Privacy Policy

Last updated 11 September 2026

Loyalty runs reward programmes for small shops. This policy explains what we collect from customers who scan a shop's QR code, and what we do with it.

What we collect from customers

When you sign in with Google to join a shop's reward programme, we receive:

• Your name and email address from your Google account

That is all we ask Google for. We do not receive your password, your contacts, your Google Drive, your photos, or anything else, and we never post anything on your behalf.

Then, as you shop, the shop records against your email:

• How many times you have visited
• How much you have spent, and the amount of each bill
• Any discount you were given, and why

Why we collect it

Purely to run the reward programme: to count your visits so the shop knows when you have earned a discount, and to show you how close you are to the next one. We do not use it for advertising and we do not build a profile of you across shops.

Who can see it

Only the shop you visited. Each shop sees its own customers and nobody else's. If you shop at two businesses that both use Loyalty, neither can see your activity at the other.

We do not sell your data, share it with advertisers, or pass it to any third party for their own purposes.

Where it is stored

In a PostgreSQL database hosted in Singapore, reachable only by this application. Connections are encrypted. Shop owners' passwords are stored as bcrypt hashes, never as readable text.

How long we keep it

For as long as the shop's account is active, since the visit history is the reward programme. If a shop closes its account, its customer records are deleted with it.

Your choices

• You can ask the shop to remove you from their programme at any time.
• You can ask us for a copy of what we hold about you, or ask us to delete it, by emailing the address below. We will respond within 30 days.
• You can revoke this app's access to your Google account at any time at myaccount.google.com/permissions.

Cookies

We set one cookie to keep you signed in so that scanning the QR code a second time checks you in immediately. It contains only a signed reference to your account. We use no advertising or analytics cookies and no third-party trackers.

Children

Loyalty is not intended for anyone under 13, and we do not knowingly collect their data.

Changes

If this policy changes materially, we will update the date at the top of this page.

Contact

Questions, access requests or deletion requests: 19robot95@gmail.com