Privacy Policy

What BrandLoyalty is

BrandLoyalty lets businesses run digital loyalty programs. Customers join a business’s program through an enrollment page or the BWallet app and receive a digital loyalty card (Apple Wallet, Google Wallet or BWallet). Staff use the merchant dashboard and the BrandLoyalty Merchant app to issue stamps and points and redeem rewards.

What we collect

• Customers (loyalty members): name, phone number, email address (optional), date of birth (optional, for birthday rewards), and your loyalty activity (stamps, points, visits, rewards) with the businesses you join.
• BWallet app location (optional): when you open the app, and only if a business you hold a card with has set up location-based offers, we check your approximate location once in the foreground to show you their in-store offer. Location is used on your device for this check, never stored and never shared. You can decline the permission and everything else keeps working. We never access location in the background.
• Apple Wallet and Google Wallet — location (handled by your phone): a business can attach the addresses of its branches to the loyalty card it issues you. Your phone then uses that list to show the card on your lock screen, or send you an arrival notification, when you are nearby. This runs entirely inside Apple Wallet or Google Wallet on your own device — we never receive your location, and neither does the business. We only ever see that a card was scanned at a counter. You can turn this off in your phone's settings for the card (iPhone: the card's ⋯ menu; Android: Google Wallet notification settings), and the card keeps working normally.
• Merchants and staff: business name, contact details, staff email addresses and roles, and counter activity (which staff member issued a stamp or redeemed a reward).
• Camera: the merchant app and dashboard scanner use the camera solely to read loyalty QR codes at the counter. No photos or video are stored.

How we use it

• To run the loyalty programs you join: tracking stamps, points, tiers and rewards.
• To deliver your digital card and keep it updated in your wallet.
• To send program messages from businesses you joined (push notifications; SMS only where you agreed to receive them).
• To give businesses aggregate analytics about their own program.

We do not sell personal data, show ads, or share your data across businesses — each business only ever sees the loyalty activity of its own program.

The BrandLoyalty Bill Reader browser extension

Businesses whose point-of-sale runs in a browser can install the BrandLoyalty Bill Reader extension on the till, from the Chrome Web Store or Microsoft Edge Add-ons. It is a tool for the business, installed by the business, on the business’s own counter computer. It is never installed on a customer’s device.

• What it reads: the receipt shown on the POS page when a bill is printed — its total, tax, invoice number, table or order number, and line items. Nothing else on the page is collected.
• Where it reads: only on the POS websites the business types into the extension’s own settings. On every other site the extension does nothing. It only reads; it never alters the POS page or the printed receipt.
• Where it sends: only to that business’s own BrandLoyalty account, over HTTPS, authenticated with a key the business generates in its dashboard. Receipts are not shared with other businesses and are not used for advertising.
• What it stores on the till: the business’s own settings (the agent key, API address, branch id and the site list), and any bill captured while the internet was down, until it has been sent. It stores nothing about whoever is using the browser and reads no browsing history.
• Customers: a receipt is linked to a customer only when that customer scans their own loyalty card at the counter. A bill nobody scans against is simply a sales record of the business.

Removing the extension from the browser stops all of this immediately and deletes the settings it kept on that machine.

The BrandLoyalty Bill Reader browser extension

Businesses whose point-of-sale runs in a browser can install the BrandLoyalty Bill Reader extension on the till, from the Chrome Web Store or Microsoft Edge Add-ons. It is a tool for the business, installed by the business, on the business’s own counter computer. It is never installed on a customer’s device.

• What it reads: the receipt shown on the POS page when a bill is printed — its total, tax, invoice number, table or order number, and line items. Nothing else on the page is collected.
• Where it reads: only on the POS websites the business types into the extension’s own settings. On every other site the extension does nothing. It only reads; it never alters the POS page or the printed receipt.
• Where it sends: only to that business’s own BrandLoyalty account, over HTTPS, authenticated with a key the business generates in its dashboard. Receipts are not shared with other businesses and are not used for advertising.
• What it stores on the till: the business’s own settings (the agent key, API address, branch id and the site list), and any bill captured while the internet was down, until it has been sent. It stores nothing about whoever is using the browser and reads no browsing history.
• Customers: a receipt is linked to a customer only when that customer scans their own loyalty card at the counter. A bill nobody scans against is simply a sales record of the business.

Removing the extension from the browser stops all of this immediately and deletes the settings it kept on that machine.

Storage & security

Data is stored on managed cloud infrastructure and encrypted in transit (HTTPS). Passwords are stored as salted hashes. Access is limited by role: staff accounts only see their own business.

Deleting your account & data

Account removal: in-app deletion is unavailable. Contact support below to request account or data removal.

By request: email support@brandloyalty.pk from the address (or with the phone number) on the account and we’ll delete it within 30 days. Merchants can request deletion of their business account the same way.

Changes

If this policy changes materially we’ll update the effective date above and notify you in the product. Continued use after a change means you accept the updated policy.