Your customers’ data, protected and yours
Updated September 30, 2026
Your data and your customers’ data are protected under the privacy laws that apply to your business. Here is what we do, point by point, and what we don’t promise.
On this page
What the card asks of your customers
A first name, then a phone number or email: nothing else is required. The birthday (day and month only) is asked only if you turn on that message. The card never asks anything about health.
Built to help you follow privacy laws: separate consent for each use, a ready privacy policy, an incident log.
Promotions go only to customers who opted in, with instant unsubscribe.
How the data is kept
Phone numbers and emails encrypted
They are encrypted before being saved. To find a customer at the counter, the system uses a code made from the number, never the number itself.
Each business only sees its own customers
This separation is built into the core of the system, not just on screen.
Encrypted connections
All traffic between phones, the counter and our servers goes through encrypted connections.
Encrypted backups
Backups are encrypted before they leave our server. The company that stores them can’t read them.
Your account and your counter
Two-step sign-in
Required for the owner and the manager. On top of the password, you need a code from an app or a passkey.
One PIN per employee
Each stamp carries the PIN of the employee who gave it. Stamps are limited per day: going over takes the manager’s PIN.
A log that can’t be erased
Everything is written to the log, even an undo. You’re alerted if an employee keeps stamping the same customer or stamps outside your opening hours.
A changing code on cards that carry a balance
In Google Wallet, a gift card or prepaid pack shows a code that changes regularly, and screenshots of the card are blocked.
Where the data is
Our server is in Germany, in the European Union, with Netcup. Traffic goes through Cloudflare, a US company, and Apple and Google receive what shows on each card. The list of our providers, with their country and role, is in the privacy policy.
If the hosting location changes, this page and the privacy policy are updated.
Your customers’ rights
Every customer has a “my data” link. There they see what the business keeps about them, download it or ask for it to be deleted. They unsubscribe from messages in one step.
Cards unused for a long time are deleted, after notice to the customer.
No commitment: leave whenever you like, with all your data.
If an incident happens
A lost tablet, a file sent to the wrong person: every incident is written in a log. If your customers are affected, we tell you within 24 hours of finding out, then prepare the required notices with you. A lost tablet can be locked remotely.
The documents we give you
You remain responsible for your customers’ information. We give you the documents ready to sign, and fill them in with you. They include the privacy policy, the notice shown at sign-up, the data agreement and, where the law requires it, the privacy assessment.
What we don’t promise
No system is perfect. We claim no certification, and your compliance also depends on your practices and your country. This page informs you, but doesn’t replace a lawyer’s advice.