Privacy Policy


This Privacy Policy describes Lunar (Firefi Inc.)'s ("Lunar") collection, use, disclosure, and protection of your personal information collected or provided through our website or mobile applications ("Site") and how we use personal information in connection with our services offered through the Site ("Services").

"Personal information" is information about an identifiable individual. Personal information does not include information that is anonymous or aggregated or is no longer identifiable to a specific person.

Lunar also receive provides aggregated information about the use of our Site or Services to our loyalty program and redemption partners (collectively, our "Partners"). What types of analytics our Partners perform on the aggregate data is outside the scope of this agreement.

By using our Site, Services, or otherwise providing us with your personal information, you agree to this Privacy Policy and agree to be bound and abide by our Terms of Service. If you do not agree with any term in this Privacy Policy, please do not provide us with your personal information or use our Site or Services.

Our Site and Services are not intended for individuals under the age of majority. We do not knowingly collect personal information from such individuals.

Information we collect

We may collect the following categories of personal information in connection with your use of our Site and Services, including but not limited to:

  • Registration information: When you register for the Services, you will be asked for basic registration information, such as an email address and password.
  • Identification information: You may also be asked to provide identification information upon registration, including your first and last name, gender, address, postal code and date of birth.
  • Third party credentials: You may also provide Lunar with certain credentials for third-party payment services ("Third Party Sites") when you authorize us to connect to them on your behalf.
  • Information from Third Party Sites: When you agree to have Lunar connect to any Third Party Sites on your behalf, in order to provide you with personalized Lunar rewards, we will collect transaction-level data from the Third Party Sites via our Services. For example, we will collect the transaction details from your chequing account in order to personalize rewards, provide data to our Partners and determine for which transactions you are eligible to receive Lunar points.
  • Technical and navigational information: We may collect information about your interaction with our Site or Services such as computer browser type, pages visited, average time spent on our Site or Services, IP address, unique identifier of the device, operating system version and app version.
  • Other information: We may request or receive other personal information such as feedback, questions, comments, suggestions, or ideas to provide you with other benefits or to improve upon the Services. In such instances, you will be given the opportunity to provide or decline that information.
  • How we use the information we collect

    We use your personal information for the purposes of:

  • Issuing the promised rewards based on your spending with Lunar partners;
  • Offering and improving the Site and the Services;
  • Responding to your inquiries about our Site and Services;
  • Analyzing the usage of our Site and Services;
  • Alerting you to software compatibility issues;
  • Delivering any administrative notices or alerts and communications relevant to your use of the Services;
  • Offering you other products, programs, or services that we believe may be of interest;
  • Performing market research, project planning, product development, troubleshooting problems, analysis of user behaviour, marketing and promotions;
  • Providing aggregate purchase, behavioural, and demographic information to our Partners. What our Partners do with this aggregate data is beyond our control;
  • Allowing Partners to send you targeted advertisements through our Site or Services;
  • To serve advertisements to you in various marketing channels, including but not limited to social media, search engines, mobile apps, and various websites including our own Sites or Services;
  • Enforcing our Terms of Services and as otherwise set forth in this Privacy Policy; and
  • A transaction in connection with a merger, sale, of substantially all of our assets, or a corporate reorganization.
  • In order to allow you to use our Site or Services, we may be required to verify your identity. To do so and with your consent, we may, directly or through third parties, use information you provide and verify it against third party databases or through other sources. We may use your information to verify your identity in the event you contact us for assistance with the Site or Services. We may also use your information to pre-fill form fields on the Services for your convenience.

    When you use the mobile application or mobile versions of our Site, we may collect the unique device identifier assigned to that device by phone makers, carriers, or makers of the operating system (the "Device ID"). Device IDs allow app developers, advertisers, and others to uniquely identify your device for purposes of storing application preferences and other data.

    We may use your Device ID to contact you directly through push notifications. Additionally, we may use Device IDs to monitor suspicious activity. For example, if we detect that a single account on a Site is being accessed from multiple devices, as determined by tracking the Device IDs that access an account, we may contact the user to ensure that such access has been authorized by the user.

    Information we process may be transferred to, stored, and processed in, the United States, Canada, or any other country in which Lunar or its affiliates, subsidiaries, or service providers maintain operations. By using and providing information to us through the Site and Services, you agree and consent to the transfer, storage, and processing of your information to any such country in order to provide the Site and Services.

    How we disclose personal information

    We may share aggregate transaction, purchase, demographic or behavioural information regarding your use of our Sites or Services. Your personal information will never be shown directly to our Partners, affiliates or subsidiaries, but rather aggregated or summarized with other users of our Sites or Services.

    We may share your personal information with our affiliates and subsidiaries for the purposes of providing the Services. In connection with the delivery to you of any Lunar Rewards that you may redeem, we may share some of your personal information with third parties in order to process the transaction you have requested.

