fraud: the coin and sticker codes, the product, the value paid (including any ladder percent or birthday bonus), the date and time, and a coded shopper id. A brand never receives your name, email, phone number, device id, birthday, or the location of any tap in this record. A brand that runs a birthday bonus also sees how many birthday bonuses it paid each month.

5.2 Reports and insights (everyone)

Results of a brand's campaign in aggregated or de-identified form: for example taps, collects, stores, days and times, areas, age ranges, repeat collects, and ladder tiers, counted across many shoppers. See section 6 for how we keep this data from being linked back to you.

5.3 Share my coupon activity with brands (only if you turn it on, 18 or older)

If you turn this on, each brand you collect from may receive your activity with that brand, under a coded id unique to that brand: the products you tapped and collected, dates and times, the store each tap was matched to (its name and address, not your GPS point), your age range, your ladder tier, and how many coins you have collected from it. It does not include your name, email, phone number, device id, birthday, or the exact location of any tap. Brands may use it to understand their shoppers, measure their campaigns, and tailor the offers they show you in Piggie.

5.4 Brand offers (only if you turn it on, 18 or older)

If you turn this on, we give your name and email to the brands you collect from so they can send you offers. Each brand then handles your email under its own privacy policy, and you can unsubscribe from a brand's emails through that brand. If you ticked "Brands I collect from can send me offers" on the cash-out screen before this version of the policy, we do not treat that as permission to share your email; we will ask you again.

5.5 Rules every brand must follow

Brands receive shopper data only under a written agreement with Piggie that requires them to: protect it at least as well as this policy does; not try to identify you from a coded id or from de-identified data; not sell it or give it to data brokers; not combine it with data from other companies to target ads to you on other apps or websites or to measure such ads; and use it only for the purposes in this section. When you turn a switch off, we stop sharing new information and tell the brands we shared with; information a brand already received stays with that brand under its agreement and its own privacy policy.

Brand sharing (5.3 and 5.4) is off unless you turn it on, is never available for an account that has not shown it is 18 or older, and never includes products that reveal health conditions, sexual life, or similar sensitive matters.

5.6 Paid surveys and reviews

The brand whose survey or review it is sees totals of the answers, star ratings, and the words you wrote in a review, by month and through the day before. It does not see your name, email, wallet code, or the store or time of your answer. No other brand sees any of it. Survey answers for 21+ brands stay private to that brand. A review may appear on that brand's own website only if you ticked the box, and it must be marked as a paid review. Do not write anything in a review you do not want the brand to read. Piggie staff can see each answer with the one-way code, for fraud checks and billing.

6. De-identified and aggregated data

We may turn the information we collect into data that does not identify you and cannot reasonably be linked to you or your device ("de-identified data"), or combine it with other shoppers' data so that it describes groups rather than people ("aggregated data"). We may use, publish, share, sell, or license de-identified and aggregated data for any lawful purpose, including insight reports and data products for brands, retailers, and other businesses.

Our commitment: we keep de-identified data in de-identified form; we do not try to re-identify it, except to test that our methods work; we take reasonable technical measures so it cannot be linked to a person, such as removing names, emails, device ids, and exact tap locations, and not reporting groups so small that a person could be singled out; and we require by contract everyone who receives it to follow the same rules and not to try to re-identify it.

7. Selling, sharing and ads

• Without your opt-in, we do not sell your personal data, share it for targeted advertising, or give it to data brokers. De-identified and aggregated data (section 6) is not personal data.
• With your opt-in, the brand sharing in sections 5.3 and 5.4 may count as a "sale" or "sharing" under some state laws, and 5.3 may include sensitive data (store visits). That is why we ask first and why you can turn it off at any time.
• Targeted advertising. Piggie does not show third-party ads, does not use advertising networks or advertising identifiers in the app, and does not track you across other companies' apps or websites. If that ever changes, we will update this policy first and ask for your permission where the law or Apple requires it.
• Opting out. Turn off the brand switches in the app, or email privacy@piggietap.com with "Do not sell or share" and we will turn them off for you. On the website, a Global Privacy Control signal from your browser is honored (section 15).
• Never for teens. We never sell or share for advertising the data of anyone we know, or have reason to think, is under 18 (section 10).

8. Who else receives data

Service providers run parts of Piggie for us. Each receives only what it needs for its job, under terms that require it to protect the data at least as well as this policy does and bar it from using the data for anything else:

• Vercel (hosting, storage, and our servers) and Neon (our database, through Vercel)
• Apple (Sign in with Apple and App Attest) and Google (Sign in with Google and Play Integrity)
• PayPal (payouts by PayPal; your PayPal email and the amount)
• Venmo, part of PayPal (payouts by Venmo; your Venmo username and the amount)
• Bank of America and Zelle (payouts by Zelle; your mobile number or email and the amount)
• Google Workspace (our email, including password codes and support)
• ipinfo.io (network lookups for every app request and website visit: approximate location and VPN check)
• Anthropic (AI review of cash-outs, with your name, email, account ids and exact tap locations removed; section 3)
• For the brand portal only: Clerk (sign-in) and Stripe (brand billing)

Others: brands, as described in section 5; authorities, courts, or others when the law requires it or when needed to protect people, Piggie, or the Service from fraud or harm; a buyer or successor if Piggie is merged, acquired, or sells its assets, who must honor this policy for data collected under it; and anyone else you ask us to share with.

9. Emails and messages

• Account messages (for example password codes, cash-out updates, and answers to your requests) go to the email on your account. You cannot opt out of these while you have an account. We email you about a cash-out at the email on your account, even if you are paid by another way. If your account has no real email, we may use the email you gave for your payout.
• Marketing from Piggie. We may email you about Piggie and offers available in Piggie. Every marketing email has an unsubscribe link, and we stop within 10 business days.
• Marketing from brands only if you turn on Brand offers (section 5.4).
• Texts. We do not send text messages unless you give written consent first.
• Notifications. Piggie sends a push notification when we message you about a cash-out, and Coin alerts if you turn them on. Your phone asks you first, and you can turn them off in Settings.

10. Teens and children

Under 13. Piggie is not for children under 13, and we ask for your age when you sign up. If we learn that we have collected information from a child under 13, we will stop using it, close the account, and delete the child's information. Before deleting, if a parent or guardian contacts us, we will send any balance to the parent or guardian. Parents can reach us at privacy@piggietap.com.

13 to 17. Teens may collect coins with a parent's or guardian's involvement and can cash out once they are 18. Unless an account has shown it is 18 or older (a birthday showing 18 or older, or the 18+ confirmation at cash-out), we treat it as possibly belonging to a minor, and for that account we:

• never sell or share its data, and never use it for targeted advertising;
• never share its activity with a brand person by person (it is counted only in aggregated or de-identified reports);
• never let brands send it marketing;
• do not offer the brand switches in section 5.

App store age information. Where the law provides for it (for example in Texas), we use the age range and parental consent status your app store gives us, ask for a parent's consent again through the app store when the law requires it after a significant change, and stop a minor's use if a parent or guardian withdraws consent. A parent or guardian may ask to see or delete their teen's information by writing to privacy@piggietap.com.

11. Your rights and choices

Wherever you live in the United States, you can ask us to:

• tell you whether we hold your personal data, and give you a copy, including in a portable format;
• correct it;
• delete it (you can also delete your account in the app, under Profile; see section 13);
• opt out of the sale or sharing of your data, targeted advertising, and profiling that produces legal or similarly significant effects;
• withdraw a consent you gave, such as brand sharing or location (location is withdrawn in your phone's Settings);
• limit the use of your sensitive data to what is needed to run Piggie (turning off brand sharing does this).

How to ask: email privacy@piggietap.com or use the contact form. Where the app has a setting for it (birthday, delete my account, brand switches), you can also use the app. We confirm a request comes from you by checking it against the email or sign-in on your account. An authorized agent may ask for you with your signed permission, and we may ask you to confirm it.

Timing and cost: we answer within 45 days, and if we need up to 45 more days we tell you why. It is free.

Appeals: if we decline your request, you can appeal by replying with "Appeal" in the subject. We answer within 60 days and explain our decision. If you are in Texas and we deny your appeal, you can contact the Texas Attorney General at texasattorneygeneral.gov; residents of other states can contact their own Attorney General.

No penalty: we will not treat you differently for using these rights. Some things are needed to provide Piggie at all: coins cannot be collected and cash cannot be cashed out without location or through a VPN, and cash cannot be sent without details for one of the ways to be paid.

12. How long we keep it

Your account, profile, and balance are kept until you delete your account (or we close it and settle any balance). Once you create an account and collect a coin or cash out, you are in our system: we keep your coin, tap, cash-out, and fraud records for as long as we need them to prevent fraud, keep Piggie secure, keep financial records, and meet legal duties, including after you delete your account (section 13). Problem reports, support messages, and records of your consents and choices are kept for the same reasons. Photos you send in a cash-out chat are the exception: they are deleted 90 days after the review closes. De-identified and aggregated data may be kept without a time limit. If you remove your birthday, we keep only its month and year so the age limits keep working. Survey answers and reviews are kept with the one-way code and no name or email, as research records for the brand, and they stay after you delete your account.

