How We Protect Your Data
Reward My Data · A public benefit community centered around data privacy and economic inclusion
Why It Matters
Your Data Has Probably Already Leaked.
Some of the biggest names in banking, phones and health care have been breached. Every company that quietly holds your data is one more place it can leak from.
3 billion
accounts
Yahoo, 2013 to 2016
2.9 billion
records
National Public Data, 2024
190 million
people
Change Healthcare, 2024
147 million
people
Equifax, 2017
106 million
people
Capital One, 2019
73 million
customers
AT&T, 2024
Sources: Yahoo and Verizon (2017), National Public Data reporting (2024), UnitedHealth Group (2025), FTC (Equifax, 2019), Capital One (2019), AT&T (2024).
What We Do Today
We Don’t Keep What We Don’t Need
We never store full card numbers, we don’t collect your location, and health items are removed from every receipt as it’s read.
Encrypted and Stored in the US
Your data lives with Supabase on Amazon Web Services in Oregon, encrypted at rest (AES 256) and in transit (TLS). Supabase is SOC 2 Type 2 and ISO 27001 certified, and every database connection must be encrypted.
Only You Can See Your Records
Every table in our database is locked so each member can see only their own records. Receipt photos are never public.
Stripped Before It’s Shared
Before any data is combined and shared, your name, card and contact details are removed. We never sell your name, email or phone number.
Passwords We Can’t Read
Your password is stored only in scrambled (hashed) form by our login provider. Not even we can see it.
Leave Any Time
Download everything you shared, or delete your account. Deleting it erases your account details, photos and login.
We Attack Ourselves Every Day
So We Find the Weak Spots Before Hackers Do.
Every day, 80+ automated attacks try to break into Reward My Data: as a stranger, as a member reaching for someone else's data, and as someone trying to give themselves points or admin powers. Every one must fail. If one ever gets through, we're alerted right away.
Coming Next
Coming
AI Agents That Try to Hack Us, Around the Clock.
Next, we're adding AI agents that think like hackers and keep looking for new ways in. We'll share what they find and what we fixed with the community.
If Something Ever Goes Wrong
No system is perfectly secure. If a breach ever affects you, we will tell you as the law requires, and tell the community what happened and what we're doing about it.
Protect Yourself Everywhere Else Too
Freeze your credit with all three credit bureaus (it's free), turn on two step verification wherever you can, and use a password manager. To check if your email showed up in a known breach, try Have I Been Pwned.
Join the Reward My Data community
A public benefit community centered around data privacy and economic inclusion. It's your data: protect it, get rewarded, and have a say.
Join free →