Privacy notice

Version: 2026-09-19-session

What we save

REWealth stores your email address with Amazon Cognito to verify sign-in. Your game account stores a participant identifier, terms and privacy acknowledgement, optional marketing choice, collection claims, preferences and practice history. Consent records include the wording version and time.

How we use it

We use this information to provide sign-in, save and restore game progress, and send essential service updates. If you opt in, REWealth may send planning examples, product updates and offers. You can withdraw that optional choice through REWealth; opting out does not affect play or rewards.

Your profile and public leaderboard

You may add your name, company, website, phone and photo. First and last names are required to complete a game profile. New profiles appear on the public conference leaderboard unless you check “Hide my score.” If you appear, anyone viewing the conference leaderboard can see your name, company, photo and average Hard score with the number of rounds played. Your email, phone, website and individual answers remain private. You can hide your entry again in Settings.

When you choose Sign up for REWealth, your verified email, name, company, website and phone prefill its signup form through a short-lived, one-use link. The details are not placed in the URL. Uploaded profile photos are resized on your device and stored with your profile. For participating conferences, we may privately match your verified sign-in email to an attendee photo already provided in conference attendee information. We store an email matching key and a small copy of that photo to suggest it during initial profile setup. The attendee list is not published or searched by other players. You can remove or change the suggested photo before saving; it is not added to your saved profile or public leaderboard until you save your profile. We do not replace a photo you have saved or restore one you have removed.

Card scans and reward approvals

When you open a card link or scan its QR, we record the card design, conference, time, scan source and a random browser identifier. We do not store your IP address or browser user-agent in this scan record. This helps us understand which designs are in circulation. These records are scheduled for deletion 30 days after the conference closes. After you verify your email, we link your scan receipt to your account to qualify the free trial. A shared design QR does not identify an individual printed card.

Authorized staff can inspect your saved profile and collection, record which physical cards they inspected and punched, and approve your discount. Approval and redemption records retain the staff reference, time, qualifying designs and billing status for reward administration and dispute resolution. Subscription checkout and payment information are handled by REWealth billing and Stripe.

Signed-in Hard challenges store original answers and server timing so we can calculate scores and pack eligibility. Authorized staff can view pack balances, record pickups and review receipts. Short-lived personal QR passes let staff find your account without typing an email.

Account administration

Authorized staff can propose an email replacement for you to verify, correct Hard history, or delete your game account on request. Deletion blocks game sign-in and pending game signup links, removes your saved profile, collection, rounds and public leaderboard entry, and cancels queued account messages. We retain minimal deletion/audit markers and issued-benefit receipts. Invalidated temporary link records follow their existing expiration schedule; anonymous scans and the separate conference photo-suggestion directory follow their own retention. Existing REWealth accounts, billing sessions and subscriptions are not deleted or canceled by deleting a game account. A message already being delivered may still arrive.

Storage and camera

Account data is hosted using Amazon Web Services in the United States. This device also keeps game progress in browser storage. A secure sign-in cookie keeps you signed in across page refreshes for up to one day. Signing out revokes that session and removes the cookie; it is not used for advertising. Camera frames are processed on your device to read QR codes; scanning does not upload camera images. A profile photo is saved to your game profile only when you save your chosen or suggested photo. The account service does not receive payment details or information from your REWealth client accounts.

REWealth eligibility and game emails

After email verification, we check whether that address already belongs to a REWealth firm or user to determine new-customer reward eligibility. The game receives an eligibility result, not client, property or report information. Registering in the game does not create a REWealth firm. REWealth creates that firm only when you submit its separate signup form.

We send an account welcome and notices about staff-confirmed rewards. If you opted into marketing, your welcome can include a sample report instead. You can stop marketing in Settings or through the unsubscribe link without affecting play or rewards. Email delivery records are retained for up to 90 days. We retain limited suppression records for bounced or complained-about addresses to prevent repeated sends. We do not add email-open tracking or wrap reward links for click tracking.

Your choices

Guest quiz progress stays in this browser; card scans are recorded as described above. You can choose to add guest cards and practice history during registration or later in Settings. Marketing preferences can also be changed in Settings. Signing out leaves a local account copy for recovery of unsaved changes; browser site-data controls can clear it. Request access, correction, deletion or withdrawal of marketing permission through REWealth. We retain account data to provide the service until deletion is requested, subject to any required retention.