Last updated: 22 September 2026

Privacy Policy

This policy explains how Back to the Points ("BTTP", "we", "us") handles personal data today, on this pre-launch waitlist site, and describes - in advance and in plain language - how the BTTP app is designed to handle data once it launches. BTTP is currently a pre-launch marketing site only: we are not yet linking bank accounts, cards or loyalty programs, and none of the app-specific collection described below (transaction detection, SMS permission, linked accounts) is happening yet. This policy will be reviewed and re-published as the "Last updated" version before the app itself goes live.

Who we are

Back to the Points is operated by Back To The Points Pvt. Ltd. For any privacy question or request, contact info@backtothepoints.com.

Information we collect

On this waitlist site, today, we collect:

• Email address (required) - so we can contact you about early access.
• Phone number (optional) - only if you choose to give it, so we can reach you faster about early access.
• Your comment (optional free text) - whatever you tell us about your rewards and points experience.

Once the BTTP app launches, we plan to also collect, only from people who install the app and grant consent:

• Account details - name, email, phone number, and the card/loyalty programs you choose to add.
• Transaction alert data - with your explicit, revocable permission, the app reads bank and card-issuer transaction SMS alerts on Android to automatically detect purchases and calculate the points/miles they earn, so you don't have to enter every transaction by hand. See "App permissions" below for exactly what this does and does not include.
• Usage data - how you use the app (screens viewed, features used, crash/diagnostic data) to fix bugs and improve the product.
• Device data - device model, OS version and app version, for support and compatibility.

Non-storage disclosure: Whether on this site or in the app, we do not ask for and will never store your full card number, CVV, PIN, net-banking password, UPI PIN, or one-time passcodes (OTPs), under any circumstance.

App permissions (planned, for the app - not this website)

These permissions do not apply to this waitlist site, which does not request any device permissions. They describe how the BTTP Android app is designed to work once it exists, so you know in advance what to expect.

• SMS (Android only, optional, consent-based): used solely to detect transaction and points-earning alerts sent by your bank, card issuer or loyalty program, so the app can total your points/miles automatically. The parser looks only for transaction-alert patterns from recognized financial senders. It is not used to read personal conversations, OTP messages, or any message unrelated to a transaction alert, and message content is never shared with advertisers or unrelated third parties. You can decline this permission and use the app with manual entry instead.
• Camera (optional): only to scan a QR code or card artwork to help you add a card or loyalty program faster - never for identity verification (KYC) or biometric purposes.

Permissions we will never request: contacts, call logs, precise location, photo gallery/media, or general external storage access.

Why we collect it

Today, solely to run our early-access waitlist: to notify you when BTTP launches, and to understand what to build. Once the app launches, information will be used to: operate and personalize the service, detect and value your points/miles transactions, respond to support requests, prevent fraud and abuse, comply with legal obligations, and - only with your separate opt-in - send you product updates or promotional messages (which you can opt out of at any time). We do not use personal information for third-party advertising, and we do not sell it to anyone.

Who we share it with

We do not sell personal data. We may share limited data with: infrastructure and service providers who help us run the site/app under confidentiality obligations (for example, cloud hosting and error-monitoring tools); and regulators or law enforcement where we are legally required to. BTTP does not offer lending, insurance or credit-score products and does not share your data with lenders, insurers or credit bureaus.

Cookies & tracking

This website does not currently use cookies, analytics or tracking scripts. If that changes (for example, to add basic, privacy-respecting analytics), we will update this section first.

Where it's stored, and security

Waitlist submissions are stored in a Google Sheet inside our Google Workspace account, reachable only through a private, authenticated server-side endpoint - your browser never talks to Google directly. Access is restricted to the BTTP founding team, and reasonable technical and organizational measures are used to protect it. No method of storage or transmission is ever 100% secure, and we cannot guarantee absolute security.

How long we keep it

We keep waitlist entries until BTTP launches publicly or for up to 24 months, whichever is sooner, unless you ask us to delete your data sooner. Once the app launches, we will publish a specific retention schedule for account, transaction and usage data here before that data starts being collected.

Your rights, and data deletion

You can ask us at any time to see what we hold about you, correct it, or delete it. Email info@backtothepoints.com from the address you signed up with and we will action your request within 30 days, subject to any legal retention requirements. If you are in India, these rights are provided under the Digital Personal Data Protection Act, 2023.

Consent

Where we rely on your consent - for example, an optional phone number today, or the SMS permission the future app will request - that consent is free, specific, informed, unconditional and unambiguous, and you may withdraw it at any time by emailing info@backtothepoints.com. Withdrawing consent does not affect anything already done with your permission beforehand, and may mean reduced functionality (for example, falling back to manual entry if you withdraw the SMS permission).

Changes to this policy

If this policy changes, we will update the "Last updated" date above. Material changes will be called out on this page.

Governing law

This policy is intended to comply with the Digital Personal Data Protection Act, 2023, together with its implementing rules, and the Information Technology Act, 2000, as applicable in India.

Terms of Service

By joining the waitlist you agree to our Terms of Service, which cover this pre-launch site only.