Privacy
X Mart Brazil Matthews LLC is responsible for FreshPoints, the Xmart Brazil loyalty app. This policy explains what information is processed, why it is used and how you can manage your profile and make requests about your information.
Use limited to FreshPoints
Xmart uses customer data only for FreshPoints and its operation, as described here. It does not use this data for external WhatsApp campaigns, email marketing or Meta/Google ads. This does not exclude processing by the technical services needed for the program, described below, or promotional notifications authorized in the app.
Profile and loyalty information
The service handles phone numbers, account and customer identifiers, names, birthdays when provided, language, preferred store and communication preferences. Existing profiles, profiles created or edited through the admin panel, and spreadsheet imports may contain email addresses. Current app sign-in uses a phone number, not email. Square purchases linked to the customer supply amounts, points, activity and loyalty history.
How information is used
Information supports sign-in, matching purchases to accounts, points calculation and display, redemptions, history, profile updates, support and operational records for integrity and abuse prevention. Birthdays and points-derived tiers also select audiences for promotional campaigns authorized by customers in the app.
SMS and notifications
Sign-in sends the phone number to the authentication service and SMS provider. Promotional notifications depend on the corresponding profile preference and device permission. Delivery uses a push identifier linked to the customer, platform and language. Registration with Expo also sends the operating system push token, an installation identifier and technical application identifiers. You can turn off the promotional preference in Profile; this does not automatically erase records held by providers.
Services involved
Supabase provides authentication and storage; Twilio participates in SMS delivery and verification; Square supplies purchase events; Expo and the operating system notification service relay push messages. Expo also distributes compatible app updates. When bot checks are enabled, Cloudflare Turnstile processes technical signals, such as IP addresses and browser and connection information, for security and to improve bot detection. Vercel hosts web pages and Sentry receives technical diagnostics to investigate errors and performance. Email contact uses Gmail.
Technical data and security
Technical services may receive error reports and information about performance, devices, networks and app connections. To distribute updates, Expo Updates also sends an installation identifier, the device operating system, app version information and information about updates and previous failures. Sentry diagnostic filters do not automatically cover this information sent separately to Expo. The app uses secure device storage for sign-in session details. These measures reduce risks but do not make all records anonymous or guarantee absolute security.
Diagnostic interactions
To investigate failures, diagnostics may include taps on app controls, their labels, screen events, and technical session and installation identifiers. This context supports app functionality, not external campaigns. Filters reduce personal data in reports but do not make all diagnostics anonymous.
Your controls
In Profile, review or edit available fields, change language and promotional preferences, and select “Export my data” or “Delete my account”. Turning off promotions does not delete the account. Uninstalling the app does not delete the account either. Export includes profile details, preferences, points balance and activity, linked purchases, redemptions and, where present, raffle entries, notification deliveries, device registrations and your account activity. It does not include every internal audit record or independent provider record. Contact the email below to request access, correction or deletion of information that is not shown in the app.
What happens when you delete your account
Once completed, deletion removes your login and clears profile details, including your name, phone number, email and birthday, as well as notification associations held by FreshPoints. You lose access to the account and its points. Transaction, redemption and audit records remain, along with internal identifiers and payment references. Clearing the profile does not necessarily make these records anonymous. If the app reports that deletion failed, try again or contact support; do not consider the account deleted before confirmation.
Records retained by FreshPoints
The rule defined for implementation keeps profile information while the account is active and removes direct profile details when account deletion is completed. Minimum financial records of purchases, points, refunds and redemptions will be retained for 7 years after the last financial movement related to the transaction, without keeping the full profile. Operational logs will have a 90-day period; integration failures and temporary redemption details, 180 days; security, request receipts and closed support cases, 12 months; technical quota records, 31 days. Notification delivery records will have a 90-day period after completion or expiration, or will be removed sooner on account deletion. A documented legal obligation or dispute may justify additional retention limited to what is necessary. These periods are not yet enforced by production cleanup. Use the contact below to request an assessment of access, correction or deletion of retained records.
Backups and records in other services
Backups may contain earlier versions of information, including versions from before account deletion, until replaced through the backup cycle. A limit of 30 days after copy creation has been defined for copies managed by Xmart; implementation of this limit still requires verification. FreshPoints deletion does not automatically erase independent Square records, messages you sent to support through Gmail, or technical SMS, notification, hosting and diagnostic records held by other providers. The current Sentry plan documents 30 days for diagnostic events, not for all organization or infrastructure records. Other services have their own retention cycles and rules; there is no single deadline that applies to all of them. For a request about these records, tell the contact below which service or situation is involved, without sending passwords or SMS codes.
Contact and updates
For privacy questions and requests, email xmartbrazilmatthews@gmail.com. We may need to confirm your identity before handling a request; do not send passwords or SMS codes. Check the version date published on this page to identify policy updates. Changes to the text do not replace your choice about receiving promotional notifications.