Privacy Policy

There are two distinct relationships, and which one applies changes who is responsible for your data:

• Businesses that subscribe to Noqaty Pass. We are the controller of their account data — the details they give us to open and pay for an account.
• Customers of those businesses. When you join a shop's loyalty programme, that business decides what to collect and why. The business is the controller; Noqaty Pass processes the data on its behalf as its service provider. Requests about your loyalty record are best directed to the business you gave your details to, though you can also contact us and we will pass the request on.

Business account data. Name, email address, phone number, business name, a password stored only as a salted hash, employee accounts created by the business owner, the role assigned to each account, and the shops the business operates together with the map position its owner pins for each one.

Billing data. Subscription plan, invoices, payment status and payment history. Card payments are handled by our payment provider — card numbers never reach Noqaty Pass servers. Cash payments record only the amount and the approval decision.

Loyalty customer data. Name, phone number and email address as entered when joining a programme; an identifier for the loyalty card; visit, stamp, point, reward and spend totals, including lifetime totals kept for the business's analytics; a record of each transaction and reward redemption; a referral code; and, where wallet passes are in use, the Apple or Google wallet pass identifier and the general device type the pass was added from.

Images uploaded by businesses. A logo or card artwork chosen by the business owner, used to render their loyalty card.

Till location and device data. When a business owner or employee records a scan or a reward from the mobile app or a browser till, the device's position at that moment is sent with it, so the scan can be checked against the business's own shop. We keep which of the business's locations the scan was counted at, whether the device was inside it, roughly how far away it was, whether the position appeared to be simulated, and an area of about one kilometre — never the exact position. Each device also sends a random identifier it creates for itself, so every scan can be attributed to the device that made it and a lost or misused device can be blocked. This concerns business staff and their devices only: the location of loyalty customers is never collected.

Technical data. Server logs needed to operate and secure the service, error reports when something fails in the app, the website or our servers, and authentication tokens stored on your own device to keep you signed in.

The Noqaty Pass app is the tool business owners and their employees use to scan customer cards. It requests three permissions and nothing else:

• Camera — used solely to read the barcode on a customer's loyalty card. Barcode recognition runs on the device. Camera frames are not recorded, not stored and never uploaded; only the decoded card identifier is sent to our server in order to look up the customer and record the visit.
• Photo selection — used only when a business owner deliberately chooses a logo image for their loyalty card design. The app has no background access to your photo library.
• Location, only while the app is in use — used to confirm that scans and rewards are recorded inside the business's own shop. The position is read only while the scanner is open or when the owner pins a shop, and it leaves the device only with a scan, a reward redemption, the device's check-in with our server or the owner's pin — never in the background. Apart from a shop's pin, only the summary described in section 2 is kept, never the exact position.

The app does not request contacts or microphone access, and never uses location in the background. It contains no advertising, analytics or tracking SDKs. Release versions of the app send crash reports to Sentry, our error-monitoring provider: the error itself, the app version, and the device model and operating system. These reports are not linked to your account and do not include your IP address or screenshots. Sign-in tokens are held in the operating system's encrypted storage. The app's Diagnostics screen keeps a short list of recent in-app errors in memory only, so support can ask you to read them back; that list is discarded when the app closes.

To create and operate loyalty programmes and keep their balances accurate; to issue and update Apple Wallet and Google Wallet passes; to authenticate users and protect accounts; to show businesses analytics about their own programme; to take subscription payments and issue invoices; to send service messages such as email verification, and programme messages the business chooses to send its own customers; and to provide support and diagnose faults.

We do not sell personal data, and we do not use it for advertising or for automated decisions that affect you.

Personal data is shared only with service providers that make the product work:

• Google Wallet and Apple Wallet — to issue and update the digital loyalty pass, where the business has enabled them.
• Our payment provider — to process business subscription payments.
• Our email provider — to deliver verification and notification email.
• Our hosting provider — which runs the servers the service operates on.
• Sentry — our error-monitoring provider, which receives technical error reports from the app, the website and our servers so faults can be found and fixed.

We may also disclose data where the law requires it. A business only ever sees its own customers; it cannot see data belonging to another business.

Loyalty records are kept while the business's programme is active, because the balance on a card is the service. Business account and billing records are kept for as long as the account exists and afterwards only where accounting or tax rules require it. When an account is closed, its data is deleted or anonymised within a reasonable period unless we are legally required to keep it.

You may request access to your personal data, correction of it, deletion of it, or a copy of it, and you may object to particular uses. To do so, email [email protected].

Loyalty customers: ask the business whose programme you joined to remove you, or email us and we will forward the request to them and act on their instruction.

Business accounts: email us from the address on the account and we will delete the account and its data. Business accounts are created on this website; in the mobile app, an owner can only add logins for their own employees.

We answer requests within one month. If you are not satisfied with our response you may complain to your local data protection authority.

Traffic to our servers is encrypted in transit. Passwords are stored only as salted hashes and are never recoverable in plain text. Access to the service is role-restricted, so employees see only what their role allows, and session tokens are short-lived. No system is perfectly secure, but we take reasonable technical and organisational measures to protect personal data and will notify affected users and regulators of a breach where the law requires it.

Noqaty Pass is a tool for businesses and is not directed at children. We do not knowingly collect personal data from children. If you believe a child's data has been given to us, contact us and we will remove it.

Some of the providers listed above operate outside your country. Where personal data is transferred internationally, we rely on the safeguards those providers offer, including standard contractual clauses where applicable.

We will update this page when our practices change and will revise the “last updated” date above. Material changes affecting business accounts will also be communicated by email.

Questions about this policy or about your data: [email protected].

Noqaty Pass is operated by Hamza Bekkaoui, Rabat, Morocco.