Privacy Policy

Last updated: February 21, 2026

This Privacy Policy describes how StampCard ("we", "us", or "our") collects, uses, and shares information about you when you use our services, including:

Website iOS App Android App

Our services include the StampCard website (stampcard.io), the StampCard Merchant mobile application for iOS and Android, and related services (collectively, the "Services").

Information We Collect

Information You Provide

We collect information you provide directly to us, including:

Account Information: When you create an account, we collect your name, email address, phone number, and password.
Business Information: For merchant accounts, we collect business name, address, logo, and business category.
Payment Information: If you subscribe to paid features, we collect payment details through our secure payment processor.
Communications: When you contact us, we collect the content of your messages.

Information Collected Automatically

When you use our Services, we automatically collect certain information:

Device Information: Device type, operating system, unique device identifiers, and mobile network information.
Usage Information: Pages visited, features used, time spent, and interaction patterns.
Location Information: With your consent, approximate location based on IP address or precise location from your device.
Log Information: Access times, error logs, and referring URLs.

Information from Mobile Apps

Our iOS and Android applications may access:

Camera: To scan customer QR codes for loyalty card management. Camera access is only used when you actively scan.
Biometric Data: Face ID (iOS) or fingerprint authentication (Android) for secure login. Biometric data is processed locally on your device and never transmitted to our servers.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Services
Process transactions and send related information
Send promotional communications (with your consent)
Monitor and analyze trends, usage, and activities
Detect, investigate, and prevent fraudulent transactions and abuse
Personalize and improve your experience
Comply with legal obligations

Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

Service Providers: With vendors who perform services on our behalf (hosting, analytics, payment processing).
Business Transfers: In connection with a merger, acquisition, or sale of assets.
Legal Requirements: When required by law or to protect rights and safety.
With Your Consent: When you direct us to share information with third parties.

Data Retention

We retain your information for as long as your account is active or as needed to provide Services. We may retain certain information for legitimate business purposes or as required by law. When you delete your account, we delete or anonymize your personal information within 30 days, except as required for legal compliance.

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit and at rest
Regular security assessments and penetration testing
Access controls and authentication requirements
Employee training on data protection

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access: Request a copy of your personal information.
Correction: Request correction of inaccurate information.
Deletion: Request deletion of your personal information.
Portability: Request your data in a portable format.
Opt-Out: Unsubscribe from marketing communications at any time.

To exercise these rights, contact us at [email protected].

Children's Privacy

Our Services are not directed to children under 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Third-Party Services

Our Services integrate with third-party services including:

Apple Wallet and Google Wallet: For digital loyalty card storage
Analytics Providers: To understand usage patterns
Cloud Infrastructure: For hosting and data storage

These services have their own privacy policies, and we encourage you to review them.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: