Privacy Policy
Last updated: 1 July 2026
This policy explains what personal data Tally collects, why, and your rights over it. It covers the Tally customer app and the merchant dashboard. We keep data collection to the minimum needed to run a loyalty programme.
Who we are
Tally provides a digital loyalty platform for independent cafés. For data-protection purposes, Tally is the data controller for the customer app, and each café is the controller for its own customer relationships, with Tally acting as processor. Contact us at tallyloyaltyapp@gmail.com.
What we collect
- Your mobile phone number (to create and sign in to your account)
- An optional display name
- Your loyalty activity — stamps collected, rewards earned and redeemed, and which cafés
- A device push token, only if you enable notifications
- Basic technical data needed to operate and secure the service
We do not collect payment card details from customers, and we do not track your location.
How we use it
- To run your loyalty cards — recording stamps and rewards
- To let your café recognise your progress and redeem rewards
- To send re-engagement notifications, if you opt in
- To keep the service secure and prevent fraudulent stamps
Our legal bases (UK GDPR) are performance of a contract (running your loyalty account), your consent (notifications), and our legitimate interests (security and improving the service).
Who we share it with
We share data only with providers that help us run Tally:
- Supabase — database, authentication and hosting
- An SMS provider — to send your sign-in code
- Stripe — merchant subscription billing (not customer payments)
- Apple and Google — app distribution and push notifications
We never sell your personal data.
Where it's stored & how long
Data is stored on secure cloud infrastructure. We keep your account and loyalty data while your account is active, and delete or anonymise it within a reasonable period after you close your account or a café leaves Tally.
Your rights
Under UK GDPR you can ask us to:
- Access a copy of your data
- Correct inaccurate data
- Delete your data
- Object to or restrict certain processing
- Withdraw consent (e.g. turn off notifications) at any time
To exercise any of these, email tallyloyaltyapp@gmail.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
Children
Tally is not directed at children under 13, and we don't knowingly collect their data.
Changes
We may update this policy; we'll post the new version here and update the date above. Questions? Email tallyloyaltyapp@gmail.com.