Privacy Policy

Last updated: July 2026

LoyalTap ("we", "us") provides a digital loyalty-stamp app for customers ("LoyalTap") and a dashboard for the cafés and shops that use it ("LoyalTap Business"). This page explains what information we collect, why, and how you can control it.

What we collect

Data	Why
Name, email address	To create and secure your account, and identify your stamp cards.
Password	Stored only as a secure hash by our authentication provider (Supabase) — we never see or store it in plain text.
Stamp and redemption history	To track your progress toward rewards at each business.
Push notification token	To deliver notifications from businesses you have a card with (e.g. new rewards). Only sent if you enable notifications.
Device location	Used only on your device to sort nearby businesses by distance. It is never sent to or stored on our servers, and location access is entirely optional — the app works fully without it.

For business accounts, we additionally store the business's name, description, address, logo/cover photos, reward program details, and opening hours — all of which are shown publicly to customers inside the app, since that's the business's own storefront listing.

What we don't do

We don't sell your data to anyone.
We don't use advertising or ad-tracking SDKs.
We don't use analytics or crash-reporting tools that profile individual users.
We don't share your data with a business beyond your stamp/redemption activity at that specific business.

Who we share data with

We use a small number of service providers to run LoyalTap, each only for the specific job described:

Supabase — hosts our database, authentication, and file storage.
Expo / EAS — delivers push notifications to your device.
Mapbox — used by the business dashboard to look up a business's address and coordinates when a business owner sets up their listing. Not used in the customer app.

None of these providers are permitted to use your data for their own purposes.

Your choices

Notifications can be turned off at any time in the app's Profile tab.
Location access can be denied or revoked at any time in your device settings — the app remains fully usable without it.
Account deletion is available from the app's Profile tab and permanently removes your account, stamp cards, and personal data from our systems.

Data retention

We keep your account data for as long as your account is active. If you delete your account, your personal data is removed promptly; we may retain minimal, non-identifying records where required for legitimate business or legal purposes (e.g. aggregate, anonymized statistics).

Children

LoyalTap is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes materially, we'll update the "Last updated" date above.

Contact us

Questions about this policy or your data? Email support@loyaltap.eu.