Privacy Policy
Effective October 3, 2026. This policy explains how ThePointsPro LLC (“The Points Pro,” “we,” “us”) handles information.
What we collect
- Cards you add to “My Cards.” The cards you choose to track, and optional details you enter (an opening date, a renewal date, an authorized-user count). Without an account these are stored against your browser session on this device; with an account they are saved to your account and follow you across devices.
- Calculator inputs. Spending amounts and purchase details you enter to run the calculators, used to produce your results.
- Account details, if you create an account: your email address, an optional name you provide (used to address you in messages), and your email preferences.
- Plan and billing status, if you buy a paid plan: which plan you hold, its status (for example trialing, active, or canceled), and identifiers that link your account to our payment processor. Payments are handled by Stripe; your payment card details go directly to Stripe and are never received or stored by us. Stripe processes them under its own privacy policy.
- Basic technical and usage data ordinarily processed to operate and secure a website (for example, log data), and any analytics we may add, disclosed as applicable.
We collect only what we need to provide the service. We do not knowingly collect information from children.
What we never collect
- Full credit- or debit-card numbers
- Card security codes (CVV/CVC)
- Bank, issuer, or financial-account login credentials
- Direct connections to your bank or card accounts
How we use information
To provide and improve the tools (rankings, comparisons, your wallet), to respond to you, to send updates you request, and to operate, secure, and maintain the service. Marketing communications, if any, are kept separate from required service communications and are never a condition of using the public tools.
Email we send you
If you create an account, we may send:
- Service email, sign-in codes, and credit, benefit, and certificate expiry reminders about the cards in your wallet. These support features you asked for; you can turn reminders off anytime in your preferences.
- Card news and insights, and occasionally sponsored offers (always clearly labeled). These are marketing: they are off unless you opt in, and every one has a one-click unsubscribe.
Sponsored offers, where present, are sent by us as first-party email. We do not share your email address or personal data with sponsors or advertisers, and sponsorship never affects our rankings or recommendations.
The mobile app
The Points Pro app for iPhone and Android uses the same account and wallet as the website, and this policy covers both. The app adds a few things the website does not:
- Push notifications. If you allow notifications, the app registers a delivery token for your device with Apple or Google's notification service and we store it against your account so reminders can reach that device. The token is not an identifier for you and is removed when you sign out, turn notifications off, or delete your account. You can turn notifications off at any time in the app or in your phone's settings.
- Sign in with Apple or Google. If you sign in this way, Apple or Google sends us your email address (or, with Apple's Hide My Email, a relay address) and, the first time, the name you choose to share. We use these only to create and recognize your account. Signing in with Apple also gives us a token we use solely to revoke that sign-in when you delete your account, as Apple requires.
- Photos. The app can set a profile photo from your photo library or camera. Only the picture you choose is uploaded, and only when you choose it.
- In-app purchases. Where a plan is bought inside the app, the purchase is made with Apple or Google, under their terms, and your payment details go to them, never to us. We receive the purchase record (which product, its status, and transaction identifiers) so your account reflects what you bought.
The app has no advertising measurement and no third-party analytics. It talks only to our own servers, to Apple or Google for sign-in, notifications and purchases, and to the issuer pages you choose to open.
Companion profile linking
If you accept a Companion invitation (or someone accepts yours), the two linked profiles share limited wallet information with each other: each person's active cards, their benefits and credits, reminder settings for those cards, and recorded credit usage, plus the certificates on those cards (free nights, companion certificates and passes). Whoever can see a shared card can also update its certificates. Depending on each person's plan, sharing may be one-way or two-way. Your Companion also sees a short display name for you (the name you set in preferences, or a generic placeholder). We never share account credentials, email preferences, billing details, or profile settings between linked users, and card ownership never changes. Either person can remove the link at any time under Preferences, which ends shared access immediately; records of past sharing activity are retained for audit purposes but are not visible to a former Companion.
