Privacy policy
This notice is a first published version and is under legal review.
Version 1.0 · Last updated: 10 September 2026
This notice explains what personal data we collect when you use earnr, what we do with it and what you can ask us to do about it. It is written to be read, not to be waded through — if anything in it is unclear, email us and we’ll explain.
Who we are
earnr is operated by Boshhh Group Limited, which is the data controller for the personal data described here. We are registered in England and Wales, company number 16711710, at 253 Monton Road, Eccles, Manchester M30 9PS. You can reach us at help@boshhhgroup.com or on 0161 505 0879.
What we collect
- Contact details and address — your name, email address, postal address, date of birth and phone numbers. You either give these to us, or they were provided when you registered interest through a Boshhh Group service and were carried over when your earnr account was created.
- Your mobile number — used to sign you in. We send a one-time code by SMS, or by WhatsApp if SMS can’t be delivered.
- Messages you send Earni — the questions you ask our assistant on the website or on WhatsApp, and the replies we send back.
- Bank transaction data — only if you connect a bank. Access is granted through an FCA-authorised Open Banking provider and is read-only: we can see transactions, we cannot move money, and we never see your banking login.
- Technical data — the ordinary records a website keeps, such as your sign-in session and basic security logs.
Why we use it, and our lawful basis
- To run your account and provide cashback — sign-in codes, matching offers to your spending, tracking and paying cashback. Lawful basis: performance of our contract with you.
- To answer you — support, and replies from Earni on the website and WhatsApp. Lawful basis: contract, and our legitimate interest in helping our members.
- To keep the service safe and working — fraud prevention, security, fixing faults and keeping our records straight. Lawful basis: legitimate interests, and legal obligation where the law requires us to keep records.
- To read your bank transactions — only with your explicit consent, given when you connect your bank through our Open Banking provider. You can withdraw it at any time.
- To send you marketing — only where you have consented, or where the law allows us to contact an existing customer about a similar service. You can opt out at any time.
Who we share it with
We do not sell your personal data. We share it only with the providers we need to run earnr, and only with what they need:
- Our FCA-authorised Open Banking provider, to connect your bank and read transactions.
- Messaging providers — Twilio for SMS and voice, Meta for WhatsApp — to deliver sign-in codes and messages.
- Our hosting provider, which keeps the service and its data in the UK or EU.
- The AI provider behind Earni, which processes the messages you send the assistant so it can reply.
- Merchants, cashback providers and affiliate networks, only as far as needed to track and confirm your cashback.
- Professional advisers, regulators or law enforcement, where we are required or permitted to share.
How long we keep it
We keep your account details for as long as you have an earnr account, and for a period afterwards where we need to — usually up to six years for records relating to payments, tax and legal claims. Bank transaction data is kept only for as long as it is needed to identify, track and pay your cashback, and stops being collected as soon as you withdraw your Open Banking consent. Assistant messages are kept so we can support you and improve the service, then deleted.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong or incomplete;
- delete your data, where we don’t need to keep it;
- restrict how we use it, or object to us using it — including for marketing;
- send your data to you or another provider in a portable form.
Where we rely on consent — Open Banking and marketing — you can withdraw it at any time, and that doesn’t affect anything we did before you withdrew it. To exercise any of this, email help@boshhhgroup.com. If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we’d rather you came to us first so we can put it right.
Security
Access to member data is restricted to the people who need it, traffic to and from the site is encrypted, and bank access is read-only and time-limited by design. We will never ask you for your card number, PIN, password, sign-in code or banking login — not by message, not on the phone, and not through Earni.
Children
earnr is for adults. You must be 18 or over to hold an account, and we do not knowingly collect data about children. If you think a child has given us their details, tell us and we will delete them.
Changes to this notice
If we change how we use your data we will update this page and change the version and date at the top. Where a change matters to you, we’ll tell you in the app or by message.
Contact us
Boshhh Group Limited, 253 Monton Road, Eccles, Manchester M30 9PS. Email help@boshhhgroup.com or call 0161 505 0879.