Legal

Privacy Policy

Last updated September 8, 2026. This is a plain-language summary of our data practices, not legal advice. My Usuals is operated by an individual sole proprietor (“My Usuals,” “we,” “us”). Questions: Jmejiaa1999@gmail.com.

1. Who we are

My Usuals is a customer-retention tool for local businesses. It runs a digital punch card that customers use by scanning a counter QR code each visit, tracks each customer's visit cadence, issues the rewards a business configures, and sends personalized win-back text messages on the business's behalf.

2. Information we collect

From business owners

  • Your name, business name, email address, and mobile phone number.
  • A consent record when you sign up: the exact disclosure text shown to you, the timestamp, and the IP address the request came from. We keep this for billing- and messaging-compliance purposes.
  • Billing identifiers from Stripe (customer ID, subscription ID) and limited card metadata (brand and last four digits). Full card numbers are entered on Stripe's hosted checkout and are never received or stored by us.

From your customers

  • Name and mobile phone number that the customer provides to your business, along with the opt-in record (the consent language shown and when they agreed).
  • Check-in and visit history (logged when the customer scans the counter QR code, or added by you or your staff), reward and redemption records, and the status of messages we send (delivered, replied, opted out).

Automatically

Standard server logs (IP address, request time, user agent) generated by our hosting provider for security and reliability.

3. How we use information

  • To provide, operate, and improve the service.
  • To process your subscription and send billing-related notices.
  • To run the loyalty punch card, issue rewards, and send win-back and other text messages to your customers on your behalf, and service messages to you.
  • To keep records required for TCPA, A2P 10DLC, and ROSCA compliance.
  • To detect, prevent, and investigate abuse or fraud.

4. Text messaging

  • We send marketing text messages only where consent has been collected. Every message identifies the business and includes opt-out instructions.
  • Recipients can reply STOP at any time to opt out immediately; opt-outs are honored automatically. Reply HELP for help.
  • Message frequency varies. Message and data rates may apply. Mobile carriers are not liable for delayed or undelivered messages.

5. Who we share information with

We do not sell personal information. We share it only with service providers that help us run the product, under contract and only for that purpose:

  • Stripe — payment processing and subscription billing.
  • Supabase — database and authentication hosting.
  • Twilio — sending and receiving text messages.
  • Vercel — application and API hosting.

We may also disclose information if required by law, or to protect our rights, users, or the public.

6. Cookies and tracking

This website uses only strictly necessary cookies needed to load and secure the pages. We do not use advertising, analytics, or third-party tracking cookies, and we do not embed third-party trackers or pixels. Because of this, no cookie consent banner is shown. If that changes, we will update this policy and add a consent mechanism.

7. Data retention

We keep personal information for as long as your account is active and as needed to provide the service. Billing and messaging-consent records are kept for the periods recommended for TCPA and ROSCA compliance. You can ask us to delete data sooner (see Your rights), subject to legal retention obligations.

8. Your rights

Depending on where you live (including under the laws of California, Virginia, Colorado, and other US states), you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of its sale or sharing for targeted advertising — which we do not do. To exercise any of these rights, email Jmejiaa1999@gmail.com. We will not discriminate against you for exercising them.

9. Security

Personal information is encrypted in transit and at rest, and access is limited to what is needed to operate the service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

The service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date above will change, and material changes will be communicated where appropriate.

12. Contact

Questions or requests: Jmejiaa1999@gmail.com.

Back to home