Perqo Privacy Policy

1. Introduction

Welcome to Perqo.

Perqo is a digital loyalty and rewards platform that allows customers to participate in loyalty programs offered by participating businesses, collect digital stamps, and redeem rewards.

Perqo also provides businesses with tools to create and manage loyalty programs, manage authorised staff, verify customer QR codes, and administer business subscriptions.

Perqo is operated by Nat Navaneetharaja, based in Melbourne, Victoria, Australia.

This Privacy Policy explains how Perqo collects, uses, stores, discloses, protects and retains personal information.

This policy applies to customers, business owners, staff members and other individuals who interact with Perqo.

2. Information We Collect

The information Perqo collects depends on how you use the service.

2.1 Account and Profile Information

When you register for or use Perqo, we may collect:

Your full name, where provided.
Your email address.
Your unique account identifier.
Account authentication and verification information.
Information about your account status and permissions.

Authentication credentials are handled through our authentication service provider. Perqo does not need to store your password in readable form.

2.2 Loyalty and Rewards Information

When you join a participating business's loyalty program, we collect and process information such as:

Your loyalty program memberships.
Your digital stamp balances.
Stamps awarded to your account.
Rewards earned and redeemed.
Loyalty transaction history.
Transaction dates and times.
The participating business associated with a transaction.
Identifiers associated with authorised staff members processing transactions.
Temporary membership QR tokens.

This information is necessary to operate the loyalty and rewards functionality.

2.3 Business Information

When registering or managing a business, we may collect:

Business name.
Business description.
Business logo and associated uploaded files.
Business ownership information.
Loyalty program settings.
Reward descriptions and stamp requirements.
Authorised staff members and their assigned roles.
Business subscription status.
Information relating to the operation and administration of loyalty programs.

Business information may be displayed to Perqo users where necessary for business discovery and loyalty program participation.

2.4 Staff Information

When a business owner adds a staff member, Perqo may process:

The staff member's account identifier.
Their email address.
Their assigned business.
Their staff role and access permissions.
Their active or inactive staff status.
Loyalty transactions they process.

This information is used to authorise staff access and maintain appropriate transaction records.

2.5 Apple Subscription Information

Perqo Business offers an auto-renewable subscription purchased through Apple's In-App Purchase system.

To provide and verify subscription access, we may process:

Apple subscription product identifiers.
Apple transaction identifiers.
Original purchase transaction identifiers.
Subscription expiration dates.
Subscription status.
Renewal and cancellation information made available by Apple.
Subscription verification and ownership identifiers.
Limited records relating to subscription recovery, disputes and security reviews.

Subscription payments are processed by Apple. Perqo does not receive your complete payment card information.

2.6 Technical and Security Information

Perqo and its service providers may process technical information required to operate and secure the service, including:

Authentication and session information.
Request timestamps.
Server and application error information.
Security and access logs.
Technical identifiers used to prevent unauthorised transactions.
Network information processed by hosting and infrastructure providers.

This information helps us maintain service availability, investigate technical issues and prevent misuse.

3. How We Collect Information

We collect information when you:

Create a Perqo account.
Sign in to your account.
Provide profile information.
Join a loyalty program.
Generate or display a membership QR code.
Receive digital stamps.
Redeem loyalty rewards.
Register or manage a business.
Add or remove staff members.
Subscribe to Perqo Business.
Restore an Apple subscription.
Request account deletion.
Contact Perqo for support.

We may also receive subscription and transaction verification information from Apple and technical information from our service providers.

4. How We Use Your Information

We use personal information for the following purposes:

Account management: Creating, authenticating and managing Perqo accounts.
Loyalty services: Managing loyalty memberships, stamp balances and reward redemptions.
Business services: Allowing businesses to manage loyalty programs, rewards and authorised staff.
Subscription management: Verifying Apple subscriptions and providing eligible businesses with access to paid features.
Transaction security: Confirming that loyalty transactions are performed by authorised staff using valid QR codes.
Fraud prevention: Detecting and preventing unauthorised access, fraudulent stamp awards, reward abuse and other misuse.
Customer support: Responding to enquiries, technical problems and account-related requests.
Service maintenance: Diagnosing errors, maintaining infrastructure and improving reliability.
Legal compliance: Meeting applicable legal obligations and responding to lawful requests.

We do not sell personal information to advertisers.

5. Disclosure of Information

Perqo may disclose information to other parties where necessary to operate the service.

5.1 Participating Businesses

When you join a participating business's loyalty program, authorised business personnel may access relevant membership information.

This may include:

Your membership identifier.
The loyalty program you have joined.
Your current stamp balance.
Available rewards.
Information needed to process a stamp or reward transaction.

Perqo uses business-specific permissions and authorisation controls intended to restrict access to appropriate staff members.

5.2 Third-Party Service Providers

Perqo uses third-party services to operate its platform.

These include:

Supabase: Used for account authentication, database infrastructure, backend functions and file storage.
Apple: Used for in-app subscription purchases, subscription verification and subscription management.
Render: Used to host backend services involved in Apple subscription verification and related processing.
Netlify: Used to host Perqo's website at perqoapp.com, including this Privacy Policy and the Perqo Support page.

These providers may process information where necessary to deliver their respective services.

We take reasonable steps to use providers with appropriate privacy and security protections.

5.3 Legal Requirements

We may disclose information where required by applicable law, valid legal process or an enforceable legal obligation.

We may also disclose information where reasonably necessary to investigate fraud, security incidents or unlawful activity.

6. Membership QR Codes

Perqo uses temporary QR codes to facilitate loyalty transactions.

When a customer generates a QR code, Perqo creates a temporary identifier associated with their account.

QR codes are designed to:

Be generated using unpredictable identifiers.
Expire after approximately 60 seconds.
Become invalid after a completed transaction.
Be replaced when a customer generates a new code.

Authorised business staff may scan valid codes to identify eligible loyalty memberships and process permitted transactions.

Customers should present their QR codes only when requesting legitimate loyalty services.

QR codes are not intended to be used as general identity documents.

7. Data Storage and Security

Perqo uses cloud-based infrastructure to store and process account, business, subscription and loyalty information.

We implement technical and organisational safeguards designed to reduce the risk of unauthorised access, modification, disclosure or loss.

These include:

Authentication requirements.
Database Row-Level Security policies.
Business-specific staff permissions.
Server-side validation of loyalty transactions.
Temporary QR token expiration.
Subscription verification procedures.
Restricted backend access to sensitive operations.

Although we take reasonable precautions, no internet-based platform or electronic storage system can guarantee absolute security.

Users are responsible for maintaining the confidentiality of their login credentials.

8. International Data Processing

Perqo operates from Melbourne, Australia, and uses third-party cloud infrastructure.

Personal information may be stored or processed outside Australia depending on the infrastructure locations, operational requirements and authorised subprocessors used by our service providers.

This may include processing associated with cloud hosting, authentication, subscription verification, technical support and security operations.

We take reasonable steps to assess the privacy and security practices of relevant providers.

Users may contact info@perqoapp.com for information about Perqo's current hosting and overseas data-processing arrangements.

9. Data Retention

We retain personal information for as long as reasonably necessary to provide Perqo, maintain security, resolve disputes and comply with applicable legal obligations.

Retention depends on the type of information and why it was collected.

Account Information

Account and profile information is generally maintained while the account remains active.

Loyalty Information

Membership information, stamp balances and transaction records are maintained as necessary to operate loyalty programs and associated business records.

QR Token Information

QR codes have short validity periods. Underlying token records may remain in the database after expiration until they are removed under applicable data-management procedures.

Subscription Records

Certain subscription verification records may be retained after account deletion where reasonably necessary to prevent unauthorised subscription transfers, investigate payment disputes, reconcile subscription events or review legitimate ownership recovery requests.

Operational Records

Technical logs, backups and security records may be retained for limited operational, security or legal purposes.

When information is no longer reasonably required, we take appropriate steps to delete or de-identify it, subject to applicable obligations.

10. Account Deletion

Perqo provides an in-app account deletion feature.

To request permanent account deletion:

Open Perqo and sign in.
Navigate to My Profile.
Select Delete Account.
Review the deletion information.
Confirm your request.

Account deletion is intended to permanently remove your Perqo authentication account and associated records according to the service's deletion processes.

If you own a registered business, deleting your account may also delete the business, its loyalty programs and related records.

This may affect customers participating in that business's loyalty programs and staff members associated with it.

Certain limited records may be retained where reasonably necessary for legitimate security, subscription verification, dispute resolution or applicable legal purposes.

Important: Deleting your Perqo account does not cancel an active Apple subscription.

To prevent future billing, you must separately cancel your subscription through Apple's subscription management settings.

If you experience difficulties with account deletion, contact info@perqoapp.com.

11. Accessing and Correcting Your Information

You may request access to personal information held by Perqo or ask us to correct inaccurate information.

Requests can be sent to:

info@perqoapp.com

We may require reasonable verification of identity before processing requests.

We will assess requests and respond in accordance with applicable law.

12. Privacy Complaints

If you have concerns about how Perqo handles your personal information, you may submit a privacy complaint by email.

Contact: Nat Navaneetharaja
Email: Email: info@perqoapp.com

Please describe your concern and provide sufficient information for us to investigate it.

We will review complaints and respond within a reasonable period.

Where applicable, you may also contact the Office of the Australian Information Commissioner (OAIC):

www.oaic.gov.au

13. Children's Privacy

Perqo is not specifically designed for children.

We seek to handle personal information relating to children in accordance with applicable privacy requirements.

Parents or guardians who have concerns about information relating to a child may contact us at info@perqoapp.com.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, infrastructure, information-handling practices or applicable law.

When changes are made, we will update the date displayed at the beginning of this policy.

Where required, we will provide additional notice of material changes.

15. Contact Information

For questions about this Privacy Policy, personal information, account deletion or privacy-related requests, contact:

Perqo
Operator: Nat Navaneetharaja
Location: Melbourne, Victoria, Australia
Email: Email: info@perqoapp.com