Privacy Policy

Last updated: June 30, 2026

1. Introduction

Out Of Nine ("we," "us," or "our") operates the Out Of Nine mobile application (the "Customer App"), the Out Of Nine Scanner application (the "Scanner App"), and the admin dashboard (collectively, the "Services"). This Privacy Policy describes how we collect, use, and protect your personal information.

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you create an account, we collect your email address, display name, and optionally your phone number and profile photo.
  • Authentication Data: If you sign in via Google or Apple, we receive your name and email address from those providers. We do not store your Google or Apple passwords.
  • Waitlist Email: If you join our pre-launch waitlist, we collect only your email address, for the sole purpose of notifying you when the app launches. We do not use it for any other marketing, and you can ask us to remove it at any time using the contact details below.

2.2 Information Collected Automatically

  • Transaction Data: We record loyalty transactions (purchase amounts, Nines earned) when you scan your QR code at a participating location.
  • Device Information: We may process device and app metadata (such as app version, OS version, and device model) to keep the Services secure and operational.
  • Diagnostics: We may process technical logs to investigate failures, prevent abuse, and improve reliability.
  • Crash Reports: If the app crashes, we collect an automatic crash report (error details, device model, OS version, app version) through Sentry to fix the problem. These reports are not used for advertising.
  • Notification Token: If you allow notifications, we store the push token your device issues so we can send you reward and perk updates. You can turn notifications off at any time in your device settings.

2.3 Information We Do NOT Collect

  • Location data
  • Contacts or address book
  • SMS or call logs
  • Photos (unless you upload a profile picture)
  • Financial or payment information (we do not process payments)
  • Health or fitness data

3. How We Use Your Information

  • To create and manage your loyalty account
  • To track and display your Nines balance and transaction history
  • To generate secure QR codes for in-store scanning
  • To send service-related notifications (e.g., account verification)
  • To improve app quality, security, and reliability
  • To detect and resolve technical issues

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Supabase (database & authentication provider) — stores your account and transaction data securely.
  • Infrastructure providers (such as hosting and delivery services) — help us operate the Services securely and reliably.
  • Sentry (crash reporting) — receives automatic crash reports and the technical details needed to diagnose them, strictly on our behalf.
  • Expo (push notification delivery) — delivers the notifications you opt in to receive.
  • Google / Apple — only if you choose to sign in with these providers.

5. Data Storage & Security

Your data is stored securely in our Supabase database with encryption at rest and in transit. Authentication tokens are stored in your device's secure storage (Keychain on iOS, EncryptedSharedPreferences on Android). We implement row-level security policies to ensure you can only access your own data.

6. Your Rights

You have the right to:

  • Access your personal data via your profile in the app.
  • Update your profile information at any time.
  • Delete your account and all associated data by using the "Delete Account" option in the app settings, or by contacting us.
  • Export your data by contacting us at the email below.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymized analytics data may be retained for up to 12 months.

8. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Your continued use of the Services after changes are posted constitutes acceptance of the updated policy.

10. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173).

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us: