We collect the minimum needed to run loyalty programs: your phone number or email and a securely hashed password (for sign-in), your name if you add it, invoice photos you upload for claims, and basic usage data.
Invoice photos are stored in a private bucket, served only via short-lived authorized URLs to you and the business you claimed at, stripped of EXIF/GPS metadata, and deleted after the retention period (default 180 days). Claim metadata is retained for audit.
We never sell your data. Business owners can export their own customer list; you can delete your account from your profile, which anonymizes your identity while preserving the shop's ledger integrity.
This policy is designed to be DPDP-friendly: sign-up implies consent to process your data for loyalty purposes; contact support to withdraw.