Privacy Policy
LoyaltyTap is a digital loyalty platform for cafés, restaurants and local businesses. This policy explains what data we collect, why, and how long we keep it.
Last updated 3 September 2026
Who we are
LoyaltyTap provides the loyalty software. The business you collect stamps with is the controller of its own customer loyalty data; LoyaltyTap processes that data on its behalf. Contact us at hello@loyaltytap.app.
Data we collect from customers
- Account details you provide when you sign in (email address, or your Google account email if you sign in with Google).
- An optional display name you choose for your loyalty card.
- Loyalty activity: which business card you hold, stamps collected, rewards earned and redeemed, and the time of each stamp.
- Notification data: a push subscription for your device if — and only if — you opt in.
- Basic technical data needed to keep tapping secure, such as the NFC device token used and timestamps for abuse prevention.
Data we collect from businesses
Business account details, staff members and roles, locations, loyalty programme and branding settings, NFC device records, and subscription status. Card payments are handled by Stripe — LoyaltyTap never sees or stores full card numbers.
Why we use it
- To create and show your loyalty card and stamp progress.
- To award stamps and rewards, and to prevent duplicate or fraudulent taps.
- To send loyalty notifications you have opted in to.
- To give the business aggregate loyalty statistics for its own customers.
- To bill business subscriptions and provide support.
Data separation
Each business can only see its own customers and loyalty activity. Access is enforced at the database level, not just in the interface, and no business can message or view another business's customers.
Processors we use
- Cloud hosting and database, for the application and loyalty records.
- Stripe, for business subscription payments.
- Browser push services (Apple, Google, Mozilla), to deliver notifications you opted in to.
Retention
Loyalty records are kept while the card is active and the business remains a customer. Push subscriptions are deleted when you opt out or remove the card from your device. You can ask us to delete your account data at any time.
Your rights
You can request access to, correction of, or deletion of your personal data, and you can withdraw notification consent at any time from your loyalty card. Email hello@loyaltytap.app and we will respond within 30 days.
Cookies and local storage
We use only what the product needs: a session for signing in, and a stored reference to the last loyalty card you opened so a Home Screen shortcut reopens the right card. No advertising or third-party tracking cookies.