Main Menu

Privacy Policy

Elli Rewards

Last updated: 24.03.2026

1. Overview

Elli Rewards (“we”, “us”, “our”) operates the Elli Rewards Business and Elli Rewards mobile applications as well as the website https://www.ellirewards.com.

This Privacy Policy explains how we collect, use, process and protect your personal data when you use our services.

By using our apps or website, you agree to this Privacy Policy.

2. Data We Collect

We may collect the following types of data:

a) Account Information

  • Name

  • Email address

  • Business name (for business users)

b) Usage Data

  • App interactions

  • Feature usage

  • Log data

  • Device information (e.g. device type, OS version)

c) Technical Data

  • IP address

  • Device identifiers

  • Crash logs

d) Customer Data (Business Users Only)

  • Data entered by business users about their customers (e.g. loyalty points, rewards)

3. How We Use Data

We use collected data to:

  • Provide and operate the app

  • Authenticate users

  • Store and manage user data

  • Improve app performance and features

  • Send notifications (if enabled)

  • Provide customer support

4. Third-Party Services (IMPORTANT)

We use trusted third-party service providers to operate the app:

Firebase (Google LLC)

We use Firebase for:

  • Authentication

  • Database (Firestore)

  • Analytics

  • Crash reporting

Firebase may process data such as device information, usage data and identifiers.

More information: https://firebase.google.com/support/privacy

OneSignal

We use OneSignal to send push notifications.

OneSignal may process:

  • Device identifiers

  • Notification interaction data

More information: https://onesignal.com/privacy_policy

Stripe (Payments – if applicable)

Payments may be processed via Stripe outside of the mobile app environment (e.g. website or external billing system).

Stripe processes payment data according to their own privacy policy:
https://stripe.com/privacy

5. Data Sharing

We do not sell personal data.

We only share data with:

  • Service providers listed above

  • Authorities, if legally required

All third-party providers process data on our behalf under strict data protection agreements.

6. Data Retention

We store personal data:

  • As long as your account is active

  • As required for legal or operational purposes

After account deletion:

  • Data will be deleted within a reasonable period (typically within 30 days), unless legal obligations require retention.

7. Account Deletion

You can request deletion of your account:

Upon deletion:

  • Your personal data will be removed from our systems (subject to legal requirements)

8. Push Notifications

If you enable notifications:

  • We may send service-related or engagement notifications via OneSignal

You can disable notifications at any time in your device settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Secure cloud infrastructure (Firebase)

  • Access control

  • Encryption in transit

However, no system is 100% secure.

10. Children’s Privacy

Our services are not intended for children under 13.

We do not knowingly collect data from children.

11. International Data Transfers

Your data may be processed in countries outside your own, including the United States, where our service providers operate.

12. Your Rights (GDPR)

If you are located in the EU, you have the right to:

  • Access your data

  • Correct your data

  • Delete your data

  • Restrict processing

  • Object to processing

To exercise your rights, contact: help@ellirewards.com

13. Changes to This Policy

We may update this Privacy Policy from time to time.

We recommend reviewing it regularly.

14. Contact

Elli Rewards
Salhojankatu 25D
33500 Tampere
Finland

Email: help@ellirewards.com

Scroll to Top