Privacy Policy

1. Data we collect

We collect your name and mobile number to create your account, and (if you choose Google sign-in) your Google email. We collect precise location only at the moment you or a shop raises a bill, to confirm you are physically at the shop. We collect device information to let you view and sign out of your logged-in devices. We store your transaction history (purchases and points) so the app can show your balances and activity. We collect limited, anonymized crash and error information to keep the app reliable.

2. How we use it

Your data is used only to run the app: authenticate you, record and display your transactions and points, verify you are at a shop when a bill is raised, manage your logged-in devices, and send you notifications about your account. We do not sell your personal data, and we do not use it for advertising.

3. Consent (DPDP Act 2023)

By creating an account you consent to this Privacy Policy and our Terms & Conditions. You may withdraw consent at any time by requesting account closure as described below.

4. Sharing with shops and service providers

When you link a shop, that shop can see the information it needs to run its own loyalty program for you: your name, your customer code, and your points and transaction history at that shop only. A shop can never see your activity at any other shop.

We also use service providers for hosting, notifications and SMS delivery, under contractual confidentiality obligations. We do not sell your personal data, and we do not use it for advertising.

5. Storage and security

Your data is encrypted in transit and at rest, and access is restricted to authorised personnel on a need-to-know basis.

We are migrating all personal data to an India region. Until that migration is complete, some data may be stored outside India. This policy will be updated when the migration completes.

6. Data retention & deletion

We retain your data for as long as your account is active, and for a limited period afterward where required for legal, tax, fraud-prevention, or dispute-resolution purposes (for example, transaction records a shop may need to resolve a billing dispute).

You can delete your account and personal data at any time from Settings, using "Delete my account". You can also email support@loyaltyzone.in from your registered contact details. We complete deletion requests within 30 days, except where retention is legally required as described above. Backup copies of data may take up to an additional 30 days to be purged after the primary deletion completes.

If you are a shopkeeper and your shop still holds customer points when you delete your account, your personal data is anonymised immediately and your customers are notified before the shop closes, so they have an opportunity to redeem.

7. Breach handling

In the event of a personal-data breach, we will notify affected users and the Data Protection Board as required under the DPDP Act.

8. Contact

For privacy questions, deletion requests, or to reach our grievance officer, contact support@loyaltyzone.in.