Your privacy, close to home.

Enlave collects only the information needed to operate your membership, review claims and arrange rewards.

What we collect

Your name, verified mobile number, receipt images, merchant details, purchase date, amount, resident attestation and claim history. We store hashed, expiring OTP credentials and revocable session credentials. Apple may provide device-library identifiers and push tokens. Google may provide signed save/delete events when callbacks are configured.

How it is used

We verify mobile ownership, show benefits, prevent repeated rewards, review receipts, issue Wallet passes, communicate payout links and keep an audit history. We do not receive precise location callbacks from Apple or continuously track your location. Relevant locations are embedded in passes so your device can decide whether to suggest them.

Providers and payment details

Our SMS provider receives your mobile number. Apple and Google receive pass information. When Apple Wallet passes are signed through walletmcppass.com, that provider receives your name and an opaque membership code to sign the pass. Razorpay receives your name, mobile number and approved reward details; you provide UPI or bank details directly to Razorpay. Enlave does not collect your bank account or UPI credentials.

Concierge preferences and optional AI

You may save interests, a budget, dietary preferences and favourite offers. These are optional and stay off your visible Wallet pass. Questions and replies are kept only in the current open concierge session, limited to ten exchanges; they are not stored in our conversation database. Clear the conversation or leave the page to discard it. Saved preferences and favourites remain until you change/remove them or request account deletion.

The local interpreter makes no external AI requests. If external AI is enabled and you separately opt in, your question, selected preferences and the previous search intent are sent to OpenAI to interpret your request. We do not attach your member ID, mobile number, receipts, Wallet tokens or payout records. Common mobile-number, email and UPI patterns are redacted, but this is not a guarantee that all sensitive text can be detected. Do not enter sensitive information. You may revoke consent in preferences for future requests; provider processing/retention follows its applicable terms. Recommendations and cashback facts are selected by our server, not invented by the model.

Storage and retention

Receipts are stored privately and can be downloaded only by their owner and authorized administrators. Session cookies are required for sign-in. OTPs expire after five minutes. Receipt and account retention is 90 days after the campaign, except payout and audit records kept for applicable accounting or dispute obligations. Operators must run the documented retention task and maintain the corresponding backups policy. We do not sell personal information.

Your choices

You can remove your pass from Wallet or sign out to revoke the current session. To request access, correction or deletion, contact support@example.com with your membership reference. We may retain records needed to prevent duplicate payment or satisfy accounting obligations; we explain any applicable retention when handling your request.