Privacy Policy — Spin Trail

Privacy Policy — Spin Trail

Effective Date: September 12, 2026

Spin Trail is operated by Bookgentl Innovation Pvt Ltd ("we," "us," "our"). This Privacy Policy explains how information is collected, used, disclosed, and safeguarded when you use the Spin Trail mobile application (package name com.haal.spintrail). It applies exclusively to Spin Trail.

Spin Trail is a multi-shop customer loyalty and reward platform. Customers earn promotional reward wheel spins after verified purchases at participating local merchant stores to unlock discount coupons and in-store offers. Participating shop owners manage store profiles, customer purchase verifications, and promotional campaigns.

1. Information We Collect

A. Customer Accounts

When you register or use Spin Trail as a customer, we collect:

Full Name: Used by participating shops to verify your identity when redeeming coupons or claiming rewards in-store.

Phone Number: Used for account creation, SMS/WhatsApp one-time verification (OTP), and looking up your member profile at store checkout.

Email Address: Used for login authentication, password recovery, customer support, and winner notifications.

Password: Stored strictly as a salted cryptographic hash (SHA-256 / bcrypt) on secure servers; plain-text passwords are never stored or accessible.

Third-Party Sign-In (Google & Apple): If you choose to authenticate via Google Sign-In or Sign in with Apple, we receive your name and email as authorized by your provider. We never receive or store your third-party account password.

B. Shop Admin Accounts

When you register or manage a shop on Spin Trail:

Business Details: Shop name, address, business category, operating hours, logo, and store photos.

Location Coordinates (Latitude & Longitude): Provided during store onboarding to show your shop on the in-app map for nearby customers.

Owner Contact Information: Business phone number and email for account administration and security notices.

C. Transactions and Loyalty Activity

Purchase Verification Claims: Purchase amounts, dates, bill/receipt identifiers, and transaction status submitted to earn spins.

Reward Records: Wheel spin outcomes, coupon codes issued, redemption timestamps, and expiration dates.

D. On-Device Only Data (Not Transmitted to Servers)

Biometric Information: If you enable the optional biometric app-lock (Fingerprint or Face ID), authentication is performed entirely on-device by your operating system's BiometricPrompt API. Spin Trail never accesses, transmits, or stores biometric samples.

Local App Preferences: Dark mode preferences, notification toggles, and cached store listings stored in on-device storage (SharedPreferences).

E. Permissions Requested

Camera (android.permission.CAMERA)Camera / Photo library: Used to scan QR codes in real time (not stored), and to let shop admins attach a photo of a purchase bill or a product image, which is uploaded and stored to provide proof-of-purchase and catalog display. These images are not shared with anyone except the shop associated with that purchase 

Location (ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION): Used optionally to detect nearby participating shops on the discovery map. Location data is never tracked in the background or sold.

Notifications (POST_NOTIFICATIONS): Used to deliver transactional alerts (e.g., purchase approval, won rewards, renewal reminders). You can disable notifications at any time in device settings.

2. What We Do NOT Collect

Spin Trail does not integrate third-party advertising networks or ad tracking SDKs.

Spin Trail does not collect or access your contact address book, SMS inbox, microphone, or background location.

Spin Trail does not collect or store credit card, debit card, or net banking credentials. Customer-facing payments are not processed inside the app.

3. How We Use Your Information

We use collected data solely to deliver, maintain, and protect our services:

1. Authenticate user sessions and secure accounts.

2. Verify customer in-store purchases and credit promotional wheel spins.

3. Generate and validate digital coupons and QR member passes.

4. Allow shop owners to view customer loyalty redemptions at their specific store.

5. Provide customer support and resolve transaction inquiries.

6. Prevent fraud, spam, and abuse of loyalty promotions.

4. How Information Is Shared

With Participating Merchants: When you claim or redeem a coupon, the specific merchant receives your name and coupon code to fulfill the reward in store. Merchants do not receive access to other shops' data.

Service Providers: We transmit data over encrypted connections (HTTPS/TLS) to secure backend cloud infrastructure operated on dedicated servers for authentication, database storage, and notification dispatch.

Legal Compliance: We may disclose information if required to do so by applicable law, court order, or governmental regulation.

No Sale of Data: We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Promotional Spins & Rewards Disclaimer

Spin Trail is a retail customer loyalty program. Spins on the in-app wheel:

Are promotional incentives granted solely upon verified merchandise or service purchases at participating physical shops.

Have no cash surrender value and cannot be exchanged for money, cryptocurrency, or cash equivalents.

Do not constitute gambling, betting, lotteries, or real-money gaming.

6. Data Retention and Account Deletion

Retention Policy

We retain personal data for as long as your account is active. Transaction records and redeemed coupon histories are retained for reasonable accounting and fraud-prevention periods as required by applicable laws.

How to Request Account and Data Deletion

In accordance with Google Play Developer Policies and data protection standards, users have the right to request deletion of their account and associated data:

In-App: Navigate to Profile → Settings → Account Security → Delete Account.

Web Deletion Request: Visit our dedicated deletion portal at: https://sites.google.com/view/spintrail-privacy/delete-account

Email Request: Send an email to support@bookgentl.com or help@bookgentl.com with the subject "Delete My Spin Trail Account" from your registered email address or mentioning your registered phone number. Upon receiving your verified request, your account credentials, personal profile, and active coupons will be permanently deleted from our primary databases within 30 days.

7. Children's Privacy

Spin Trail is not intended for or directed toward children under the age of 13 (or under 18 where applicable for merchant-sponsored promotions). We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us immediately for removal.

8. Security Measures

We implement industry-standard technical and organizational security measures, including HTTPS/TLS encryption for all data in transit, cryptographic password hashing, access-controlled cloud infrastructure, and role-based permissions to protect your information against unauthorized access, loss, or misuse.

9. Contact Us

If you have any questions, feedback, or requests regarding this Privacy Policy or your personal data, please contact us:

Entity: Bookgentl Innovation Pvt Ltd

Email: support@bookgentl.com or help@bookgentl.com

Website: https://bookgentl.com

Address: Bookgentl Innovation Pvt Ltd, India