Privacy

Last updated: 6 September 2026

RewardKeep is made by Smitteck GmbH, a company registered in the Canton of Zurich, Switzerland (“we”). This notice explains what we store when you use rewardkeep.com and join the waiting list, and what the RewardKeep application does with your data once it is available. It is written to be read; if something is unclear, write to us at the address at the end.

1. The website

rewardkeep.com is served through Cloudflare and Google Cloud. Like any web server, they see the IP address and browser of each request and keep short-lived technical logs to run and protect the site. Cloudflare may set a strictly necessary security cookie. We do not run analytics or advertising scripts on RewardKeep pages, and we set no tracking cookies.

2. The waiting list

When you join the waiting list we store the e-mail address you enter, and, only if you choose to give them, your name, company, headcount band and country. We also record the time, the version of the consent text you agreed to, a shortened hash of your IP address and your browser identifier, so that we can recognise abuse of the form. We use this to send you a confirmation link and, after you confirm, to tell you about the launch of RewardKeep. The legal basis is your consent (Swiss FADP; GDPR Art. 6(1)(a) where it applies).

Your entry is inactive until you click the confirmation link we e-mail you. An unconfirmed address receives nothing else. Every message we send carries a link that removes you from the list without a login; you can also ask us to delete your entry at any time. We keep your entry until you leave the list or ask for deletion, and we do not sell, rent or share it with anyone for their own purposes.

Messages come from no-reply@rewardkeep.com. The list is stored in Google Cloud Firestore and the confirmation is sent through our e-mail hosting provider; both act on our instructions under data processing terms. Google Cloud may process data in the United States under the Swiss and EU adequacy frameworks and standard contractual clauses.

3. The RewardKeep application

RewardKeep is a Windows application that runs on your own computer. The employee and salary data you analyse is read from files on your machine, computed there, and never uploaded to us or to anyone else. There is no account and no server that holds your figures. Reports are produced and, where the application signs them, signed on your machine.

The application does connect to our servers for a small number of things, none of which carry employee data: activating and checking a licence, an update check you start yourself, refreshing the bundled regulation texts, and support requests you choose to send. If you share an analysis with a certified partner, the file is encrypted on your machine to that partner’s key and only they can open it; our directory publishes the partner’s public key and never holds the file or its contents. The application also works with no network connection at all.

4. Buying a licence

When licences go on sale, payment will be handled by Stripe, which receives your card details directly; we receive the company name, e-mail address and country you enter, and a record of the purchase, to issue and support your licence and to keep the accounts the law requires.

5. Your rights

You can ask what we hold about you, have it corrected or deleted, withdraw your consent, or object to a processing. Write to us and we answer within the statutory period. You may also complain to the Swiss Federal Data Protection and Information Commissioner or, where the GDPR applies to you, to your local supervisory authority.

6. Changes

When this notice changes we update the date at the top. A change that affects the waiting list is also mentioned in the next message we send to it.

7. Contact

Smitteck GmbH, Zurich, Switzerland. For privacy questions: privacy [at] rewardkeep [dot] com. See also the terms of use.