13. Deleting your account

You can delete your account at any time in the app: Profile, then Delete my data. You can also ask on the web at piggietap.com/delete-account. Deleting removes your sign-in (including your password if you set one), your profile, your birthday, your coins, and your balance. Any balance left in the account is forfeited when you delete it; the app shows the exact amount and asks you to confirm first (see the Terms). Survey pay still locked when you delete is gone, because the survey was not finished.

We keep, for fraud, security, and legal reasons:

• records of cash-outs you already made (the PayPal email, Venmo username, or Zelle mobile number or email, amounts, dates), because they are financial records, and any cash-out still on its way to you;
• records of the coins you tapped and collected, and our fraud and sticker records (which stickers were collected, where to about 11 meters, and when, your last tap position, and offers you were shown);
• a one-way code of your email and sign-in, so we can recognize the account if it signs up again, and the brand and year of each birthday bonus you received, so a bonus cannot be claimed twice;
• bans: if an account was banned for fraud, its phone and every PayPal, Venmo and Zelle detail it used stay blocked;
• problem reports and messages you sent us;
• information a brand already received under a switch you turned on (that brand's copy is governed by its agreement and policy);
• de-identified and aggregated data.

14. Security

Data is encrypted in transit and stored with our hosting providers, which encrypt it at rest. Passwords are stored only as a scrypt hash. Access is limited to the people who need it, requests from the app are checked with Apple's App Attest on iPhone and Google Play Integrity on Android, and payout details are handled by the company that carries each payment. No system is perfect. If a breach affects your information, we will tell you, and the authorities where required, as the law requires.

15. The website

piggietap.com runs its own visit measurement, built by us and hosted with the site: no Google Analytics, no advertising pixels, no cookies. We record which pages are viewed, what is clicked and where on the page, how far a page is scrolled, and where the screen sits during the visit. That lets us replay a visit as an outline of the page, to see where people get stuck. We never record what you type into a field. We also record the referring site, the device type, and the city and network a visit comes from. To name the network we send your IP address to our IP lookup provider, ipinfo.io; we do not store the IP address itself. Visitor and session identifiers live in your browser storage only. Browsers that send Do Not Track or Global Privacy Control are not measured at all. When you use the contact form or join the list, what you give us is kept so we can reply or write to you, and is not sold.

16. State notices

Texas. The notice at the top of this policy is the one Texas law requires. Your rights and the appeal process are in section 11.

California. In the last 12 months we collected these categories of personal information (as California law names them): identifiers (account ids, email); customer records (name, email, PayPal email, Venmo username, mobile number); age (a protected characteristic); commercial information (coupons tapped, collected, and paid); internet or network activity (app and website use); geolocation (tap and cash-out location); a photo, only if you add one; and inferences (age range, ladder tier, offer tailoring). Sensitive personal information: precise geolocation and account sign-in details. Sources, purposes, recipients, and retention are in sections 2 to 12. In the last 12 months we have not sold or shared personal information. Going forward, we sell or share it only through the opt-in switches in section 5, and when you turn one on you are directing us to disclose your information to that brand. We use sensitive personal information only to run, secure, and protect Piggie, unless you turn on brand sharing; turning it off limits that use. Shine the Light: if you turned on Brand offers, you may ask once a year for the list of brands we gave your email to for their direct marketing. Financial incentive: Piggie's coupons are paid for buying a brand's product, not for your data; to the extent California law treats a coupon as a financial incentive, you accept it by creating an account and collecting a coin, you can withdraw at any time by deleting your account, and we estimate the value of your data to Piggie as no more than the coupon value you receive, based on what brands pay Piggie for collects less our costs.

Maryland. If you live in Maryland, we do not sell your sensitive data, even with your consent.

Nevada. You may ask us not to sell your covered information by writing to privacy@piggietap.com.

Other states. Residents of every state have the rights in section 11, whatever their state's own law requires.

17. Changes

We will post any update here with a new date. If a change is material, we will also tell you in the app or by email before it takes effect. If a change would let us use or share information we already hold in a way that is less protective than the policy you agreed to, we will ask for your consent first and will not apply it to that information without it.

18. Contact

Privacy questions and requests: privacy@piggietap.com, or the contact form (choose "App or coin support"). Piggie LLC, San Antonio, Texas.