Privacy Policy

Safyah Rewards is operated by Safyah Solutions ("we", "us"). This policy explains what we collect when you use the Safyah Rewards app and website, why, and the choices you have. It covers customers. People who run or work at a business using Safyah Rewards Merchant should read the Merchant Privacy Policy.

Each business you join runs its own loyalty programme. When you join one, that business also receives some of your information, as described below, and handles it under its own policies.

• Account details. Your name and email address. If you sign in with Google or Apple, we receive your name, email address (which may be an Apple private relay address) and an account identifier from that provider. We never see your Google or Apple password.
• Loyalty activity. The businesses you join, your cards and points balances, each time points are earned, redeemed, adjusted or expire (including the amount you spent when a business records it, the location and the staff member involved), your reward redemptions and requests to join a programme.
• Notifications. A push token for your device so we can send notifications, and a copy of each notification in your in-app inbox.
• Location, only when you use it. See "Location and counter check-in" below.
• Technical data. Our servers log requests, including your IP address, device type and the time, to keep the service secure and fix problems.
• Messages to us. Whatever you include when you email support.

Nearby. When you open Nearby, the app asks for your location and sends it to our servers to find businesses around you. We use it for that search only and do not store it. Apart from Nearby and the optional counter check-in below, the app works without location access.

Counter check-in (optional, off by default). If you turn it on, the app uses Bluetooth and your location permission to notice a signal broadcast by the counter of a business where you already have a card. When it does, we record that you are at that business for about 10 minutes so its staff can find you without scanning your code. If you allow "Always" location access, this can happen while the app is closed. We do not record where you go, and the check-in is deleted when it expires or as soon as you turn the feature off.

Maps. Maps in the app are drawn by Apple Maps on iPhone and Google Maps on Android. Those providers receive the area of the map you're viewing and your device's IP address under their own privacy policies. If you ask for directions, the address is handed to your maps app.

• To create and secure your account, including emailing sign-in codes.
• To run your loyalty cards: show your balances, work out points, process redemptions and apply each programme's expiry rules.
• To generate the code that staff scan. It is signed, changes every minute and never contains your balance.
• To send notifications you can expect: points earned or changed, answers to your redemption and join requests, offers from staff, and warnings before your points expire.
• To prevent fraud and abuse, and to keep the service reliable.
• To answer you when you contact us.

Businesses you join. The owner, managers and staff of a business where you have a card can see your name, your email address (partly hidden for staff in some views), your card and its history at that business, and your redemptions there. They cannot see your cards at other businesses.

Service providers who help us run Safyah Rewards, under contracts that limit their use of your data:

• our cloud hosting provider, which stores the service's data;
• Google Firebase Cloud Messaging, and through it Apple Push Notification service, to deliver notifications;
• Google and Apple, when you choose to sign in with them;
• our email delivery provider, to send sign-in codes.

We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of our business, in which case this policy continues to apply.

We do not sell your personal information, show you ads, or track you across other companies' apps and websites.

• Your account and loyalty data, for as long as you have an account.
• Inbox notifications, for 90 days.
• Counter check-ins, for about 10 minutes.
• Your location for Nearby, not at all beyond the search.
• Server logs, for a short period before they are deleted.

You can delete your account at any time in the app under Account → Delete account. When you do, we delete your profile, sign-in links, push tokens, notifications, check-ins, pending redemptions and join requests. If you signed in with Apple, we also revoke our access to your Apple ID.

Businesses keep their records of points awarded and rewards redeemed so their history and totals stay correct, but those records are anonymised: your name and account are removed and they show as "Deleted customer". Any points left on your cards are lost.

• Change your name in the app at any time. To change your email address, contact us.
• Turn notifications, location access and counter check-in on or off in the app or your device settings.
• Delete your account in the app.
• Ask us for a copy of your data, or to correct, restrict or delete it, by emailing support@safyah.com.

Depending on where you live, you may have further rights, including the right to complain to your local data protection authority. We will not treat you differently for using them.

Data travels over encrypted connections. Points can only be changed by our servers, never directly by an app, and every change is recorded. Codes shown at the counter are signed and expire within a minute. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you as the law requires.

Safyah Solutions is based in Saint Vincent and the Grenadines, and our service providers may process data in other countries, including the United States. When we transfer data, we use safeguards required by applicable law.

Safyah Rewards is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

We will update this page when our practices change and revise the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

Questions or requests about your privacy: support@safyah.com.