Our data promise

Your customers' data stays yours.

We run the card service for your brand. We never sell data, show ads, or use one brand's customers for anyone else.

Three promises

What you can hold us to.

01
Your data, your customers.
You decide what's collected. We process it only to run your card, under your signed authorisation.
02
Walled off from every other brand.
Each brand's data is kept separate, and every request is checked against the brand it belongs to.
03
Nothing in the browser.
Customers' phones and your staff's screens never hold a key to the database. All data access happens on our servers.

What we hold, and why

Only what the card needs.

Your customers

Name and mobile number, plus email, birthday and anniversary only if the customer gives them
The store they joined at
Bills your staff record, and the points, tier and rewards that follow from them
The technical identifiers Apple and Google need to update a saved card

Your team

Name, email, role and sign-in history
Billing details from Razorpay. We never see card or bank numbers.

What we never collect

Card or bank numbers, location tracking, contacts, or anything from the customer's phone beyond the saved card.

How it is protected

The details, in plain words.

01Encrypted in transit and at rest.
02The keys that sign your brand's wallet cards are encrypted with a separate master key.
03Sign-in codes and staff PINs are stored only as scrambled hashes, never in readable form.
04Card links use long random tokens that can't be guessed.
05Repeated wrong staff PINs lock that login for a while.
06Phone numbers and keys never appear in our system logs.
07Every action our own team takes on a brand account is recorded in an internal log.
08Only managers and owners can adjust points, and each adjustment needs a reason.

Where it lives

Three stops, start to finish.

Your store
Staff record a bill
LoyaltyFold
Our servers update the card
Customer's wallet
Apple Wallet or Google Wallet

The providers we use

Supabase: Our database.
Vercel: Hosting.
Apple Wallet and Google Wallet: To deliver the card.
Resend: Sign-in emails only.
Razorpay: Brand billing only.

Each provider handles data only to provide its service.

Your controls

You can always take it back.

Export your members at any time.
Customers can ask you or us to see, correct or delete their data.
A customer who removes the card from their wallet stops getting updates.
If you leave: we hand over your data on request, then delete it within 30 days, except what the law makes us keep, such as invoices.

India's data law (DPDP Act, 2023)

Who is responsible for what.

You

Data fiduciary

For your customers

LoyaltyFold

Your processor

Acting on your authorisation

Every brand signs a written authorisation before its card goes live.
A grievance officer acknowledges complaints within 48 hours and aims to resolve them within 30 days.
If there's a breach affecting your data, we tell you and the authorities as the law requires.

If something goes wrong

Talk to a person.

No system is perfect, and we won't pretend ours is. If you think something is wrong with your data or your cards, write to us and a person on our team will reply. We will tell you what we know, what we are doing about it and when you will hear from us next.

Questions from your IT or legal team? We'll answer them in writing.