Ibotta Privacy Policy

Last Updated April 13, 2021

 

This Privacy Policy ("Privacy Policy") explains how Ibotta, Inc. ("Ibotta," "us," "our," and "we"), collects, uses, and shares information when you interact with us. This Privacy Policy applies to all users of Ibotta's website as published at www.ibotta.com (and any other websites with "Ibotta" branding that link to this Privacy Policy), and any mobile-device applications we offer, such our iOS and Android applications, that are branded "Ibotta" and link or reference this Privacy Policy (collectively, the "Services").

Please read this Privacy Policy carefully. This Privacy Policy replaces and supersedes the last version of this Privacy Policy for all users (including for those users that registered prior to the Effective Date). If you do not agree to our practices, please do not register, subscribe, create an account, or otherwise interact with the Services. By signing up for, using, or continuing to use the Services, you consent to the privacy practices described in this policy.

This Privacy Policy is incorporated into and is subject to the Ibotta Terms of Use. Capitalized terms that are not defined in the Privacy Policy have the meaning given to them in the Terms of Use.

Our Privacy Policy is organized as follows:

  1. Types of Information We Collect
  2. How Ibotta Uses Information
  3. When and Why Ibotta Discloses Information
  4. Your Choices
  5. Accessing and Correcting Information
  6. Security of Personal Information
  7. Our Commitment to Children's Privacy
  8. International Visitors
  9. California Privacy Rights
  10. Privacy Notice
  11. Changes and Updates to this Privacy Policy
  12. Our Contact Information

1. Types of Information We Collect

We may ask you to provide information when you register, subscribe, or create an account for our Services, link your Ibotta account to a retail loyalty card or loyalty program, contact Ibotta for customer service purposes, or otherwise interact with or use the Services. We may collect certain types of information, including information that can be used to reasonably identify you, such as your name, email address, mailing address, phone number, date of birth, geographic location, and mobile device data (as described below) (“Personal Information”), and information that does not identify you personally. We may collect the following types of information, including Personal Information:

2. How Ibotta Uses Information

You use Ibotta as your shopping companion, and we and our partners will use the information we collect from and about you in many ways to help you shop and learn about your shopping habits. This includes using the information in creative ways so that you may be provided with shopping-related services and for advertising and marketing to you. Ibotta and our partners use information to:

In addition to the foregoing, we may aggregate information and use it for any purpose.

3. When and Why Ibotta Discloses Information

Service Providers. Providers. We may share information with our service providers that provide services for us to assist us in carrying out the purposes described in Section 2 above.

Merchants and Business Partners. We work with various partners so they can provide shopping-related services, advertising, and marketing to you when you use our Services. To facilitate these activities, we may share information about you with our partners. You may be able to adjust how we share information by changing options within the Services. We encourage Ibotta's merchants and business partners to adopt and post their privacy policies. The use of your information by such parties is governed by their privacy policies and is not subject to our control. When you choose to interact with an Ibotta merchant or business partner, we encourage you to read any privacy policy they may have posted on their website.

Third Parties. Ibotta shares information with third parties and service providers, but other than (i) hashed information, device identifiers, or location information (in each case anonymized and/or pseudonymized), and (ii) information shared with third party service providers who only use the information to assist us with internal management of the our Services (for example, to detect and prevent fraud), we do not disclose your contact information or other personally identifiable information (PII). We share information with third parties to assist us in carrying out the purposes described in Section 2 above.

Merger, Sale, or Other Asset Transfers. We may share your information to effect a merger, acquisition, or otherwise, and to support the sale or transfer of business assets. If Ibotta is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or prominent notice on one or more of our Services of any change in ownership or uses of your Personal Information, as well as any choices you may have regarding your Personal Information.

As Required by Law, to Enforce Laws and Similar Disclosures. We may also disclose Personal Information to defend ourselves in litigation or a regulatory action; when required or advised to do so by law, such as in response to a subpoena, or similar legal process, including to law enforcement agencies, regulators, and courts in the United States and other countries where we operate; to enforce our rights or protect our property; to protect the rights, property or safety of others, investigate fraud, respond to a government request; or as needed to support auditing, compliance, and corporate governance functions.