    We may share your personal information with third party service providers to enable them to assist in fulfilling the requests you make or the transactions you conduct via the Site, including the operation of certain Site functions and the Services. Third parties acting on our behalf that are given access to your personal information are contractually obligated to abide by our privacy practices.

    Lunar and its service providers, may provide your personal information in response to a search warrant or other legally valid inquiry or order, or to an investigative body in the case of a breach of an agreement or contravention of law, or as otherwise required or permitted by applicable Canadian or other law. We may also disclose personal information where necessary for the establishment, exercise or defence of legal claims and to investigate or prevent actual or suspect loss or harm to persons or property.

    We may transfer any information we have about you as an asset in connection with a merger or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Lunar or as part of a corporate reorganization or sale or other change in corporate control.

    How we protect the information we collect

    We take the security of your personal information seriously. We use technical, physical and administrative safeguards, such as, but not limited to, authentication procedures to maintain the security of your personal information. Unfortunately, no collection or transmission of information over the Internet or other publicly accessible communications networks can be guaranteed to be 100% secure, and therefore, we cannot warrant the security of any such information.

    Your online access may be protected with a password you select. We strongly recommend that you do not disclose your password to anyone. We will never ask you for your password in any unsolicited communication (such as letters, phone calls or email messages).

    We have personal information retention processes designed to retain personal information of our customers for no longer than necessary for the purposes stated above or to otherwise meet legal requirements.

    Your choices

    You have the option of receiving periodic Site or Services related alerts, weekly summaries, notifications, newsletters, promotions, or other information via email. You may choose to sign-up or stop receiving alerts, summaries, newsletters and promotions by indicating your preference in your account profile or settings. You may also follow the unsubscribe instructions in the email you receive. Please note that certain Service-related messages that we send are necessary for the proper functioning and use of the Services and you may not have the ability to opt-out of those messages.

    Third party offers, advertisements, and data collection

    We may offer a number of separate products and services offered by third parties advertised to you on our Site and through the Services. These third party offers may be complementary to your use of the Services and may be personalized based on the information you provide to us, we have collected about you, queries made through the Services, or other information. If you choose to use these separate products and services, provide information to the third party, or allow the third party to otherwise collect information about you, then their use of your information is subject to the applicable third party’s privacy policy and terms of service. You should review the practices of the third party before deciding to use their service or provide them with any information.

    As a user of our Site and Services, you grant one of our service providers, Plaid, the right, power, and authority to access and transmit your data as reasonably necessary for Plaid to provide the Services. In addition, you acknowledge and agree that your personal information will be treated by Plaid in accordance with their privacy policy. You furthermore expressly grant Plaid the right, power and authority to (acting on your behalf) access and transmit your personal information as reasonably necessary for Plaid to provide the Service to you and Lunar.

    We may use third party service providers to help us analyze certain online activities. For example, these service providers may help us measure the performance of our online promotions or analyze Services activity. We may permit these service providers to use cookies and similar technologies to perform these services. For example, we use a service provider such as Google Analytics on parts of the Site or Services to determine interest and other data to better serve our customers. If you prefer to not have your data used by this service provider you may visit the Google Analytics opt-out page.

    How we use cookies and similar technologies

    To help operate the Site, enhance you experience, and collect information about online activity, we may place small data files on your computer or other device. These data files may be in the form of cookies, pixel tags, local shared objects, or other similar technologies. Cookies and similar technologies enable us to personalize our Site and Services for you. These technologies allow us to store and manage your preferences and settings, measure and analyze how you use our Site and effectiveness of our communications, offer targeted products, programs and services, and help us improve our products, services, and security. Information collected includes internet protocol address, operating system, browser specifics of your device, device characteristics, user ID, and specifics regarding your interactions with (i.e., the path you take through) our Site and Services.

    Most browsers provide you with the ability to block, delete, or disable these technologies. If you choose to reject cookies or similar technologies, some Services may not be available or some functionality may be limited or unavailable. Please review your browser manufacturer’s help pages for assistance with changing your settings.

    Access to your personal information

    You have the right to access, update, and correct inaccuracies in your personal information in our custody and control, subject to certain exceptions prescribed by law.

    You may request access, updating and corrections of inaccuracies in other personal information we have in our custody or control by emailing us at the contact information set out below. We may request certain personal information for the purposes of verifying the identity of the individual seeking access to their personal information records.

    Changes to this privacy policy

    We reserve the right, at our discretion, to make changes to this Privacy Policy from time to time, so please review it frequently. You may review our Terms of Services and Privacy Policy at any time via Changes take effect immediately upon posting.

    Contact us

    If you have questions or concerns regarding this Privacy Policy, our security practices, our information handling practices or wish to access, update, and/or correct your personal information, please contact our Privacy Officer by email at [email protected]