Perk privacy policy

What Perk reads

With your permission, Perk reads your Gmail with Google's read-only scope (gmail.readonly). It cannot send, change or delete email. It looks at messages from the last year and new messages once a day.

What Perk stores

• For each message it checks: sender, subject, date, a snippet of at most 500 characters, and whether it looked like a benefit.
• For each benefit it finds: the brand, value, expiry date, conditions and promo code, plus which message it came from.
• What you do with benefits in the app (viewed, used, dismissed, reminders sent).
• Your Gmail address and a Google refresh token, encrypted (AES-256-GCM) before it is stored.

Perk never stores full email bodies. A message body is read in memory only when a message looks like a benefit, used to extract its details, and then discarded.

To avoid re-checking the same newsletters for every user, Perk keeps an anonymous record that a mail template (a one-way keyed hash of the sender and subject pattern, which cannot be read back) was not a benefit. It is shared only after at least three different users received it. Likewise, sender domains (for example lufthansa.com) that produced benefits for at least three users are checked first for everyone.

How your data is processed

• AI models, reached through Vercel AI Gateway, classify each message from its sender, subject, date and snippet. For likely benefits, a model reads the message text to extract the details. The models only return structured results; they cannot act on your account.
• Data is stored in Supabase (Frankfurt, EU). The API runs on Vercel, and background jobs run on Inngest.
• Reminders are scheduled on your phone. To show brand logos, the app asks Google's favicon service for a brand's public website address (for example amazon.de), never your email or address.
• Perk has no ads and no analytics trackers, and does not sell or share your data.

Google API data

Perk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to find and track your benefits, is not used for advertising, and is not read by people except where you ask for help, it is required for security, or the law requires it.

Deleting your data

• In the app, open Settings → Delete account. Perk revokes its Gmail access at Google and permanently deletes your benefits, message records, history and account.
• You can also remove Perk's access at any time in your Google account permissions.

Contact

Questions or deletion requests: knowhrishi@gmail.com.