Privacy Policy — Roaring Rewards and Roaring Retail
Who we are.
Roaring Rewards, Roaring Retail and the Roaring portal are made and run by Cartel of Code Pty Ltd, ABN 78 633 299 000, Canberra, Australia ("we", "us"). Contact: support@roaringretail.com.au.
What we collect.
- Customers (Roaring Rewards): your email address (verified by a code we send you), the display name you choose, a sign-in identifier from Google or Apple if you use those doors, the suburb you pick as home, the venues you hold cards at, your stamps and visits at each venue, and the reviews you write. From a later version, if you opt in to a venue's notifications, a device token so that venue's messages can reach your phone.
- Owners and staff (Roaring Retail and the portal): your email address, display name, sign-in identifier, the businesses and venues you create or work at, the stamps you approve, and your reports. Payment details are entered with and held by Stripe; we hold a Stripe customer reference and your plan, never your card.
What we never collect.
Your location: the apps never ask for location permission; the presence check at the counter does not use GPS and stores no coordinates. No advertising identifiers, no analytics trackers, no third-party advertising of any kind.
Why we use it.
To run the stamp card: showing a venue the request you made, letting the venue say yes, keeping your count. To show reviews with a visit badge, so readers know how often the writer really goes. To send you sign-in codes and, if you opt in, a venue's messages. To bill venues for their plan. Nothing else.
Who sees what.
- A venue sees your display name and your stamps and visits at that venue. It never sees your email, your other venues, or your home suburb.
- Other customers see your display name and your reviews with their badge. Nothing else.
- If a business is sold, the buyer may see the venue's totals, such as lifetime visits by all customers. Never names, never emails.
- Service providers that hold data for us: Microsoft Azure (hosting and storage, Australia), Azure Communication Services (email), Stripe (payments, owners only), Google and Apple (sign-in, and later, delivering notifications to your phone). We do not sell personal information to anyone.
Where it lives.
In Australia, on Microsoft Azure, replicated within Australia.
How long.
While you have an account. Sign-in codes expire within minutes. Sessions expire.
Deleting your account.
From inside the app, Me → Delete my account. Your account is marked at once and erased in the next Sunday-night sweep (Canberra time). There is no undelete. Erased: your account, your cards and stamps, your sessions, your email pointer. Kept: the reviews you wrote and the display name on them, because other people relied on them when choosing a cafe; and the venue's own ledger of stamps, which keeps an opaque identifier that points at nothing. Owners must hand their business to another owner or close it before deleting.
Your rights.
Ask us what we hold about you, correct it, or complain, at support@roaringretail.com.au. We answer within 30 days. If you are not satisfied you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Children.
The apps are for people 16 and over.
Changes.
We will post changes here with the date. Material changes are announced in the app. Effective: the date of first public release.