Privacy Policy

1. Information We Handle

Information you provide

• Mobile phone number. We use the number you enter to verify your identity and locate your Sweet J's Square Loyalty account.
• One-time verification code. The code is submitted to our verification provider to confirm that you control the phone number. The app does not store the code after verification.
• Messages or requests. If you contact us, we receive the information you choose to include in your message.

Loyalty and app information

• Rewards information. We retrieve your loyalty point balance, lifetime points, enrollment status, and a masked version of your phone number from Square.
• Short-lived loyalty QR code. The app creates a time-limited QR code containing loyalty account identifiers so store staff can identify the correct account when awarding points. The code expires after approximately five minutes.
• Local app information. The app may save sign-in status, game progress, notification preferences, and other basic settings on your device so features work between visits.
• Technical information. Our hosting and security providers may process standard request information, such as IP address, device or browser type, request time, and error or security logs, to operate and protect the service.

2. How We Use Information

We use information only as reasonably necessary to:

• verify your phone number and keep you signed in securely;
• connect you with your Sweet J's Rewards account;
• display your rewards balance and generate your loyalty QR code;
• provide app features, featured items, games, and notifications you enable;
• prevent abuse, limit repeated verification attempts, troubleshoot problems, and protect the app;
• respond to questions, privacy requests, or customer-service messages; and
• comply with applicable law and enforce our rights.

3. When Information Is Shared

We do not sell personal information, and we do not use the app for third-party behavioral advertising.

We share or allow processing only with service providers that help operate the app, including:

• Square for customer loyalty enrollment, loyalty-account lookup, rewards information, and optional online ordering;
• Twilio for SMS one-time-code verification;
• Vercel for web hosting, server functions, security, and operational logs;
• Upstash or Vercel-managed data services for temporary verification-request rate limiting; and
• Apple and Google for app distribution, operating-system permissions, and notification services.

We may also disclose information when required by law, to protect customers or the public, to investigate fraud or security incidents, or as part of a merger, financing, sale, or transfer of the business where permitted by law.

4. Notifications and Device Permissions

The app may ask for permission to send notifications about Sweet J's features, rewards, promotions, or game reminders. Notifications are optional. You can turn them off at any time in your device settings.

We do not request access to your contacts, photos, microphone, or precise location as a requirement for using Sweet J's Rewards. A future feature that needs an additional device permission will request that permission at the time it is used.

5. Data Retention and Deletion

• Your signed-in app session is designed to expire after approximately 30 days and can be removed sooner by signing out or deleting the app.
• Temporary verification rate-limit records are generally kept only for a short period, typically about 10 minutes.
• Operational and security logs are kept only as long as reasonably necessary for reliability, fraud prevention, legal compliance, and dispute resolution.
• Square controls retention of information in your Square Loyalty or ordering account under Square's policies.

To request access, correction, or deletion of information controlled by Sweet J's, contact us using the details below. We may need to verify your identity before completing a request. For deletion of a Square Loyalty profile or Square order history, we may direct you to Square or assist with the appropriate request.

6. Security

We use reasonable administrative, technical, and organizational safeguards, including encrypted network connections, signed and expiring sessions, one-time-code verification, access controls, and short-lived QR codes. No internet or storage system is completely secure, so we cannot guarantee absolute security.

7. Children's Privacy

The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. A parent or guardian who believes a child provided personal information should contact us so we can review and delete it where appropriate.

8. Your Choices and Privacy Rights

Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information, or to object to or restrict certain processing. You may also sign out, delete the app, disable notifications, or choose not to use the loyalty sign-in feature. We will not discriminate against you for making a valid privacy request.

9. Third-Party Services and Links

The app may open Square ordering or enrollment pages and other third-party websites. Their privacy practices are governed by their own policies, not this Privacy Policy. Review those policies before submitting information directly to a third party.

10. Changes to This Policy

We may update this Privacy Policy as the app or legal requirements change. We will post the updated version at this address and revise the effective date. Material changes may also be communicated through the app or another reasonable method.

11. Contact Us

Questions or privacy requests may be submitted through our website contact form, by phone, or by mail: