Privacy Policy

1. Who we are

Points Now (“Points Now”, “we”, “us” or “our”) is operated by Points Now Pty Ltd (ABN 67 695 152 624), based in Western Australia, Australia. We provide a subscription service that aggregates loyalty-program offers and award-flight availability, through our website and our iOS and Android apps. This policy explains how we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

• Account information — your name and email address, provided directly or via Google or Apple sign-in.
• Subscription & billing — your subscription status and the identifiers needed to manage it. Card and payment details are collected and processed directly by Stripe, our PCI DSS-certified payment provider. We never receive, see or store your full card number, and your payments are also subject to Stripe’s own privacy policy.
• Phone number — optional. If you add one, we use it to send the SMS flight alerts you turn on and to match you to your account if you join our members’ WhatsApp group. We confirm it is yours with a one-time code sent by SMS.
• Preferences — your language, notification settings and flight-alert routes/cabins.
• Device & push — a push-notification identifier (via OneSignal) when you enable notifications.
• Usage & analytics — how you interact with our website and apps, such as the pages and screens you view, the searches you run and the offers you open, together with an approximate location (country and city) derived from your IP address. Collected via privacy-focused analytics; you can opt out in your account settings.
• Communications — messages you send us (for example, via the contact form).
• Technical & security data — limited information such as your IP address, device and browser type, and sign-in activity, used to keep your account secure and to operate the service reliably.

3. How we use your information

• To provide, maintain and personalise the service;
• To authenticate you and keep your account secure;
• To process your subscription and payments;
• To send the offers, award-availability and flight alerts you have asked for (push, email or SMS);
• To send you news and offers from Points Now by email or SMS. You can unsubscribe at any time in your notification settings or using the link in any marketing email;
• To respond to your enquiries and provide support;
• To analyse and improve the service, and to comply with our legal obligations.

4. Service providers who process data for us

We rely on a small number of trusted providers to operate the service. They act only on our behalf and under our instructions, may use your information solely to perform their specific function for us, and are not permitted to use it for their own purposes. We never sell your personal information.

• Supabase — secure sign-in and database hosting. Your account data is stored in a database located in Australia (Sydney);
• Stripe — subscription payments and billing;
• OneSignal — push notifications, if you enable them;
• Resend — transactional and notification emails;
• Twilio — SMS alerts and verification codes, only if you add a phone number;
• Google / Apple — sign-in, only if you choose to use them;
• A privacy-focused analytics provider — product analytics to help us improve the service; you can opt out at any time in your account settings.

Your account and its data are stored in Australia. Some providers that deliver specific functions (such as payments, email, SMS or push notifications) may process limited information overseas solely to perform that function.

5. Data retention

We keep your personal information for as long as your account is active and as needed to provide the service, then delete or de-identify it when it is no longer required, unless we are legally required to retain it.

6. Your rights

You may request access to, or correction of, the personal information we hold about you. You can delete your account at any time from the Account screen in our app, or by asking us. You can manage notification preferences, unsubscribe from marketing and opt out of analytics at any time in your account settings. To exercise these rights, contact us using the details below.

7. Security

We take reasonable steps to protect your information, including encrypted connections and access controls. Payment card data is handled entirely by Stripe and never reaches our systems. No method of transmission or storage is completely secure, but we work to safeguard your data.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

8. Age

Points Now is intended for people aged 18 and over, as set out in our Terms of Service. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “last updated” date above.

10. Contact us

For any privacy questions or requests, contact us at support@pointsnow.com.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).