Privacy notice

This notice explains what information Stamplic handles and why. We keep it to the minimum needed to run the service.

Who we are

Stamplic is a digital loyalty card service run by Dogukan Aksakal, stamplicbusiness@gmail.com. You can contact us at stamplicbusiness@gmail.com.

If you hold a loyalty card

We do not ask for your name, email address, phone number or payment details. A card is identified only by a random code. For each card we keep:

• the business that issued it;
• the number of stamps and rewards;
• when stamps were added and rewards were given.

When you add a card, a small cookie is stored on your phone so that we recognise the card you already have and do not create a duplicate. It is needed for the service to work and lasts up to a year. We do not use advertising or analytics cookies.

To prevent abuse, such as creating large numbers of cards, we briefly record the network (IP) address that requests a new card. These records are kept only for a short time and then deleted automatically.

When you save a card to your wallet, Google handles that step under its own privacy policy.

If you use a Stamplic business account

For owners and staff we keep:

• your username and the business you belong to;
• your PIN in protected form. We cannot see it and cannot tell you what it is, only reset it;
• a record of actions you take, such as adding stamps or giving rewards;
• sign-in attempts, including IP addresses, so we can protect accounts from guessing attacks. These are kept for a short time.

The Stamplic Business app

The Stamplic Business app is used by business staff to scan customer cards and add stamps. When you use it:

• the camera is used only to read the QR code on a customer’s card. Pictures and video are not saved or sent anywhere; the code that is read is sent to our servers to find the card;
• after you sign in, a secure sign-in token is stored on your device so you stay signed in until you sign out or your account is disabled;
• each request includes the version of the app so we can tell you when an update is needed;
• the app does not contain advertising or analytics tools and does not use your location, contacts or photos.

If you install the app from Google Play, Google collects information about the installation under its own privacy policy.

How we use information

We use it to provide and secure the service, keep stamp counts accurate, prevent abuse and answer your questions. We do not sell your information and we do not use it for advertising.

Who we share it with

We use service providers to run Stamplic: Supabase for our database, sign-in and file storage, Vercel for hosting, and Google for Google Wallet. They handle information only to provide their service to us. A business can see stamp and reward activity on its own cards but cannot identify who holds them.

Transfers outside the UK

Our providers may process information outside the United Kingdom. Where this happens we rely on appropriate safeguards.

How long we keep it

Card information is kept while the business uses Stamplic and is deleted when the business account is deleted. Security records are deleted automatically after a short time. You can ask us to delete your card sooner by emailing us.

Your rights

Under UK data protection law you can ask to see the information we hold about you, have it corrected or deleted, and object to or restrict how we use it. Contact us at stamplicbusiness@gmail.com. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Changes

We may update this notice. The date at the top shows when it last changed.