Legal

Privacy policy

Last updated: November 13, 2026

Dror Zohar ("Loyality", "we", "us") provides a digital loyalty card service to local businesses ("Businesses") and their customers ("Customers"). This policy explains what information we collect, how we use it, and your choices.

Information we collect

From Businesses and their staff

Account information: email address, name (optional) and the business details you enter (name, category, address, brand color, time zone).
Program and activity data: your reward settings, the stamps and rewards your staff record, and messages you send.
Billing information: payments are processed by Paddle.com, our reseller and merchant of record, which collects your payment and billing details directly under its own privacy policy. We receive your plan, billing status and the email Paddle bills, never your card number.

From Customers

An optional first name you choose to enter when you add a card.
Card activity: stamps, rewards earned and redeemed, dates and times, and which Business issued the card.
Wallet device information: when you add a card to Apple Wallet, your device sends an anonymous device identifier and push token so your card can update. Google Wallet cards are updated through Google.

We do not ask Customers for an email address, phone number, birth date, location history or payment details.

In the Loyality app for businesses (iPhone, iPad and Android)

Camera: used only while you scan a customer's card. The QR code is read on your device; we don't store or upload camera images.
Sign-in: the app keeps a sign-in token on your device so you stay signed in. Signing out removes it.
Crash and performance reports: if the app or our servers hit an error, a technical report (device model, OS version, app version, the screen and error) is sent to our error-monitoring provider, Sentry. It does not include your email, name or customers' details.

The app does not use advertising identifiers, does not track you across other companies' apps or websites, and does not access your location, contacts or photos.

Automatically

Our servers keep standard logs (IP address, browser type, time of request) for security and to keep the service running.

How we use information

To provide the service: create and update loyalty cards, record stamps and rewards, and show Businesses their dashboard.
To deliver messages a Business chooses to send to its Customers' wallet cards.
To process subscriptions and purchases, prevent fraud and abuse, and keep the service secure.
To provide support and communicate with Businesses about their account.

We do not sell personal information, and we do not use Customer information for our own advertising.

How information is shared

With the Business that issued your card (your optional first name and card activity).
With service providers that help us run the service, such as hosting, email, Paddle (payments), Sentry (error reports), Apple (Apple Wallet updates) and Google (Google Wallet), under contracts that limit their use of the data.
When required by law or to protect the rights, safety and security of our users and service.
In a business transfer, such as a merger or acquisition, subject to this policy.

Messages and notifications

Businesses can send offers and greetings that appear on their wallet card. We limit how often each card can receive promotional messages. Customers can turn off notifications for any card in Apple Wallet or Google Wallet settings, or remove the card at any time.

Data retention

We keep Business account data while the account is active and for a reasonable period afterwards for legal, tax and security purposes. Card data is kept while the issuing Business uses our service. When a Business deletes its account, its Customers' card data is deleted or anonymized.

Your rights and choices

Depending on where you live (including California under the CCPA/CPRA and other US state privacy laws), you may have the right to access, correct or delete your personal information, and to not be discriminated against for exercising these rights. To make a request, email support@getloyality.com. Business users can also delete their account from the app. We will verify requests before acting on them.

Deleting your account

In the app or on the web dashboard, open Account → Sign out & delete → Delete account. This immediately and permanently deletes your login and every business where you are the only owner, including its customers' cards, stamp history and messages, and cancels any paid plan for those businesses. Businesses you share with another owner are kept. Backups are overwritten within 30 days. Payment records kept by Paddle as merchant of record are retained by Paddle as required by tax law. See how to delete your account for other ways to ask.

Security

We use encryption in transit (HTTPS), access controls, and audit logs of stamps and redemptions. No method of transmission or storage is 100% secure, but we work to protect your information.

Children

The service is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes

We may update this policy. If changes are significant, we will notify Businesses by email or in the app. The "Last updated" date shows when it last changed.

Contact

Dror Zohar
support@getloyality.com
https://getloyality.com