Analytics. We also use third party services, such as Google Analytics, to help us understand how visitors interact with our website and to help improve our user experience. Google provides additional privacy options regarding cookie use described at www.google.com/policies/privacy/partners/. We use other third party services, such as The Trade Desk, to assist with targeted advertising. The Trade Desk provides additional privacy options described at https://www.thetradedesk.com/us/privacy.

Aggregate Data. Ibotta may also disclose information about you that is not personally identifiable. For example, we may provide our merchants, business partners, or other third parties with reports that contain aggregated data, statistical data, and/or anonymized data.

Consent. We may also share your information with your consent.

We think that you benefit from a more personalized experience when we know more about you and the kinds of offers you like. However, you can limit the information you provide to Ibotta, and you can limit the communications that Ibotta sends to you. For further information about your specific rights to any personal information that Ibotta collects about you, please refer to Section 9 - Privacy Notice.

Email. You can manage your email preferences by logging into Ibotta's mobile application and going to the Notifications section under Settings. You may also manage your email preferences by clicking "unsubscribe" on any email communication we send you. You may choose to subscribe to some types of messages, and may choose to unsubscribe from others.

Cookies. You may manage how your browser handles cookies and related technologies by adjusting its privacy and security settings. Please note that if you disable cookies, you may be unable to access some customized features of our Services. You can opt-out of being targeted by certain third party advertising companies online at www.networkadvertising.org/consumer/opt_out.asp and http://www.aboutads.info/choices/. Ibotta honors these ad tracking opt-out requests.

Mobile. Some of the features of the Service may enable Ibotta to access and collect information about your current or past location in order to personalize the Service for you and provide other features of the Services ("Location-based Features"). In order to use Location-based Features, you must give Ibotta permission to use your geo-location through your device. Ibotta may access your geo-location using a variety of means, including GPS, IP address, or cell tower location. You may opt-out of using Location-Based Features by going to Settings and turning off the "Nearby Store Alerts" feature. Alternatively, you may adjust the settings on your mobile device to prevent the sharing of precise Location Information. You may also manage how your mobile device or mobile browser handles cookies and related technologies by adjusting your mobile device privacy and security settings. If you choose not to allow Ibotta to use your location information or disable Ibotta's Location-based Features on your device under settings, you will not be able to utilize certain features of the Service.

You may also opt-out of remarketing and third-party advertising campaigns by enabling an Ibotta preference called "Do Not Sell My Personal Information.”

Connecting through Social Networks. You may be able to manage what social networks share with Ibotta when you register with us through a social media platform or application, such as through Facebook Connect. Please refer to the privacy settings of the applicable social media platform or application to determine how you may adjust our permissions and manage the interactivity between Ibotta and your social media account.

Web Push Notifications. You may opt into web push notifications via the Options button or tab on your browser’s address bar. At any point, you can go to your browser to change your preferences and/or opt out.

Ibotta's SMS Programs. By providing us with your mobile telephone number, you consent to receive SMS text messages at that number as requested for account verification and authentication and other purposes related to the Service. You may also receive an SMS from Ibotta if you are invited by another user to join Ibotta. You can stop receiving SMS messages at any time. Just text "STOP" to 47453. After you send the SMS message "STOP" to us, we will send you an SMS message to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us.

Opt Out from Cross-App and Cross-Site Interest-Based Advertising. Some of our advertising partners are members of the Networking Advertising Initiative or the Digital Advertising Alliance. Please visit these organizations' opt-out pages to learn about how you may opt out of receiving web-based personalized ads from member companies. You can access any settings offered by your mobile operating system to limit ad tracking or install the DAA’s AppChoices app to learn more about how you may opt out of receiving personalized ads in mobile apps.

5. Accessing and Correcting Information

Keeping your information helps ensure that we provide you with the best offers available through our merchants and business partners.

You may update or correct your profile information and preferences at any time by accessing your Settings through the Service. You may also exercise any of the rights described in Section 9 by visiting https://home.ibotta.com/personal-information-management/.

If you want to close your account or have other questions or requests, or if you would like to access or request a correction to any other information we hold about you, please contact us at privacy@ibotta.com. If you wish to cancel your account, contact us at privacy@ibotta.com.

Please note that while your changes are reflected promptly in active user databases, we may retain all information you submit for as long as needed to fulfill a legitimate business need or as required by law, including for backups and archiving, prevention of fraud and abuse, compliance with legal obligations, dispute resolution, enforcing our agreements, and analytics.

6. Security of Personal Information

We use certain physical, managerial, and technical safeguards that are designed to improve the integrity and security of your Personal Information. We cannot, however, ensure or warrant the security of any information you transmit to us or store on the Service.

7. Our Commitment to Children's Privacy

We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no part of the Service is directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, then you may alert us at privacy@ibotta.com.

8. International Visitors

The Service is hosted in the United States and is intended for visitors located within the United States. If you choose to use the Service from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personally identifiable information outside of those regions to the United States for storage and processing, and by providing your personally identifiable information on the Service you consent to that transfer, storage, and processing.

9. Privacy Notice

On January 1, 2020, California’s new privacy law, the California Consumer Privacy Act of 2018 (“CCPA”), became effective. The CCPA provides broad rights to California residents regarding how their data is collected, held, processed, licensed and sold. Residents of California now have the right, among others, to know what of their personal information is sold or disclosed to third parties, the right to access their personal information that businesses have collected, the right to opt out of the sale of their personal information, and the right to delete of all their personal information (the “right to be forgotten”).

Ibotta takes data collection and privacy seriously. As such, in an effort to be transparent about Ibotta’s data collection practices, and despite the fact that the CCPA only applies to California residents, the rights afforded under the CCPA are rights that any Ibotta Saver in any state can choose to exercise. Each of these rights can be exercised at https://home.ibotta.com/personal-information-management/. Ibotta will respond to your request(s) within forty-five (45) days.

Information We Collect

Ibotta collects a variety of information that is considered Personal Information. “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information includes, but is not limited to, the following if it identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer or household. In particular, Ibotta has collected the following categories of personal information from its consumers within the last twelve (12) months:

Categories of personal information that Ibotta collects on Savers:
Categories of personal information that Ibotta sells to third parties:
Categories of third parties to whom Ibotta sells personal information:
Categories of personal information disclosed to third parties for a business purpose:

Under the CCPA, “sell,” “selling,” “sale,” or “sold,” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to another business or a third party for monetary or other valuable consideration.

Exercising your rights under the CCPA

To exercise any of your rights under the CCPA, please submit a verifiable request to us by visiting https://home.ibotta.com/personal-information-management/. You can select the appropriate link below the right you want to exercise, then log into your Ibotta account using the username and password that you use to log in to the Ibotta app on your phone. Once you are logged in, you can submit a secure request to exercise any of your rights under the CCPA.

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

Disclosures
  1. Has Ibotta disclosed or sold any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months?
  2. Does Ibotta sell the personal information of minors under the age of 16 without affirmative authorization?
Right to Opt Out

You have the right to direct Ibotta to not sell your personal information to third parties at any time. This is referred to as your “right to opt out.” Pursuant to this Privacy Policy, Ibotta has never sold your personally identifiable information and has no intention to do so in the future; Ibotta only shares information as outlined herein, and always in an anonymized and/or deidentified manner. If you choose to opt out of the sharing of your anonymized personal information, Ibotta will no longer send your anonymized and/or deidentified information to third parties. You can choose, at any time, to opt back in to the sale of your anonymized and/or deidentified personal information. To opt out of (or opt back in to) the sharing of your anonymized and/or deidentified personal information with third parties, please visit the Preference Center in the Ibotta app (under Account Settings) or on the Ibotta website at https://ibotta.com/account/settings/privacy. Once you exercise your right to opt out, we will wait at least twelve (12) months before asking you to reauthorize the sale of your anonymized and/or deidentified personal information.

Right to Know

You have the right to receive information about the types of personal information that Ibotta sells or discloses to third parties. Specifically, this right allows you to ask Ibotta (a) what are the categories of personal information that Ibotta collects about me? (b) what are the categories of my personal information that Ibotta sells to third parties? (c) what are the categories of third parties that Ibotta sells this information to? and (d) what are the categories of personal information that are disclosed to third parties for a business purpose? Each of these four questions must be answered by Ibotta when you exercise your right to know. Ibotta will disclose this information to you within 45 days of you exercising your right to know. If you choose to exercise this right, you will receive both an email confirming Ibotta’s receipt of your request, and a follow-up email with the information addressing these questions. To exercise your right to know, please visit the Personal Information Management webpage at https://home.ibotta.com/personal-information-management/.

Right to Non-Discrimination

You have the right to non-discrimination if you exercise any of your rights under the CCPA. If you exercise your rights under the CCPA, Ibotta will not do any of the following: (a) deny you any goods or services; (b) charge you a different price or rate for Ibotta’s goods or services, including through the use of discounts or other benefits or imposing penalties; (c) provide to you a different level or quality of goods or services; or (d) suggest to you that you will receive a different price or rate for Ibotta’s goods or services or a different level or quality of Ibotta’s goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send us an electronic message through our website or write us at our address listed on our webpage.

Right to Access

You have the right to request access to all the categories of personal information that Ibotta has collected about you, and all the specific pieces of personal information that Ibotta has collected about you through your use of the Ibotta app. When you exercise this right, the information that Ibotta provides to you must be in a portable and readily readable format. Ibotta will disclose this information to you within 45 days of you exercising your right to access. If you choose to exercise this right, you will receive both an email confirming Ibotta’s receipt of your request, and a follow-up email with the information addressing these questions. Ibotta must also, whether you exercise your rights or not, disclose to you (a) the categories of personal information collected about you, (b) the purposes for which your personal information is used, and (c) refrain from collecting or using additional categories of personal information about you without proper notice. To exercise your right to access, please visit the Personal Information Management webpage at https://home.ibotta.com/personal-information-management/.

Right to be Forgotten

You have the right to request that Ibotta delete all the data it has collected about you, subject to certain exceptions for business purposes. You may exercise your right to deletion, also known as the right to be forgotten, twice in any twelve-month period. However, when you do exercise this right, please know that your user experience within the app will look different and any personalization will be lost. Ibotta will not be able to send you targeted offers for items that may be of interest to you and you may not receive personalized recommendations or emails. Also, when you exercise your right to be forgotten, any cash back rewards that are pending approval (if any) in your Ibotta account at the time of deletion will be deleted, and you will lose those pending rewards. In addition, your total lifetime earnings will be reset to the amount of Cash Back rewards in your Ibotta account at the time of deletion. For all intents and purposes, when you exercise the right to be forgotten, you will thereafter be treated as a new Ibotta user; you will, of course, retain in your Ibotta account any Cash Back rewards you previously earned and are not pending approval, but all other personalization within the app up to that date may be irrevocably lost. To exercise your right to be forgotten, please visit the Personal Information Management webpage at https://home.ibotta.com/personal-information-management/.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

10. Changes and Updates to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective as described in our Terms of Use. If we materially change the ways in which we use or share personal information previously collected from you through the Service, we will notify you through the Service, by email, or other communication.

11. Our Contact Information

Please contact us with any questions or comments about this Privacy Policy, your information, our use and disclosure practices, or your consent choices by e-mail at privacy@ibotta.com, or our mailing address:

Ibotta, Inc.
1801 California St.
Suite 400
Denver Colorado, 80202
Attn: Legal Department