Privacy policy

TallyStamp is a digital loyalty card app for local businesses and their customers. This policy explains what data we process, why, and what rights you have.

Controller

Daniel Díez Sánchez (TallyStamp). Contact: support@tallystamp.com.

What data we process

Business account. When you sign in with Google or Apple we receive your email, name and profile photo, which we use only to identify your account. We don't publish or share this data.

Business data. The profile you fill in (business name, opening hours, contact, links), your card designs and the references you use to note down your customers (a name, a nickname, a table). The business enters these references and is responsible for them; TallyStamp stores and syncs them on its behalf to provide the service. The same applies to the images and the PDF menu the business uploads: the customers who have its card can see them.

PRO subscription. Payment is handled by Apple or Google: we never see your payment details. To know whether your account has PRO we use RevenueCat, which keeps the subscription's purchase history linked to your business account's identifier.

Customer wallet. The wallet works without an account: it doesn't ask for an email, phone number or name. It keeps an anonymous installation identifier and the cards you add by scanning a code. To notify the winner of a prize draw, the wallet subscribes to a Firebase Cloud Messaging notification channel; that notification identifier is managed by Firebase and we don't store it.

Usage and errors. We collect aggregated usage events (Firebase Analytics) and crash logs (Firebase Crashlytics). No event contains names, emails or card identifiers.

This website. It counts visits with Cloudflare Web Analytics, in aggregate: no cookies, and nothing that identifies you.

Why, and on what basis

Providing the service (performance of the contract): accounts, syncing and backup of the business's data. Improving the app and fixing errors (legitimate interest): aggregated analytics and error logs. We don't sell data or show third-party advertising.

Where it is stored and who helps us

The app's data is stored in Google Firebase (Google Cloud), on servers in the European Union (Belgium), encrypted in transit. Two providers help us, acting as data processors: Google (storage, syncing, notifications, analytics and crash logs) and RevenueCat (PRO subscription status). Both are US companies and may process data there; those transfers are covered by the EU-U.S. Data Privacy Framework or by the European Commission's standard contractual clauses.

How long

For as long as your account exists. When you delete the account from the app, its data is erased immediately; if you ask us by email, within 30 days at most. Only what the law requires us to keep is retained.

Deleting the account doesn't cancel an active PRO subscription: you cancel it in the store, in Google Play → Subscriptions or Settings → Apple ID → Subscriptions. Nor does it erase the purchase history RevenueCat keeps; if you want us to delete it, write to the contact email.

Your rights

Access, rectification, erasure, objection and portability: write to the contact email. You can carry out the complete deletion of your account yourself from the app, in Account → Business settings → Delete account; the instructions, and the route for anyone who has already uninstalled it, are in Delete your account. You have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Minors

TallyStamp is aimed at businesses and their customers in general; the wallet doesn't create accounts or collect personal data from its users.

Changes

If this policy changes in a significant way, we'll announce it in the app or on this page before the change takes effect.