Privacy

If you hold a loyalty card

• Your name and email address, which you give when you join a café's program.
• Your visits, points and redeemed rewards at that café, with their dates.
• Whether you agreed to receive offers by email from that café. It's off unless you turn it on, and you can turn it off in your card settings at any time.
• If you add your card to Apple Wallet, a device identifier and push token supplied by Apple, used only to refresh the pass when your balance changes.

The café you joined, and the team members it invites, can see your name, email and loyalty history at that café. Other cafés can't. The QR code on your card contains a random identifier and no personal details.

If you run or work at a café

• Your email address and name, to sign you in and show who recorded a visit or a redemption.
• Your café's details: name, description, logo, colors, rewards and program settings.
• If you subscribe, Stripe handles the payment. We store your Stripe customer and subscription identifiers and status. We never see your card number.

How it's handled

• Data is stored with Supabase (database, sign-in) and served by Vercel. Sign-in codes and café emails are sent through Resend.
• We use cookies only to keep you signed in and to remember which café a team member is working in. There are no advertising or analytics cookies.
• We don't sell personal data, and we don't share it beyond the providers above.

Your choices

You can change your name and email preferences in your card settings. To get a copy of your data or have your card deleted, ask the café you joined, or write to us.