Privacy Policy
0.1 · September 7, 2026
Draft pending legal review. This text may change before launch.
1. What this policy covers
This policy explains what personal data the platform collects from customers, creators and business users, why, where it is kept and how long. It applies to the website, the wallet cards and the dashboards.
2. Data we collect
Mobile numbers and one-time codes for sign-in; card memberships, stamps, points and purchases at businesses; creator profiles, links and earnings; business details, staff and branches; device and network signals used to detect fraud, which are stored hashed. Identity documents and bank details of creators are collected only for verification and payouts.
3. Why we use it
To run the loyalty programmes and wallet cards, attribute customers to creators, calculate and pay earnings, invoice businesses, prevent fraud, secure accounts and comply with legal obligations. We do not sell personal data and we do not use it for advertising by third parties.
4. Where data is kept
Personal data is stored in the United Arab Emirates. Identity documents and bank details are sealed with a key that ordinary application servers do not hold and are opened only for verification and payment files on a restricted administrator system. Phone numbers, IP addresses and device identifiers are hashed in logs.
5. Who receives data
Wallet providers (Apple and Google) receive what is needed to display and update a card; the payment provider receives what is needed to bill a business; the messaging provider receives the mobile number to deliver a one-time code; banks receive the name and account of a creator to pay them. Businesses see their own members' cards and purchases; creators see aggregated results of their links.
6. How long we keep it
Card and purchase records are kept while the membership is active and for the retention period the law requires for financial records afterwards. Fraud signals are kept for the review periods they serve. When a customer deletes their data, the wallet card is revoked and personal identifiers are removed within the period stated in the data protection notice.
7. Your rights
You can ask for a copy of your personal data, correct it, or delete it. Customers can delete their data from the card page; creators and businesses can ask through their dashboards. Details are in the data protection notice.
8. Changes and contact
We will post changes to this policy on this page with a new version and date. Questions and requests can be sent through the contact details published on this site.