Privacy

If you have a Cardly account

You give us an email address and a password to sign in, and then whatever you choose to put on your card — a name, a job title, a company, a phone number, links, an address, opening hours, a photo or a logo.

All of it exists so your card can be shown to someone. Anything you mark as published is public by definition: it sits at a permanent web address that anyone who taps your card or scans your code can open.

If you are looking at somebody's card

We count that you looked, so the owner can see whether their card is being used. We do not record who you are.

Specifically, we store the type of thing that happened — a view, a tap, a link click, a saved contact — along with your browser's user-agent string, and the country and city your connection appears to come from. Your IP address is never stored.

To tell two views apart from one person looking twice, we store a hash built from your IP and user-agent together with a secret and today's date. Because the date is inside the hash, it changes every day and cannot be used to follow you from one day to the next. Nobody, including us, can turn it back into you.

If you join a loyalty card

You can join without giving anything at all. If you do give a mobile number, it is used for exactly two things: so staff can find your card when you have forgotten your phone, and so you can get your stamps back on a new one.

It is never used to message you, and it is never sold, shared or handed to anyone else. The venue can see the last four digits when they look you up at the counter, so they can tell two people with the same name apart. They cannot see the whole number.

We also keep your stamp balance and a record of each stamp and reward — when it happened, at which venue, and which member of staff gave it. That record is what lets a disagreement at a counter be settled, and it is why it is kept rather than overwritten.

If you add a pass to Apple Wallet

Apple gives us an identifier for your device and a token that lets us tell your Wallet the pass has changed. That is the whole purpose, and it is the only thing either is used for.

Removing the pass from Wallet tells us to delete both, automatically. You do not have to ask.

Who else can see any of this

Nobody buys it, because none of it is for sale. Cardly makes money from subscriptions and physical cards.

The services that make the product work necessarily handle some of it: Apple, to deliver a Wallet pass and to tell your phone it changed; and our hosting and database providers, who store it on our behalf and under our instruction.

We will hand over data if a UAE court or a competent authority requires it under law, and not otherwise.

How long it is kept

Your card and your account: until you delete them.

Loyalty stamps and their history: while the programme is running, and while your card is active.

The counts behind a card owner's statistics: kept as counts. The daily visitor hash is meaningless the day after it is made.

Getting it back, or getting rid of it

If you have an account, the app will hand you everything we hold about you as a file, and it will delete your account and everything attached to it. Both are in Settings, and neither needs to go through us.

If you joined a loyalty card and want it gone, ask the venue, or write to support@valzak.ae from the number or with the member code on your card. Under UAE Federal Decree-Law No. 45 of 2021 you can ask us what we hold, ask us to correct it, ask us to delete it, and object to how it is used.

Children

Cardly is not built for children and we do not knowingly collect anything from anyone under 18. If you believe a child has given us something, write to us and we will remove it.

If this changes

The date at the top of this page changes with it. A change that affects what we collect or why will be told to you in the app before it takes effect, rather than quietly published here.