Privacy policy

Data we collect

Account: your email address and the name you choose, used to sign you in with a one-time code.

Loyalty cards: the name and phone number you give a business when you join its program, your balance (stamps or points) and the history of stamps and rewards.

Contact card: the details you choose to publish (name, title, company, phone, email, website, links and photo). Your contact card page is public by design.

Businesses: name, logo, colors, address and location of the business, its programs and its team members' emails.

Wallet: when you add a pass, Apple or Google gives us a device identifier and a push token so we can update that pass. We don't receive anything else from your wallet.

Photos you upload (avatars, logos, promotion pictures).

What we don't do

We don't sell your data, show ads or track you across other apps and websites. The app doesn't use advertising identifiers.

A business only sees the customers of its own programs, never other businesses' customers.

Why we use it

To create and update your cards, let staff add stamps and redeem rewards, send pass updates and notifications you'd expect (for example, a reward that's ready), and keep the service secure against abuse.

Who processes it

Neon (database, sign-in and file storage, hosted on AWS in the United States), Vercel (web hosting), and Apple and Google (Wallet passes and updates). They process data only to provide those services to us.

How long we keep it

While your account or card is active. When you delete your account we delete your profile, contact card and saved contacts; loyalty cards stay with each business without being linked to you. Businesses can ask us to delete their customers' data at any time.

Your choices

Delete your account from the app (Account › Delete my account) or by writing to us. You can also ask for a copy of your data or a correction.

Contact: