Legal
PerkNudge is a proactive portfolio manager for your points, miles and rewards offers, delivered as a browser extension, a mobile app, and this website (the “Service”). This policy explains what we collect, why, who we share it with, and the choices you have. By using the Service you agree to this policy.
Your email address and authentication credentials. If you sign in with Apple or Google, we receive the basic profile information those providers release (name, email) per your consent.
You can also create a PerkNudge account directly on this website, with email and a password, with Google, or with Apple. If you sign up with email, we collect your email address and the name you enter at signup (first name, and last name if you provide one). If you use Google or Apple, we receive the name and email address those providers release to us. Passwords are handled by our authentication provider; we never store your password in a form we can read.
If you add a passkey to your account, what we store is a public key credential and a label for that passkey (its device or browser name and the date you added it), so you can tell your passkeys apart in your account settings. A passkey is never a biometric, and it can never be used to sign in anywhere except your PerkNudge account.
The loyalty programs you add, your points and miles balances, expiration dates, transfer relationships, and reward offers. This is the data that powers your alerts and recommendations.
With your action, the extension reads your points/miles balance, expiry dates (including any “expiring soon” amounts and dates), your account’s last-activity date, and the last 4 digits of your membership number (to label the account) from loyalty/airline/hotel sites while you are logged in to those sites in your own browser, and sends only that extracted reward data to your PerkNudge account. The extension does not transmit your loyalty-site passwords to us.
When you sign in to a supported card issuer’s site (such as American Express or Chase), the extension reads the merchant offers that issuer is already showing you (merchant, reward, minimum spend, expiry date, and activation state), together with the card’s display name and the last few digits of the card number that the issuer itself displays (four digits, or five for American Express; never the full card number) so each offer can be labeled with the card it belongs to, and saves them to your PerkNudge account so you can browse every card’s offers in one place. PerkNudge can also activate an offer for you: when you ask, or automatically while automatic activation is on. Automatic activation is switched on when you purchase PerkNudge Pro; you can turn it off at any time in the extension’s settings. Activating an offer performs the same free “Add to card” action you would otherwise click on the issuer’s own page; it cannot make purchases, move points, or change your account settings. If offer reminders on store pages are enabled, the extension checks the site you are visiting against your own saved offers locally in your browser; your browsing activity is never sent to us.
If you subscribe to PerkNudge Pro, whether from the browser extension or directly on this website, payment is processed by Stripe. Buying on the website sends your plan choice to our server, which opens a Stripe Checkout session and takes you to Stripe’s own secure payment page to complete the purchase. We never see or store your full card number; we store your Stripe customer and subscription identifiers and your purchase status to manage your subscription.
Device/app information and error/crash diagnostics (via Sentry) to keep the Service reliable. We aim to scrub sensitive content (e.g., access tokens and identifiers) from diagnostic data. We also record which pages and features get used (via PostHog) so we know what to build and fix next. That is counts and actions, never the content of what you type.
We do not sell your personal information, we do not use your data to build advertising profiles, and we do not use it to train AI models.
We keep your data while your account is active. You can delete your account in the app or the browser extension, which removes your personal data and portfolio (subject to limited retention required for legal, security, or accounting purposes). If you created your account on this website and don’t have the app or the extension installed, email [email protected] and we’ll delete your account and data for you.
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to opt out of certain processing. Exercise these in-app or by contacting us at [email protected]; we will not discriminate against you for exercising them.
We use industry-standard safeguards (encryption in transit, scoped access, rate limiting). No system is perfectly secure, but we work to protect your data and to limit what we collect to what the Service needs.
The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their information.
We operate the Service from the United States; using it means your information is processed in the U.S.
We may update this policy; we will post the new effective date here and, for material changes, notify you in the Service.
Questions or requests: [email protected].