Privacy Policy

Heads up: These policies cover the consumer Upswell Play app (cash-back rewards for diners). Restaurant partner agreements and B2B services are governed by separate contracts — please contact choi@upswell.ai.

Last updated: November 4, 2025

This policy explains how Upswell collects, uses, discloses, and protects information when users access our apps, websites, and services for restaurant engagement and cash-back rewards.

1. What we collect

A. Information you provide

Account identifiers (phone number as primary identity, email, display name)
Payout details (Venmo / PayPal IDs)
Content and profile (reviews, food preferences, optional profile info)
Social graph (connections / followers)
Support communications sent to cs@upswell.ai

B. Receipts & transaction verification

Receipt photos / uploads with OCR-extracted fields
Card-linked validation through Plaid (no stored login credentials)

C. Usage and device information

Engagement data (screens viewed, taps, flows)
Device / log data (IP address, timestamps, diagnostics)
Cookies and SDKs for functionality and analytics

Tableside Feedback

When you leave a note through an Upswell feedback device at a participating restaurant, Bobidi, Inc. (operating as Upswell) collects the message you write, the date and time of your visit, the restaurant you visited, and — if you choose — the phone number where we should send the voucher the restaurant offered you. We use the message to power the feedback report we share with the restaurant; the timestamp helps the right shift see it; the phone number is used to deliver the voucher.

We keep feedback notes for up to 12 months for trend analysis and product improvement, then delete or anonymize them. Phone numbers used only for a one-time voucher are deleted within 30 days of the voucher’s expiration. Numbers in a marketing program stay active until you reply STOP or ask us to remove them.

Restaurants see the feedback note, the time of visit, and any marketing opt-in for their own program. Restaurants don’t see your phone number for any purpose other than the messages you signed up for, and they can’t export numbers off the platform.

We don’t sell your information, share it with cross-context advertisers, or use it to build a profile across other sites and apps. Our SMS partner processes the messages on our behalf and is contractually limited to that purpose.

California residents: see section 9 for how to exercise your CCPA/CPRA rights, including the right to know, delete, correct, and limit use of sensitive information.

2. How we use information

We use data to operate our services, verify eligibility, prevent fraud, display social features, improve personalization, and comply with legal obligations.

3. How we share information

We share information with service providers, restaurant partners (aggregated / de-identified insights), and for legal compliance or business transfers. We do not sell your personal information.

4. No sale of personal information

We do not sell information under CCPA / CPRA definitions.

5. Your choices & controls

You can control visibility of names, reviews, social activity, and preferences. Access, correction, and deletion requests go to cs@upswell.ai.

6. Data retention

Information is retained only as long as necessary for service provision and legal compliance.

7. Security

We use administrative, technical, and physical safeguards to protect information, though no method is 100% secure.

8. Children's privacy

Our services are not directed to children under 13.

9. California privacy notice

California residents have rights to know, delete, correct, and limit use of personal information. The cash-back program is disclosed as a "financial incentive."

10. International users

Information may be processed in countries with varying data protection levels.

11. Changes to this policy

Material updates will be communicated via in-app notice or email.

12. Contact us

Questions should be directed to cs@upswell.ai.