Wecheer Privacy Policy

1. Who is responsible

• Wecheer is responsible for your account: sign-up, login, your profile, security and fraud prevention on the platform. Wecheer SA, avenue Victor-Ruffy 5, 1012 Lausanne, Switzerland, privacy@wecheer.io.
• The brand of each campaign you join is responsible for the data of that campaign (your entries, points, rewards and any marketing you agree to receive from it). Wecheer processes that data on the brand's behalf and on its instructions. The brand's own privacy notice also applies, where it has one; the campaign page in the app tells you which brand runs it and links to its terms.
• Where Wecheer and a brand design a campaign together, both are responsible for its data. You can exercise your rights with either of them.

2. What we collect

3. Why we use it

4. Automated checks and AI

To validate entries, receipts and product photos are read by automated tools, including AI services. Only the image is sent to these services, without your name or contact details, and these third-party services may not use it to train their models. Our team reviews flagged entries, and you can ask for any automated decision about your entry to be reviewed by a person by writing to support@wecheer.io.

We also use receipt and product images to improve and test our own validation and fraud-detection tools, including training our own AI models. Before we keep an image for this purpose, we remove the link to your account, delete its metadata and mask any personal details it shows, such as names or card or loyalty numbers. You can object to this use at any time by writing to privacy@wecheer.io.

5. Fraud prevention

To stop duplicate, altered or fake entries, we keep fraud signals (such as image fingerprints, device and network identifiers and entry patterns) and compare them across all campaigns on the platform. These signals are never shared with other brands. If our checks flag your entries or account, see section 8 of our Terms and Conditions.

6. Who receives your data

We never sell, rent or trade your personal data, and we never use it for third-party advertising. We never share it with brands whose campaigns you have not joined, or with any third party for its own marketing, unless you expressly agree. We share it only as described below, and only for the purposes in section 3.

• The brand of a campaign you join receives the data of that campaign, to run it and deliver your rewards. It receives your contact details for marketing only if you opt in to that brand's communications. When you leave a campaign, Wecheer stops sharing your new data with that brand; the brand may keep data it already received, under its own privacy notice.
• Our service providers, bound by contract to protect your data and to use it only for our services: cloud hosting; analytics and customer engagement; email, SMS and WhatsApp messaging; AI validation services (images only); age verification, where required; customer support tools; and reward delivery partners, who receive only what they need to deliver your reward (usually your email address or phone number).
• Reward issuers: when you claim a reward on a provider's own page, the details you enter there are collected by that provider under its own privacy notice.
• Authorities, when the law requires it, and a buyer or successor of our business, under this policy.

7. Where your data is stored

Your data is stored on Amazon Web Services servers in Singapore.

Your data may also be transferred to, or accessed from, other countries: where our service providers and our team work, and where the brands of the campaigns you join and their own providers are based. These can include Switzerland, the EU, the UK, the USA and your own country.

Whenever your data is transferred out of Switzerland, the EU or the UK, including to Singapore, we make sure it stays protected as required by data protection law:

• to a country recognised as offering an adequate level of protection, the transfer relies on that recognition;
• to any other country, we sign the standard contractual clauses approved by the European Commission and recognised by the Swiss Federal Data Protection and Information Commissioner, with the UK addendum for UK data, and we check that the recipient applies appropriate security measures;
• brands that receive campaign data are bound by the same rules when they transfer it.

You can ask for a copy of the safeguards we use by writing to privacy@wecheer.io.

8. How long we keep it

Backups are deleted on their regular cycle.

9. Security

We protect your data with technical and organisational measures suited to the risk, including encryption, access controls with multi-factor authentication, monitoring, vulnerability management, an annual independent penetration test and an incident response process. If a data breach is likely to put your rights at high risk, we will inform you and the authorities as the law requires.

10. Cookies and similar tools

The app and website use cookies and similar tools that are needed to make them work, and analytics and engagement tools to understand how they are used and to improve them, currently Google Analytics, Microsoft Clarity, Segment and CleverTap. Where the law requires your consent, we ask for it first, and you can change your choice at any time.

11. Your rights and choices

You can ask to access, correct or delete your data, to receive a copy, to restrict or object to its use, and to withdraw your consent at any time. You can delete your account, leave a campaign and change your communication preferences directly in the app, and unsubscribe from marketing using the link in any message. Messages about your account or the campaigns you joined are not marketing and continue while needed to provide the service. For anything else, write to privacy@wecheer.io; for a campaign's data you can also contact the brand. You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), the data protection authority of your EU country, or the ICO in the UK.

12. Age

The platform is for adults only: 18 or older, or older where a campaign or the law requires it. We do not knowingly collect data from minors and delete it if we find out.

13. Changes

We may update this policy. We will tell you about important changes in the app before they apply and, where needed, ask you to accept them at your next login.

14. Language and contact

This policy is provided in English; any translation is for convenience and the English version prevails. Privacy: privacy@wecheer.io. Support: support@wecheer.io. Wecheer SA, avenue Victor-Ruffy 5, 1012 Lausanne, Switzerland.