What we collect
Business account details (name, email, phone, outlet addresses) and customer loyalty identifiers (phone number or email, visit timestamps, stamp and reward history). We do not collect payment card data.
Legal
Privacy Policy
Plain-language summary of how we handle data.
Location data
If a business runs more than one outlet, we ask the customer's browser for an approximate location at the moment of a scan, only to match the visit to the nearest branch. The coordinates are used for that match and are not shared with other businesses or shown as a precise position.
How we use data
To run loyalty cards, prevent duplicate or fraudulent scans, produce analytics for the business that issued the card, and send service notifications. We do not sell personal data.
Who can see what
A business can only see the customers who scanned its own QR codes. Customers can only see their own cards, rewards and scratch results. Access is enforced at the database level.
Retention and deletion
Loyalty records are kept while the business account is active. Customers may ask the business, or us, to delete their loyalty record at any time and we will remove it within 30 days.
Contact
Questions about privacy can be sent to hello@loyalflow.sg.