Privacy Policy

What we collect

When you sign up for a restaurant's rewards program:

• Your name and phone number. Required. The phone number is how staff find your card if your pass will not scan, and it is what stops you being signed up twice.
• Your email address. Optional. Used to identify you if you lose your pass and, if you agreed when you joined, to send you emails from the business.
• Your birthday month. Optional, and only the month — never the day or year. Used to send a birthday offer, on your pass or by email, if the restaurant offers one.

As you visit, we record each visit, reward earned and reward redeemed, along with when it happened and which staff member recorded it. That history is what your points balance is calculated from.

How we contact you

Through the pass in your wallet. Your card lives in Apple Wallet or Google Wallet, and updates — balance changes, a reward becoming available, an offer from the restaurant — arrive as notifications on that card. Mute notifications for the pass, or remove it, to stop these without deleting your rewards balance.

By email, if you agreed. If you gave an email address and ticked the box agreeing to it when you joined, the restaurant may send you marketing emails, such as offers, events and news, through Method Rewards. Every email includes an unsubscribe link, and unsubscribing stops them without affecting your card or your points. If you joined before 17 September 2026, when the signup form said we would not email you, we will not start emailing you unless you agree to it.

We do not send text messages. If that changes, we will ask for your permission separately before sending any.

Who sees it

• The restaurant you signed up with. Their staff can see your name, your balance and the last four digits of your phone number. Owners and managers can see your full record.
• No other restaurant using Method Rewards can see you. Signing up at one does not sign you up at another.
• Apple and Google, to the extent needed to deliver and update the pass on your phone. Their handling is governed by their own privacy policies.
• Supabase and Cloudflare, who host the database and the application on our behalf.
• Resend, who delivers emails on our behalf if you agreed to receive them.

We do not sell your information, share it with advertisers, or use it to build a profile of you across businesses.

How long we keep it

For as long as you are a member of the program, and until you or the restaurant asks us to delete it. Deleting your record removes your visit history along with it, so your balance goes too.

Your choices

• Stop the notifications by muting or removing the pass in your wallet app.
• Stop marketing emails with the unsubscribe link in any email, or by emailing us.
• See what we hold, correct it, or have it deleted by asking the restaurant, or by emailing us at privacy@methodoptimization.com. Tell us which restaurant and the phone number you signed up with.

Depending on where you live you may have additional rights over your information, including the right to a copy of it and the right to have it erased. Contact us at the address above and we will honour them.

Staff and the Method Rewards Staff app

The Method Rewards Staff app is used by restaurant employees behind the counter, not by customers. The only thing it collects about the person using it is an email address, which identifies the account that recorded each visit. Nothing about a diner is stored on the phone.

A venue phone is normally signed in with a pairing code from the restaurant's dashboard, which creates an account for that device alone. It is not a personal account and is not linked to anyone's Google or Apple ID.

• To delete a device or staff account, the restaurant can remove it from Settings in the Method Rewards dashboard, which revokes its access immediately. Or email us at privacy@methodoptimization.com from that address and we will delete it. Staff signed in with their own Google or Apple ID can also delete their own account from inside the app, under the menu next to their business name.
• What is kept afterwards. Deleting an account removes the account and its email address. The record that a visit happened stays in the restaurant's history, because a customer's balance is calculated from it and a rewards ledger that can be quietly rewritten is not worth keeping.

Facebook and Instagram, for business owners

This section is for restaurant owners and managers who connect their business's Facebook Page and Instagram account to the Method dashboard to publish posts. It does not apply to diners.

• What we access. When you connect, Facebook asks you to allow Method to see the Facebook Pages you manage (so you can choose one), to post to the Page you choose and read its posts (so we can link you to what we published), and to post to the Instagram business account linked to that Page. We store the name of the Page, the Instagram username, the identifiers Facebook uses for them, and an access token for the Page. We do not read your personal profile, friends, messages, comments or analytics, and we never see your Facebook password.
• Why. Only to publish the posts you write in the dashboard, either when you press Post now or at the time you schedule. We never post anything you have not written and approved there.
• How the token is kept. The access token is encrypted before it is stored, with a key that is held separately from the database, and it is never sent to your browser or shown in the dashboard. We use it only on our servers to publish your posts.
• Posts and photos. The caption and photo you publish are kept in your dashboard as a history of what was posted. Photos are stored at a public web address, because Instagram and Facebook fetch them from there to publish.
• Disconnecting and deleting. You can disconnect at any time from Social posts in the dashboard, which deletes the stored token and the Page and Instagram details. You can also remove Method from your Facebook settings under Business Integrations and ask Facebook to delete your data; Facebook then tells us, we delete the connection you made, and you get a confirmation code and a status page. Or email us at privacy@methodoptimization.com.

Children

Method Rewards is not intended for anyone under 13, and we do not knowingly collect their information. If you believe a child has signed up, contact us and we will remove the record.

Changes

If this policy changes materially we will update the date at the top of this page. The current version always governs.

Contact

Method Optimization LLC — privacy@methodoptimization.com