Your data, handled with care.

This policy explains what Know & Win collects, why, who sees it and the choices you have, including how to delete your account. It applies to the Know & Win app and website.

1What we collect

Account details: your name, email address and profile photo from Google sign-in, and any changes you make to your display name or photo in the app.
Location preferences: the country, province and city you choose so we can show rewards near you. We do not access your device's GPS or track you in the background.
Activity: quizzes you attempt, your scores, coupons you win, where and when they were redeemed, and retries you unlock.
Content you post: reviews and ratings, and any reports you file, including the reason and details you give.
Brand information: when you register a brand we collect the business name, category, description, logo, cover image, branch addresses and the details of staff accounts you add.
Website forms: the name, email and message you send us through the contact, partnership, product question and newsletter forms.
Technical data: device type, app version and basic diagnostic information used to keep the service secure and working.

2How we use it

To run the service: show relevant rewards, issue and verify coupons, prevent repeat attempts, confirm redemptions at branches and display your reviews.
To keep the community safe: filter offensive words automatically, act on reports, detect fraud and enforce our Terms and Community Guidelines.
To support you: answer your messages and notify you about your account, rewards or reports.
To improve Know & Win: aggregated, anonymised statistics about campaigns, quizzes and reviews.

3Who we share it with

Brands: a brand sees the display name, city and redemption details of members who won or redeemed its rewards, and the display name, photo and city shown on public reviews. Brands never receive your email address or contact details from us unless you include them in a product question.
Other members: your display name, photo, city, rating and comment are public when you post a review.
Service providers: we use Supabase (database, authentication and file storage), Cloudflare (image hosting), Google (sign-in) and an email provider (notifications) to operate the service. They process data on our behalf under their own security commitments.
Legal reasons: we may disclose information when required by law, to protect the safety of members and brands, or to enforce our Terms.
We do not sell personal data.

4Reports and moderation

When you report a brand or review we keep the report, your account identifier, the reason and any details so our team can investigate. The reported member or brand is not told who reported them. Moderation decisions and the reasons for them are kept alongside the content.

5Advertising

Advertisements shown before a quiz retry are chosen by our team and do not use your personal data, advertising identifiers or behavioural profiles. We do not embed third-party advertising networks in the app.

6How long we keep data

Your profile, coupons, quiz attempts, reviews and reports are kept while your account exists. When you request deletion the account is deactivated at once and permanently deleted 30 days later, unless you sign in again in the meantime. Records of completed redemptions are kept in anonymised form so brands can audit their promotions.
Website form submissions are kept for up to 24 months. Server logs are kept for up to 90 days.

7Security

Data is stored with Supabase and Cloudflare and protected with encrypted connections, row-level security, signed coupon tokens and role-based access for administrators. No system is perfectly secure, so please protect your Google account and device.

8Your choices and rights

You can edit your name, photo and location at any time from the Profile screen, and edit or delete your reviews from the brand page.
You can delete your account from Manage account in the app: it is deactivated immediately and erased after a 30-day grace period during which signing in restores it. If you cannot access the app, email raheel@knownwin.com from the address linked to your account and we will delete it within 30 days. You can also ask for a copy of your data or for corrections the same way.
Newsletter emails include a way to unsubscribe; replying with “unsubscribe” also works.
Depending on where you live you may have additional rights under local data protection law. We will honour them.

9Children

Know & Win is not directed at children under 13 and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will remove it.

10Changes and contact

We may update this policy. Material changes are shown in the app and must be accepted before you continue. Questions can be sent to raheel@knownwin.com. This policy takes effect on 18 September 2026.