Privacy policy

Who we are

Punch is a loyalty network: one keychain (or the app) holds a separate stamp card at every participating shop. We operate the service; each shop decides its own rewards.

What we collect

• Your email address or phone number, if you sign in to the app or the website. We use it to send sign-in codes.
• Your keychain: its card reference and the chip's serial number, so a copy of the keychain can be told apart from the real one.
• Your visits at each shop: the date and time, the branch, how many stamps were added, and which rewards you redeemed. Staff can add a first name or nickname to your card at their shop.
• Your birthday (day and month only), if you choose to add it, so a shop can give you a birthday treat.
• Push notification tokens, if you allow notifications in the app.
• Whether you agreed to marketing messages, and when.
• Basic technical logs (IP address, device type) kept for security and to stop abuse.

Why we use it

• To count stamps and issue rewards correctly, and to stop fake or doubled stamps.
• To let you see your cards on the keychain page, in the app and in Apple or Google Wallet.
• To send messages you need: sign-in codes, "your reward is ready", "one stamp left", and reminders before your stamps expire.
• Only with your consent: offers and "we miss you" messages from shops you visited.

Who sees what

• A shop sees only the visits, stamps and rewards at that shop. It never sees where else you collect.
• The network itself only knows that a keychain exists and which shops it has cards at, so the same keychain works everywhere.
• Anyone holding your keychain can tap it and see your progress per shop, but not your history, branches or times. The full view needs you to be signed in.

Messages and how to stop them

Service messages (sign-in codes, reward ready, expiry reminders) are part of the service. Marketing messages are sent only if you opted in, at most one per week across the whole network. Reply STOP to any WhatsApp or SMS message, or switch marketing off in the app, and they stop.

How long we keep it

• Sign-in codes: 10 minutes.
• Signed-in sessions: up to 30 days on the website and 90 days in the app, unless you sign out sooner.
• Message log (what was sent, when, and whether it arrived): 12 months.
• Stamp history: as long as your account exists. Shops need these records for their accounting, so when you delete your account the history is kept without anything that identifies you.

Deleting your account

Delete your account at any time in the app under Me → Delete account (it calls DELETE /api/me, the same as the website), or ask us using the contact below. Your email, phone, name, birthday and push tokens are erased, your keychain stops working, and shop records become anonymous. We act on requests by message within 30 days.

Service providers we use

We share only what each one needs to do its job:

• Railway: hosting and database.
• Resend: email delivery.
• Meta (WhatsApp Cloud API) and Twilio: WhatsApp and SMS messages.
• Expo: push notifications to the app.
• Apple Wallet and Google Wallet: only if you add a pass.
• OpenStreetMap: map tiles on the shop map (your browser loads them directly).

The law

We process personal data in line with Lebanese Law No. 81 of 2018 on Electronic Transactions and Personal Data. You have the right to know what we hold about you, to correct it, and to have it deleted. Some providers above store data outside Lebanon; we choose providers with strong security practices.

Children

The service is not meant for children under 13. If a child has an account, contact us and we will delete it.

Changes and contact

If we change this policy we update the date at the top, and tell you in the app for important changes. Questions or requests:

Ask at any shop on the network and they will pass it on to us.