Privacy Policy

1. Introduction

4Rewards is committed to protecting your personal data. This policy explains what data we collect, how we use it, and what your rights are under the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller is:

4Rewards
Email: privacy@4rewards.gr

3. Data We Collect

3.1 Registration Data

Data	Purpose	Legal Basis
First and Last Name	Identification and personalization	Contract performance
Phone number	Login and communication	Contract performance
Password	Account security (stored encrypted)	Contract performance
Date of birth (optional)	Special birthday offers	Consent

3.2 Location Data

3.3 Device Data

Data	Purpose
FCM Token (Firebase)	Sending push notifications
Device type and OS	Technical support and optimization

3.4 Usage Data

• Transaction history (points, redemptions)
• Reviews you have submitted
• Loyalty cards in your wallet
• Referral codes

4. How We Use Data

• Service provision: For the operation of the rewards program
• Personalization: For displaying relevant offers and businesses
• Notifications: For updates about new points, rewards, and offers
• Birthday: If you provided your birth date, for sending special offers
• Improvement: For improving the application and our services
• Security: For protection against fraud and abuse

5. Push Notifications

We use Firebase Cloud Messaging to send notifications about:

• New points you earned
• Available rewards
• Special offers from businesses
• Review reminders

You can disable notifications from your device settings.

6. Data Transfer

Your data may be transferred to:

• Partner businesses: Basic information for providing loyalty services
• Firebase (Google): For push notifications and analytics
• Cloud service providers: For data storage

We do not sell your data to third parties for advertising purposes.

7. Data Security

We implement technical and organizational measures to protect your data:

• Data encryption during transmission (HTTPS/TLS)
• Secure password storage (hashing)
• Sensitive data stored in device Secure Storage
• Restricted access to data

8. Data Retention

We retain your data:

• Account data: As long as your account is active
• Transaction data: For 3 years after the last transaction
• Reviews: As long as they exist on the platform (you can delete them)
• After account deletion: Deletion within 30 days

9. Your Rights (GDPR)

• Access: To receive a copy of your data
• Rectification: To correct inaccurate data (through your profile)
• Erasure: To request deletion of your account and data
• Restriction: To restrict processing
• Portability: To receive your data in a transferable format
• Objection: To object to processing (e.g., marketing)
• Withdraw consent: To withdraw your consent at any time

9.1 Account Deletion

You have the right to delete your account at any time directly through the application. To delete your account:

• Go to Profile
• Select "Delete Account"
• Enter your password to confirm
• Your account and all associated data will be permanently deleted

Please note that some data may be retained for legal compliance purposes as described in Section 8 (Data Retention).

To exercise your rights, contact us at privacy@4rewards.gr

10. Cookies and Local Storage

The application uses local storage for:

• Storing preferences (language, theme)
• Maintaining login state
• Storing onboarding status

We do not use third-party cookies for tracking or advertising.

11. Minors

The application is not intended for children under 16 years of age. We do not knowingly collect data from minors. If we discover such data, we will delete it immediately.

12. Policy Changes

We may update this policy periodically. We will notify you of significant changes through the application or push notification.

13. Complaints

If you believe your rights are being violated, you can file a complaint with:

Hellenic Data Protection Authority
Website: www.dpa.gr