Privacy Policy

Information we collect

If you use the RefferAll app as a resident

• Account details — your name, email address, phone number (optional), and a securely hashed password. We never store your password itself.
• Your community — the property and unit you tell us you live in, so we know which rewards you qualify for.
• Referrals you make — the name, email and phone number of anyone you choose to refer, and the status of that referral as it progresses.
• Rewards — your points balance, the reward you select, and the delivery details needed to fulfill it.
• Notifications — if you enable push notifications, a device token so we can send them. You can turn this off in your device settings at any time.

If you click someone's referral link

You do not need an account to click a referral link. When you do, we record the click so the resident who referred you can be credited:

• Technical information — the type of device and browser you used, the page that referred you, and the time of the click.
• Your IP address — stored as a one-way cryptographic hash, not in its original form. We use it only to detect automated abuse and to avoid counting the same click twice. It cannot be reversed back into your IP address.
• A single cookie (ra_sid) — a random identifier with no personal information in it, used to link your click to the enquiry you make afterwards. It expires after 90 days.
• Details you choose to give us — if you fill in the short form on the welcome page, your name, email and phone. This is what allows us to recognise you later and credit the right resident. Providing it is optional; you are forwarded to the property either way.

Information we receive from property managers

Participating property management companies send us their monthly move-in report, which lists residents who have newly moved in — typically a name, unit number and move-in date. We use it for one purpose: to determine whether someone who was referred actually signed a lease, so the referring resident can be paid. We do not receive rent, payment, credit or background-check information.

How we use this information

• To operate the referral program: crediting the correct resident when a referral results in a lease.
• To deliver rewards you have earned.
• To send you service messages — for example, telling you that a reward has been unlocked.
• To detect and prevent fraud, such as automated clicking or attempts to claim rewards that were not earned.
• To give property managers aggregate reporting on how their referral program is performing.

Who we share it with

We share personal information only with the service providers that make the product work:

• Neon — our database host, where your account information is stored.
• Vercel — our application host, which serves the website and the app's API.
• Resend — our email provider, used to send reward notifications and property reports.
• The property management company for the community you live in or were referred to, so they can verify and honour the referral.

We may also disclose information where we are legally required to do so. We do not sell or rent personal information to anyone, ever.

How long we keep it

We keep your account information for as long as your account is open. Referral and reward records are kept while the referral is active and for a period afterwards, so that a reward can be verified and disputed if necessary. Anonymous click records, which contain no name or email, are retained for analytics. When you delete your account, we remove your personal information as described below.

Deleting your account and your data

You can have your account and personal information deleted in either of two ways:

• In the app — open Settings, choose Delete account, and confirm. This removes your account immediately.
• By email — write to eli@reffrall.com from the email address on your account and ask us to delete it. We will action it within 30 days.

When you delete your account we permanently remove your name, email address, phone number, password, referral links, and the contact details of people you referred. We may retain a record that a reward was paid where we are required to for financial or tax reasons; that record does not identify you beyond what the law requires.

Security

All traffic to RefferAll is encrypted in transit using HTTPS. Passwords are stored only as salted hashes and are never readable, including by us. IP addresses are hashed before storage. Access to production data is restricted to authorised administrators.

Children

RefferAll is not directed at children and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to have it deleted, and to object to certain uses of it. To exercise any of these rights, email us at eli@reffrall.com. We will not discriminate against you for making a request.

Changes to this policy

If we change how we handle personal information, we will update this page and change the date at the top. Material changes will be communicated in the app.

Contact us

Questions about this policy, or about the information we hold on you, can be sent to eli@reffrall.com.