Delete or request your data

Stop a café messaging you. Open your card, tap Manage this card, and untick the offers box. Immediate, reversible, and it does not touch your stamps.

Delete your card entirely. Open your card, tap Manage this card, then Delete this card and confirm. Your stamps, your name and your card’s history are removed from our database immediately, and the pass in your wallet stops working — it shows as expired the next time your phone checks for updates, usually within minutes. It cannot be undone, so claim any reward first.

Neither needs an email, a form, or a wait.

Email rasouli9ali@gmail.com and tell us what you want: a copy of what we hold, or a correction. Deletion you can do yourself, above — but if you have lost access to your card, email us and we will help.

We need to be able to find your card. There is no customer account here, which is good for your privacy but means we cannot look you up by name. Please include:

• Your card’s code — the best option. Open your card, tap Can’t scan? Show this code, and copy the code shown, or send us a screenshot of your card.
• Or the café’s name and roughly when you joined, plus the first name on the card. We may not be able to identify you from this alone, and if we cannot, we will say so rather than guess.

We will not ask you for proof of identity documents. Holding your card’s code is how the card already works, so it is what we use.

What deletion means. We remove your card, your stamp history and your first name, and the pass in your wallet stops working. It cannot be undone and your stamps cannot be restored, so make sure you have claimed any reward first. Your café keeps anonymous totals, for example that it gave out a certain number of stamps that month, which cannot be traced back to you. We keep an anonymous shell of the card (its random code and totals) so the pass can be switched off, your phone’s push address for up to 30 days so that switch-off can reach it, and copies in our provider’s rolling backups are overwritten within about a week.

Email rasouli9ali@gmail.com from the address on your account and tell us what you need. We can send you a copy of your account and café data, correct it, or delete your account and café entirely.

Please read this before asking us to delete a café. Deleting a café also deletes every loyalty card your customers hold with you, along with their stamps. Their passes stop working. We cannot undo it and we cannot warn them for you, so tell your customers first and give them a chance to claim what they have earned.

If you only want to leave and keep your customers’ cards intact, say so — closing your account is not always the right answer, and we will talk it through with you.

How we check it is you, and what happens. Sign in, open Account and choose Request deletion: after you re-enter your password we show you a one-time code, and you email it to us. Our deletion tool refuses to run without that code, so a request has to come from someone holding your password and signed in to your account, not merely from someone who can type your email address. As a second check we also write to the address on your account ourselves, with a fresh email rather than a reply, and ask you to confirm. If you cannot sign in, recover your password first; that proves you control the account email. We then delete your account, your café’s details and images, staff accounts that belong to no other café, and every card your customers hold with you, exactly as if each customer had deleted their own; once those staff accounts go, the daily staff totals no longer name them. For up to 30 days an unnamed shell of the café and of each card stays behind so the passes in your customers’ wallets can be switched off; then it is removed for good, totals included. During those 30 days nobody can join the café or sign in to it.

• We acknowledge your email, usually within a couple of days.
• If we need anything else to find your card, we ask once and explain why.
• We do the thing, and confirm in writing when it is done.
• All of it inside 30 days.

If you are unhappy with how we handle it, you can complain to the New Zealand Office of the Privacy Commissioner at privacy.org.nz, or to your own data protection authority if you are in the UK or the EU. We would rather you told us first so we can put it right.

The full detail of what we hold and why is in our Privacy Policy.

Email rasouli9ali@gmail.com. We answer within 30 days, and usually much sooner. Ali Reza Rasooli, Auckland, New Zealand. We will give you our full postal address on request.