Questions and answers
What business owners ask before they start, mostly about security, privacy and whether the data can be trusted. If anything here is unclear, we answer on the phone too.
Who sees my customers
Who actually holds the customer list?
You do. Customers join your club, and the list belongs to the business. We process it on your behalf and use it for nothing else: we do not sell it, share it, or market through it.
Can another business on the system see my customers?
No. Every query is scoped to the business that made it, including in the database's own permission layer. A customer who joins two businesses is two separate records that never speak to each other.
What happens if I leave?
We export all your data to a file, then delete it. There is no hidden retention period and no need to ask twice.
What do you store about a customer?
Name, phone, and email if they gave one. A birthday only if they filled it in. And what happened in the club: stamps, balances and redemptions. No passwords, no payment details, no location.
Security
Where does the data live?
On servers in the European Union, encrypted at rest and in transit. Access is limited to staff who need it for support, and every such access is logged.
What if one of my staff leaves?
You revoke their user and access closes immediately. Screens and actions can be opened or closed per cashier, so a cashier can stamp without seeing the customer list or changing balances.
Can stamps be faked?
The card is scanned against the system, not against the device. An NFC tag signs every tap with a unique key and a rising counter, so a copy of an old tap is refused. There is a built-in wait between two stamps for the same customer.
What happens if the system goes down mid-day?
Cards already in customers' wallets carry on showing. A stamp that did not register can be added by hand from the customer's card, and every such correction is logged with who made it.
How do I know the numbers are real
How do I know the data isn't being inflated?
Every number on the screens is derived from the events themselves, and you can drill from the number down to the list of events behind it. The transactions screen shows every stamp, redemption and balance change, with the time and who did it.
And what about manual changes?
Changing a balance or stamps by hand is a separate permission, and not every cashier gets it. Each such change is logged separately from an ordinary stamp, so you can tell what happened at the counter from what somebody corrected.
Measures like "is the club working": where do they come from?
From the transactions recorded in the club over a defined window, not from an estimate. If there is not enough data yet, the screen says so instead of showing a number that merely looks credible.
Can I export everything and check for myself?
Yes. The customer list and the transactions export to a file at any time, without asking us.
What my customers experience
Do they need to download an app?
No. The card goes into Apple Wallet or Google Wallet, which are already on the phone. There is no app signup and no password.
What if a customer deletes the card or changes phone?
They go back in through the existing-members link and get the same card with the same balance. Nothing is lost.
Do you send my customers advertising?
Only the business sends, and only to people who opted in. There is a legal window of hours for marketing messages and the system will not send outside it. Service messages, such as a stamp being recorded, are not advertising and do not count against quotas.
A customer wants to be removed. What happens?
We remove them and delete the card. They stop receiving messages from that moment.
Didn't find your answer?
Write to us and we'll reply. Questions about data processing and a data processing agreement are answered in writing.
support@loyalil.com