Privacy Policy
Effective date: 3rd of June 2026
This website and the Loyardy platform are operated by Mariia Putkova ('we', 'us'). You can contact us at .
1. Website Analytics
We use Cloudflare Web Analytics to understand aggregate traffic (page views, referrers, device types, countries). Cloudflare's analytics are cookieless and do not use personal identifiers. We do not use tracking cookies or fingerprinting on this site.
Purpose: To measure site performance and improve content and usability.
Legal basis (EU visitors): Our legitimate interests in operating and improving the website. Since we do not place non-essential cookies or use advertising identifiers, prior consent is not required.
2. Loyardy App and Platform
The following applies to all users of the Loyardy mobile app and business dashboard: businesses, their staff members, and customers.
Business accounts
When a business registers, we collect: first name, last name, email address, business name, business description, category, locale preference, and address (country, city, street, postal code). We also store subscription plan and status. Businesses may set brand colours for their loyalty cards.
Staff accounts
Business owners may invite staff members by email. We store the staff member's first name, last name, email address, job title, locale preference, and their association with the relevant business account.
Customer accounts
When a customer registers, we collect their first name, last name, email address, locale preference, and optionally date of birth. We store their loyalty card collection, stamp history, reward history, and redemption records. This data is necessary to operate the loyalty programme.
Stamp and reward activity
Each time a stamp is issued or a reward is redeemed, we record the event including the business, card, timestamp, and customer. This forms the customer's immutable loyalty history and is essential to the integrity of the platform.
Push notifications
With your consent, we send push notifications via Firebase Cloud Messaging (FCM) to business owners, staff members, and customers, to notify you of platform updates and important account information. To do this, we store a device token on your account. You can withdraw consent at any time in your device settings or account preferences.
Business analytics
We process aggregated visit and retention data to provide business owners with analytics dashboards. FREE plan users see 7-day visit counts. PRO plan users see 90-day history plus full analytics: visit frequency, redemption rates, and customer engagement. PREMIUM plan users see full analytics across all businesses and cards with 365-day history. This processing uses data already collected through normal platform operation.
Subscription payments
PRO and PREMIUM plan subscriptions are purchased via Apple App Store or Google Play Store. Payment processing is handled entirely by Apple or Google under their own privacy policies; we do not store your payment card details. Subscription lifecycle events are managed via RevenueCat. We retain records of subscription plan, status, and expiry for billing and legal compliance purposes.
Purpose: To provide, operate, and improve the Loyardy loyalty platform.
Legal basis (EU/UK): Performance of a contract (operating your account and loyalty programme); our legitimate interests (platform security, fraud prevention, analytics); and your consent (push notifications).
We retain account and activity data for as long as your account is active. If you delete your account, your account record, authentication credentials, and all associated activity data are permanently and immediately deleted.
3. Sub-processors
We use the following third-party processors to operate the platform: Amazon Web Services (AWS) for cloud infrastructure, with data stored in the EU (Frankfurt) region; Google (Firebase) for push notification delivery; RevenueCat for subscription management; and Apple and Google for in-app payment processing. Each processor is bound by appropriate data processing agreements and operates under GDPR-compliant terms.
4. Cookies
The loyardy.com website does not set non-essential cookies. If we later add analytics or advertising technologies that use cookies, we will request your consent and update this policy.
5. Your Rights under GDPR
If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
Right of access (Art. 15); right to rectification (Art. 16); right to erasure (Art. 17); right to restriction of processing (Art. 18); right to data portability (Art. 20); right to object to processing (Art. 21).
To exercise any of these rights, contact us at .
You also have the right to lodge a complaint with a data protection supervisory authority. In Poland, this is the Urząd Ochrony Danych Osobowych (UODO): uodo.gov.pl. If you are resident in another EU country, you may contact your local supervisory authority.
6. Data Controller
The data controller for this website and the Loyardy platform is Mariia Putkova, operating as a sole trader (jednoosobowa działalność gospodarcza) registered in Poland. Registered address: Edwarda Stachury 1/13, 80-280 Gdańsk, Poland. NIP: 5842875463. If our legal entity changes in the future, we will update this page.
7. Updates
We may update this Privacy Policy. We will revise the effective date above when we do. For material changes affecting app users, we will notify you via the app or by email.