Lealtap
Sign in
EN

Privacy Policy

Last updated: [[Jan 2026]]

Lealtap (“Lealtap”, “we”, “us”, or “our”) is committed to protecting personal data and ensuring transparency in how information is collected, used, and protected. This Privacy Policy explains how we process personal data in connection with the Lealtap mobile application, websites, and related services (collectively, the “Services”).

This Privacy Policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), and Google Play Developer Program Policies.

1. Who This App Is For

The Lealtap mobile application is intended exclusively for business users, specifically:

  • Merchants: businesses that use Lealtap to create and manage loyalty programs and digital passes.
  • Helpers: users invited by merchants to assist in managing those loyalty programs.

Card holders or end consumers do not use the Lealtap mobile application. Any processing of card holder data occurs outside the scope of the mobile app and is not subject to Google Play policies.

2. Who We Are

Lealtap is the developer and operator of the Lealtap platform and mobile application.

Lealtap does not impersonate any individual or organization and does not claim official affiliation with third-party services where none exists.

3. Scope of This Privacy Policy

This Privacy Policy applies to:

  • The Lealtap mobile application distributed via Google Play and other official app stores;
  • Lealtap websites, including https://www.lealtap.com;
  • Related services provided by Lealtap to merchants and helpers.

Third-party services (such as Apple Wallet or Google Wallet) are governed by their own privacy policies.

4. Personal Data We Collect

We collect only the personal data necessary to provide and operate the Services.

4.1 Data Provided by Merchants and Helpers

Depending on the role and usage, we may collect:

  • Name
  • Email address
  • Phone number
  • Preferred language
  • Account and role information
  • Information provided during onboarding or account configuration

4.2 Store and Business Data (Merchants)

Merchants may provide information related to their businesses, such as:

  • Store names
  • Store addresses
  • Store locations
  • Configuration data for loyalty programs

Store-related data is considered business data, not personal data.

4.3 Authentication and Security Data

To protect accounts and prevent fraud, we process:

  • One-Time Passwords (OTPs)
  • Authentication tokens
  • Internal identifiers linked to merchant or helper accounts

4.4 Technical and Usage Data

We may collect limited technical data necessary for operation and security, including:

  • Device type and operating system
  • App version
  • IP address (as part of normal network communications)
  • Logs and diagnostic data

4.5 Data We Do Not Collect

Lealtap does not collect or access:

  • Background location data
  • Contacts, call logs, or SMS stored on the device
  • Photos or videos from the device gallery
  • Audio recordings
  • Financial or payment information
  • Health or biometric data
  • Advertising identifiers for ad personalization
  • Inventory of installed apps on the device

5. Device Permissions

The Lealtap app requests only permissions that are strictly necessary for its core functionality:

  • Camera: used exclusively to scan QR codes. Images are not stored or recorded.
  • Notifications: used to deliver operational and service-related notifications.
  • Location (foreground only): used temporarily and only with user consent to help merchants locate and manage their stores. Location access is limited in scope and duration and is never used in the background.

Lealtap does not request unnecessary or unrelated permissions.

6. Communications

6.1 Transactional Communications

We may send merchants and helpers transactional communications via email, SMS, or push notifications, such as:

  • Account verification
  • Security alerts
  • Operational notifications

These communications are essential to the operation of the Services.

6.2 Product and Service Updates

Merchants and helpers may explicitly opt in during onboarding or account configuration to receive emails about:

  • Product updates
  • New features
  • Service-related announcements

Users can withdraw consent and unsubscribe from these communications at any time using the unsubscribe mechanism provided or through account settings.

7. How We Use Personal Data

We process personal data solely for legitimate and user-expected purposes, including:

  • Providing and operating the Services
  • Creating and managing merchant and helper accounts
  • Authenticating users and securing access
  • Enabling QR code scanning and store management
  • Sending transactional and opted-in communications
  • Preventing fraud and abuse
  • Ensuring platform reliability and security
  • Complying with legal obligations

We do not use personal data for advertising, profiling, or resale.

Where applicable, Lealtap processes personal data based on:

  • Contractual necessity
  • User consent
  • Legitimate interests
  • Legal obligations

9. Data Sharing

Lealtap does not sell personal or sensitive user data.

We may share data only with:

  • Service providers acting on our behalf, under strict contractual obligations
  • Wallet platforms, when merchants choose to distribute digital passes
  • Authorities, when legally required
  • Successors in the event of a merger or acquisition, with appropriate safeguards

10. Data Retention

We retain personal data only for as long as necessary to provide the Services, comply with legal obligations, and ensure security.

Account Deletion

Users may request the deletion of their account and associated personal data at any time by contacting us as described below.

  • Helpers: when a helper requests account deletion, all associated personal data is deleted without undue delay.
  • Merchants: when a merchant requests account deletion, the merchant’s personal data is deleted. Business-related data associated with stores may be retained where necessary for operational, legal, or contractual reasons.

Unless otherwise required by law, data deletion requests are processed within a reasonable timeframe.

11. Account Deletion Requests

Users can request the deletion of their account and associated personal data by contacting us directly at:

When submitting a deletion request, users should contact us from the email address associated with their account to allow us to verify ownership.

Requests are handled promptly and in accordance with applicable data protection laws. Any data retained after account deletion is limited to what is strictly necessary for legal, accounting, or security purposes.

12. International Data Transfers

Lealtap operates in multiple regions, including the European Union and the United States. Where personal data is transferred internationally, appropriate safeguards are applied in accordance with applicable data protection laws.

13. Transparency and Fair Use

Lealtap operates transparently and exactly as described in its app store listing and documentation. The app contains no hidden, dormant, or undocumented features and behaves consistently for all users, including during app review.

Lealtap does not misrepresent its identity, ownership, country of operation, or the purpose of the Services.

14. Children’s Privacy

Lealtap is not directed to children under the age of 13, and we do not knowingly collect personal data from children.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be published on this page with a revised “Last updated” date.

16. Contact Us

For any questions regarding this Privacy Policy or our data practices: