Trust & Security

How We Protect Your Coins,
Your Data, and Your Business

Everything you need to know before trusting RynoWallet with your customers' loyalty.

100% audited coin trail Encrypted at rest & in transit 24-hr dispute resolution MIR fraud protection

Every coin movement is logged

Every issuance and redemption event is stored with a timestamp, amount, merchant ID, and customer ID. This creates an immutable audit trail - no coin can appear or disappear without a matching transaction record.

  • Timestamp-accurate log of every issuance
  • Redemption records linked to issuing merchant
  • Full history visible in your merchant portal
  • Disputed transactions reviewed and resolved within 24 hours
Audit log - Sharma Kirana
18 May, 11:04 AM+10 RC issued → Rahul V.
18 May, 11:22 AM+15 RC issued → Meena K.
18 May, 2:30 PM−50 RC redeemed ← Fresh Basket
18 May, 4:15 PM+25 RC issued → Vijay S.
All records retained 7 years · Downloadable as CSV

What data we collect and why

We collect only what is needed to operate the loyalty network. We do not sell data, run ads against it, or share transaction histories with third parties.

Customer: phone number, email, coin balance, transaction history. Used only to operate your wallet.
Merchant: shop name, contact details, earning rules, transaction log. Used for billing and settlement.
Not collected: Aadhaar/PAN, purchase item details, browsing history, precise location.
Who can see your data
You (merchant) - full transaction log for your own shop. Cannot see other merchants' data.
You (customer) - your wallet balance and full transaction history. Cannot see other customers.
RynoWallet platform - aggregate anonymised data for network health and settlement calculations.
No other party - data is not shared with advertisers, data brokers, or other merchants.

MIR: the fraud-prevention mechanism

The Minimum Issuance Ratio (MIR) prevents a merchant from joining the network, accepting coins (giving discounts), but never issuing any. Every merchant who accepts coins must also issue coins at a minimum 1:3 ratio - for every 3 RC redeemed, at least 1 RC must have been issued.

Merchants who fall below the MIR threshold are flagged and their redemption rights are suspended until the ratio is restored. This protects every other merchant in the network.

Network safeguards summary
MIR ratio enforced monthly - free-riders suspended
Redemption cap: max 3× issued coins per month
90-day coin expiry caps total merchant liability
New merchant bonus: 1:5 ratio for first 30 days to bootstrap earning
Manual review of unusual transaction patterns by our team

What happens to coins if RynoWallet shuts down?

Coins are liabilities of the issuing merchant, not RynoWallet. If we cease operations, we are contractually required to:

Give merchants 90 days' notice before any shutdown
Export full transaction history to all merchants in CSV format
Notify all customers of their final balance and redemption window
Allow 60-day grace period for coin redemption after service end

Technical security

HTTPS everywhere

All traffic encrypted in transit with TLS 1.2+. Strict HSTS headers enforced.

Data at rest

Database encrypted at rest. Passwords hashed with bcrypt. No plaintext credential storage.

Access controls

Role-based access: merchants see only their data. Our support team requires 2FA to access any merchant records.

Backups

Daily automated backups with 30-day retention. RPO < 24 hours, RTO < 4 hours.

Still have questions?

Our team answers trust and security questions same-day.

See also: Privacy Policy · Terms of Service