Privacy Policy
Last updated: June 2026
This document is a template provided for general information and should be reviewed by qualified legal counsel before you rely on it.
1. Introduction
This Privacy Policy explains how Lumon LLC (“Lumon LLC,” “we,” “us,” or “our”), the operator of MunchCard, collects, uses, and shares personal data when you use the MunchCard app, the munchcard.app website, and related services (the “Service”). By using the Service, you agree to this Policy.
2. Information we collect
- Account information — such as your name, email address, and password or login identifiers.
- Phone number — used for sign-in, verification, and account notifications.
- Identity and KYC information — to issue a MunchCard and comply with financial regulations, our card-issuing partners may collect identity details (for example, legal name, date of birth, and a government identifier) needed for “Know Your Customer” (KYC) and anti-fraud checks.
- Transaction data — information about qualifying card transactions used to verify visits and apply rewards or creator commissions.
- Usage data — how you interact with the Service, including promos claimed, reels viewed, and features used.
- Device and technical data — such as device type, operating system, app version, IP address, and identifiers.
3. How we use information
- to provide, operate, and improve the Service;
- to issue and service the MunchCard, verify visits, and apply rewards and creator commissions;
- to verify identity, prevent fraud, and comply with legal and regulatory obligations;
- to communicate with you about your account, promos, and updates; and
- to analyze usage and develop new features.
4. How we share information
We do not sell your personal data. We share it only as needed to run the Service:
- Banking and card-issuing partners — including payment processors and issuing banks that provide the MunchCard and process transactions.
- Restaurants — participating restaurants receive information needed to honor a promo and reconcile verified visits.
- Creators — creators receive only aggregate performance data (such as the number of verified visits and resulting commissions); they do not receive your identity or card details.
- Service providers — vendors that host infrastructure, provide analytics, support, or communications on our behalf, under appropriate confidentiality obligations.
- Legal and safety — where required by law, to enforce our terms, or to protect the rights, safety, and security of users and the Service.
5. Data retention
We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter as required to comply with legal, tax, accounting, fraud-prevention, and regulatory obligations (which may apply to transaction and KYC records for extended periods). When data is no longer needed, we delete or de-identify it.
6. Security
We use administrative, technical, and physical safeguards designed to protect personal data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please keep your account credentials confidential.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@munchcard.app. We will respond consistent with applicable law. Some data may be retained where we have a legal obligation or legitimate need to keep it.
8. California privacy (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, and to not be discriminated against for exercising your rights. We do not sell or “share” personal information for cross-context behavioral advertising. To make a request, contact us at support@munchcard.app.
9. Children
The Service is intended only for adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has provided us personal data, contact us and we will take appropriate steps to delete it.
10. International users
The Service is operated from the United States and is intended for US users. If you access it from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your jurisdiction.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by other reasonable means and update the “Last updated” date above.
12. Contact
Questions about this Policy or your personal data? Contact us at support@munchcard.app.
Lumon LLC, United States