I won't pretend to have read all of the code, but after the initial claim email is sent, I don't see any strict requirement why they should need to keep the recipient's plaintext email address on file.

The claim link in the initial payment notification email contains a secret that redeems the coins, so unless they need to send follow-up emails to an inactive payee, the email address could be discarded once the payment notification email is sent.