Privacy Policy

Loyol (“we”, “us”) provides digital loyalty cards you carry in your phone’s wallet. This policy explains what we collect, why, and the choices you have. It is operated by [LEGAL ENTITY / OWNER NAME], [ADDRESS / JURISDICTION].

• Phone number. Used to send you a one-time verification code by SMS and as the identifier for your account and loyalty cards.
• Name (optional). Only if you or a participating business provides it when a card is created. You are never required to enter a name in the app.
• Loyalty activity. The stamps, visits, and rewards on cards you join, tied to the businesses you choose to join.
• Wallet pass device tokens. When you add a card to Apple Wallet, Apple provides a device token we use only to push updates to that pass (e.g. a new stamp).

Location. The app can use your device location to show nearby rewards on the map. This happens on your device only — your location is not sent to or stored on our servers. You can decline location access and still use the app.

We do not collect precise advertising identifiers, and we do not track you across other apps or websites.

• Verify your phone number and keep you signed in.
• Create, display, and update your loyalty cards and Wallet passes.
• Show rewards and businesses relevant to you.
• Provide support and keep the service secure and working.

We use a small number of processors strictly to run the service:

• Twilio — sends your SMS verification code (receives your phone number).
• Supabase — hosts the database that stores your account and card data.
• Apple — delivers Wallet pass updates via the Apple Push Notification service.

We do not use analytics, advertising, or tracking SDKs, and we do not sell or rent your personal information. [ADD ANY OTHER PROCESSORS / DETAILS]

We keep your information for as long as your account is active. Verification codes expire within minutes. [STATE YOUR RETENTION PERIODS / DELETION-ON-INACTIVITY POLICY]

You can delete your account and all associated data at any time from inside the app: open the You tab and tap Delete account. This permanently removes your account, cards, stamps, and history. You can also request deletion or access by emailing [SUPPORT EMAIL].

[ADD REGION-SPECIFIC RIGHTS (e.g. GDPR / CCPA) IF APPLICABLE]

Loyol is not directed to children under [13 / 16], and we do not knowingly collect their information.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above. [ADD NOTIFICATION APPROACH IF ANY]

Questions about this policy? Email [SUPPORT EMAIL].