incentifi rewards healthy activity with points and travel-or-gift-card rewards. This notice explains, in plain English, what personal information we collect about you, why, and your rights. It covers both members who use the incentifi app and visitors to our website at incentifi.io. We are the controller of your information.
The controller is Incentifi Ltd (company number 14594220), registered at Seven, Grange Lane, Northampton, United Kingdom, NN6 9AP. For any privacy question, contact Paul Kelbie at [email protected].
Account details: your name, email, and a link to the employer who invited you.
Activity and health data: your steps and, over time, activities, distance, active minutes and sleep. We collect these through Spike from the source you connect — Apple Health, Google Fit, Fitbit, Oura, Garmin or Whoop. This is sensitive (special-category) data.
Rewards data: your points and coin balances and your redemption history.
Payment information: when you buy a gift card with money rather than coins, your payment is handled by our payment providers — Stripe for card payments, or Klyme for open-banking (bank) payments. We receive confirmation that a payment succeeded, but we never see or hold your card details.
Technical data: a device token for notifications, and your IP address and request information for security.
We use your data to run the wellbeing programme: to turn your activity into points and coins, to let you redeem them, and to provide optional features like leaderboards and challenges. Our lawful basis is your consent, and for health and activity data your explicit consent. Using the app and connecting your activity are optional — you can use the app without connecting tracking, though some features will be limited, and you can withdraw consent at any time.
Leaderboards are off by default. If you choose to opt in, your name and daily step ranking can be seen by colleagues and your employer. If you do not opt in, your activity is not shown to anyone on a leaderboard. You can opt out again at any time.
Your employer sees aggregated, anonymised information about participation — never your individual health or activity data — unless you have opted in to a leaderboard. We suppress figures for very small teams so individuals cannot be identified.
We use trusted providers to run the service: L33 Solutions Ltd (build and hosting, on UK infrastructure via eUK), Spike (wearable data), Mailjet (email), Cloudflare (security) and Firebase (notifications). When you redeem, we share only what is needed to fulfil your reward: with Tillo, to issue a gift card; and with Travel Code EU Sp. z o.o., the travel provider and merchant of record, to make a travel booking. When you pay for a gift card with money, we share payment information with Stripe or Klyme to take the payment. We never share your health data with any of these partners. A full list of the providers we use is available in our Sub-processor list.
You can buy a gift card using your coins or with money, but not a combination of both. Where you pay with money, incentifi is the seller of the gift card to you, and the payment is processed by Stripe (card) or Klyme (open banking). We do not see or store your card details. Travel bookings are sold by the travel provider, Travel Code EU Sp. z o.o., not by incentifi, and any money you pay towards a booking is handled by the travel provider under its own terms.
We use analytics to understand how the app and website are used, so we can improve them. Our website uses Google Analytics, which sets cookies to measure how visitors use the site; you can accept or reject these when you visit, and manage your choice at any time through our Cookie Policy. In the app, we use analytics to measure feature usage in a similar way.
App analytics — to be finalised. The analytics tool used inside the app is being chosen. This section will be confirmed once that decision is made and the position is reviewed.
You can browse incentifi.io without giving us any personal information. If you fill in a contact or enquiry form, we use the details you give us — such as your name, email and message — to respond to you and, where relevant, to follow up about incentifi for your organisation. Our website also uses cookies as described in our Cookie Policy.
Some of our providers are based outside the UK. Spike, Cloudflare, Firebase and Google (for website analytics) are based in the United States, and Travel Code EU Sp. z o.o. is based in the European Union (Poland). Where we transfer your data outside the UK we put an appropriate safeguard in place. [This safeguard is being finalised — see the Legal Review Register.]
We keep your data for as long as your account is open and delete it after your account is closed, in line with our Data Retention Policy. Anonymous, aggregated statistics that cannot identify you may be kept.
Access a copy of your data, and have inaccurate data corrected.
Have your data erased, or restrict or object to its use.
Receive your data in a portable format.
Withdraw your consent at any time, without affecting prior processing.
To exercise any right, contact [email protected]. You can also complain to the Information Commissioner's Office (ico.org.uk), though we hope you will contact us first.
incentifi is for people aged 18 and over. We may update this notice and will tell you about significant changes.