Referring a friend
Your personal invite link is meant to be shared, including publicly, so treat anything shown on it as public. The page it opens shows one name: the display name you set in preferences, or your first name, or a generic placeholder if we do not have one. Your email address is never shown on it, and neither is anything about your cards, your wallet, or your plan.
We never send messages to your friends for you, and we never ask you for their contact details. Sharing happens entirely through your own email, messaging app, or social account.
When someone joins through your link we tell you the number of friends who joined. We never tell you which people they are, and we never tell them anything about you beyond the name on your invite page. If you were referred by someone, we record who referred you so the reward can be applied correctly.
Opening an invite link sets a cookie recording which link brought you, so the referral still applies if you create an account later. It holds only the referring member's invite code, no personal information, and it expires on its own.
We do not sell your personal data
We do not sell, rent, or trade your personal information to third parties. We may share information only with service providers that help us operate the site (for example, hosting, email delivery, or payment processing by Stripe), under obligations to protect it, or where required by law.
Your choices and rights
- Edit or remove any card in “My Cards” at any time, and remove reminders, statuses, watchlist entries, and your profile photo the same way, without deleting your account.
- Manage or unsubscribe from any emails you have opted into.
- Delete your account yourself, at any time, from your profile (Delete account). See “Deleting your account” below for what that removes and the little we keep.
- Request access to, correction of, export of, or deletion of information associated with you. Depending on where you live (for example, California and certain other states), you may have additional rights; contact us to exercise them.
Deleting your account
You can delete your account yourself, at any time, and you do not need to contact us:
- On the website: sign in, open Profile, choose Delete account, and confirm by typing your email address.
- In the app: open the Profile tab, tap Delete account, and confirm by typing your email address.
Deleting your account is permanent and takes effect immediately. It cannot be undone, and we cannot restore it. When you delete your account:
- Erased: your account and email address, your wallet and card details, reminders, tracked certificates, elite statuses, watchlist, preferences, profile photo, Companion link, referral link, the support messages stored with your account, and your email subscriptions.
- Canceled: any paid plan billed through our website is canceled at once, with no refund for the rest of the current period. A subscription bought through the App Store or Google Play can only be canceled there, and it keeps renewing until you cancel it with them.
- Kept, without your name or email: payment and donation records (amounts and dates), which we must keep for accounting and tax purposes, and card requests you made, which stay as anonymous requests. Your payment processor keeps its own billing records under its own legal obligations.
- Kept as proof of the deletion: a record that an account was deleted and when, holding a one-way cryptographic fingerprint of the email address instead of the address itself. We cannot read or email that fingerprint. It lets us confirm a deletion if you or a regulator asks, and it is never used for marketing.
We send one confirmation email to your address when the deletion completes, and nothing after that. If you cannot sign in and want your account deleted, write to us at the address below.
Cookies & sessions
We use a session cookie so features like “My Cards” work as you move around the site. The analytics and advertising-measurement cookies we use are described in the next section, and are handled consistently with applicable law.
Analytics & advertising measurement
We use Google Analytics to understand how the site is used (for example, which pages are visited and how visitors move between them), the Meta Pixel to measure whether our advertising on Meta platforms works (for example, whether a visit or signup came from an ad), and the OpenAI (ChatGPT Ads) Measurement Pixel to measure whether our advertising in ChatGPT works, in the same way. These tools set their own cookies and receive basic technical data about your visit, such as the pages you view and your browser type. They never receive the cards in your wallet, your calculator inputs, your email address, or anything else you enter on the site. Google, Meta, and OpenAI process this data under their own privacy policies. You can turn off the advertising measurement for your browser on Your privacy choices. We also honor Global Privacy Control: if your browser sends it, the Meta and OpenAI pixels never load and Google Analytics runs with advertising turned off. You can also limit measurement with browser privacy settings, content blockers, or the opt-outs each provider offers.
Changes
We may update this policy; we will revise the effective date above when we do.
Contact
Questions or requests: privacy@asktpp.com.