Privacy Policy

1. Introduction

SpinWin ("we," "us," or "our") operates a rewards and event engagement platform featuring a gamified raffle, coupon marketplace, and official voting for pageant events. This Privacy Policy explains how we collect, use, and protect your information when you use our website at mciraffle.base44.app.

2. Information We Collect

• Account information: email address, password (encrypted), and phone number (if you use phone-based login).
• Profile information: name and role (user, merchant, or admin).
• Activity data: spins, coupon claims, token transactions, votes, and redemption history.
• Device and usage data: IP address, browser type, and interaction logs.
• Location data: approximate location used to display nearby businesses on the map. This is requested with your permission and is not stored unless you explicitly provide it.

3. How We Use Your Information

• To create and manage your account and authenticate your sessions.
• To process token purchases, coupon claims, and redemptions.
• To record votes in pageant events and display leaderboard results.
• To send service notifications (e.g., free spin reminders, prize announcements, coupon expiry alerts).
• To display your redeemed coupons and QR codes for merchant scanning.
• To analyze platform usage and improve our services.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Google OAuth: for sign-in with Google (governed by Google's Privacy Policy).
• Stripe: for processing token purchase payments (your card details are handled by Stripe and never touch our servers).
• Twilio: for phone-based SMS verification during registration.
• OpenStreetMap / Nominatim: for geocoding business addresses and displaying maps.

5. Data Sharing

We do not sell your personal information. We share data only with the third-party services listed above (as needed to operate the platform), and with merchants when you redeem a coupon at their location (limited to the coupon title, QR code, and redemption status).

6. Data Retention

Your account data is retained for as long as your account is active. Coupon records in your wallet are automatically deleted 30 days after claiming unless redeemed. Token transaction records are retained for accounting purposes.

7. Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us through the app. You may also disconnect third-party integrations (e.g., Google) through those providers' account settings.

8. Security

We use industry-standard measures to protect your data, including encrypted password storage, secure token-based authentication, and HTTPS for all communications. Payment processing is handled entirely by Stripe's PCI-compliant infrastructure.

9. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new "last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please reach out through the app's support channels.