Privacy Policy

1. Who we are

Points Now (“Points Now”, “we”, “us” or “our”) is operated by Points Now Pty Ltd (ABN 67 695 152 624), based in Western Australia, Australia. We provide a subscription service that aggregates loyalty-program offers and award-flight availability. This policy explains how we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

• Account information — your name and email address, provided directly or via Google or Apple sign-in.
• Subscription & billing — your subscription status and the identifiers needed to manage it. Card and payment details are collected and processed directly by Stripe, our PCI DSS-certified payment provider. We never receive, see or store your full card number, and your payments are also subject to Stripe’s own privacy policy.
• Preferences — your language, notification settings and flight-alert routes/cabins.
• Device & push — a push-notification identifier (via OneSignal) when you enable notifications.
• Usage & analytics — how you interact with the app, collected via privacy-focused analytics. You can opt out in your account settings.
• Communications — messages you send us (for example, via the contact form).
• Technical & security data — limited information such as your IP address, device and browser type, and sign-in activity, used to keep your account secure and to operate the service reliably.

3. How we use your information

• To provide, maintain and personalise the service;
• To authenticate you and keep your account secure;
• To process your subscription and payments;
• To send the offers, award-availability and flight alerts you have asked for (push or email);
• To respond to your enquiries and provide support;
• To analyse and improve the service, and to comply with our legal obligations.

4. Service providers who process data for us

We rely on a small number of trusted providers to operate the service. They act only on our behalf and under our instructions, may use your information solely to perform their specific function for us, and are not permitted to use it for their own purposes. We never sell your personal information.

• Supabase — secure sign-in and database hosting. Your account data is stored in a database located in Australia (Sydney);
• Stripe — subscription payments and billing;
• OneSignal — push notifications, if you enable them;
• Resend — transactional and notification emails;
• Google / Apple — sign-in, only if you choose to use them;
• A privacy-focused analytics provider — product analytics to help us improve the service; you can opt out at any time in your account settings.

Your account and its data are stored in Australia. Some providers that deliver specific functions (such as payments, email or push notifications) may process limited information overseas solely to perform that function.

5. Data retention

We keep your personal information for as long as your account is active and as needed to provide the service, then delete or de-identify it when it is no longer required, unless we are legally required to retain it.

6. Your rights

You may request access to, or correction of, the personal information we hold about you, and you may ask us to delete your account. You can manage notification preferences and opt out of analytics at any time in your account settings. To exercise these rights, contact us using the details below.

7. Security

We take reasonable steps to protect your information, including encrypted connections and access controls. Payment card data is handled entirely by Stripe and never reaches our systems. No method of transmission or storage is completely secure, but we work to safeguard your data.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

8. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “last updated” date above.

9. Contact us

For any privacy questions or requests, contact us at support@pointsnow.com.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).