Who handles your information
appyRewards Inc. operates appyJunto. Contact and postal details appear below and on the Contact page. We handle account, service administration and support information. For employee content managed on behalf of a company, that company decides its purposes and access rules; employees can contact their administrator as well as our team.
Information used to provide the service
We process names, work email, company details and address, authentication information, group memberships, point movements, campaign participation, submitted messages and photos, and security records. Optional profile information may include a birthday. Unverified registration details are temporarily stored until verification or expiry. No payment-card details are collected by this release.
Purposes and access
Information is used to create and secure accounts, provide company features, send service emails, track points and awards, prevent abuse and answer support requests. Authentication requests and registration attempts are limited using keyed hashes of network addresses. Authorized colleagues see information made available inside their company; administrators have the management access described in the product guides. We do not sell personal information through this product.
Service providers and transfers
Hosting and email delivery providers process information necessary to run the service; transactional email uses SparkPost. The Roby chatbot, hosted on appyreward.com, is loaded only when you open it. Its notice currently states that messages are processed by OpenAI and retained for 30 days by default for follow-up, and sent to our team only after confirmation. Read the notice in the chat and avoid sensitive information. The demo link opens appyMeeting. These services may process data in the United States or other countries; where required, applicable transfer safeguards must be used. Stripe billing and gift suppliers will be described when those features open.
Cookies and retention
This site uses cookies for the session, authentication and your chosen language. This release adds no advertising or analytics trackers. Opening an external service may use that service’s cookies. Registration details are erased when their verification expires by the scheduled cleanup; temporary request records are then removed after the configured retention period, seven days by default. Completed registration keeps the necessary company, account and terms-acceptance records. Point and audit history is retained to explain transactions; other data is retained only as needed for service, support, security and legal obligations. Account closure does not automatically erase records that must be retained.
Your choices and rights
You can update available profile fields and contact your administrator or our team for access, correction, deletion or other applicable rights. Identity and authority may need verification. Where applicable, processing relies on the service contract, legitimate interests in security and operations, legal obligations, or consent for optional uses. Rights and exceptions depend on applicable law; you may also contact your data protection authority where available. We use access controls and authentication protections, but no system can guarantee absolute security. Material privacy changes should be notified to administrators.
295 Madison Avenue, Suite 1130, New York, NY 10017, USA
Contact