Privacy
Wivly powers loyalty cards that live in Apple Wallet and Google Wallet for cafés and small venues. This notice explains what personal data is involved and your rights under the GDPR.
Who is responsible for your data
The café whose card you added is the data controller — it decides to run the loyalty program and owns the relationship with you. Wivly is the data processor: we store and process the data on the café's instructions. To exercise your rights, contact the café directly, or reach Wivly at privacy@wivly.me and we'll route it.
What we collect
- Your name, optional. You can join with no name at all. Email is only stored if a café asks for it, and it is used for two things: sending your card back if you lose it, and a record of what a café loaded onto a prepaid card. We never email you offers or marketing.
- Your visits — each stamp, point or reward, with the time and venue, so your card stays accurate.
- Wallet identifiers — the device token your phone uses to receive card updates, and a card serial number.
- A functional cookie (wivly_member), if you join on a phone, so a later tap on the café's counter tag recognises your card. It holds only a card reference, no tracking.
We do not sell data, run advertising, or track you across other websites. Our own marketing pages count page views with a cookieless tool; your card page, the join flow and the counter are not measured at all.
Why, and on what basis
- Running the loyalty card (stamps, rewards, keeping the pass current) — performance of the service you asked for.
- Offers on your lock screen — the café's legitimate interest in reaching its members. Removing the card stops them at any time.
- Aggregate insights for the café (repeat visits, quiet regulars). This involves profiling by visit behaviour, but no automated decision with legal effect on you.
How long we keep it
For as long as you keep the card, plus a short grace period. Remove the card from your wallet and the café can delete your record. Beyond that, everything expires on a schedule we hold ourselves to: the detailed record of individual visits is deleted after 24 months, the aggregate figures behind the café's dashboard after 14 months, message delivery records after 6 months, and the push token for a card you removed within 30 days. Deletion is real, not a hidden flag.
Your rights
You can ask to access, correct, export, or delete your data, and to object to offers. The café can action all of these from its dashboard (including a machine-readable export and full deletion). Contact the café, or Wivly at privacy@wivly.me. You may also complain to your local data-protection authority.
California residents (CCPA / CPRA)
If you live in California, you have the right to know what personal information is collected and why, to access and delete it, to correct it, and to not be discriminated against for exercising these rights. The categories we collect are described in What we collect above (identifiers and commercial/loyalty activity).
We do not sell or share your personal information as those terms are used under the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. We do not collect sensitive personal information. To exercise any right, contact the business whose card you added, or Wivly at privacy@wivly.me; you may use an authorized agent.
Cookies and what is stored on your device
Every piece of state Wivly stores on a device, in full. All of it is strictly necessary to run the service you asked for: none of it profiles you, follows you to other websites, or feeds advertising. That is why Wivly shows no cookie banner. If we ever add something that is not strictly necessary, we will ask you first.
| Name | Whose device | Kept for | What it does |
|---|---|---|---|
| wivly_member | Card holder | 365 days | Signed reference to your loyalty card, so tapping the counter tag later recognises which card is yours. Holds no name, no email, and no cross-site identifier. |
| wivly_next | Business owner | 10 minutes | Remembers the page you were heading to, so the sign-in link returns you there instead of the dashboard home. |
| wivly_lang | Business owner | 30 minutes | The language you were browsing in when you signed up, so your dashboard and your own customers' cards open in that language rather than English. |
| wivly_staff_pin | Business owner | 15 minutes | Carries the staff PIN you just chose during setup to the welcome screen that shows it to you once. Expires on its own. |
| wivly_impersonate | Wivly support | 30 minutes | Set only when a Wivly support engineer is viewing a merchant account to investigate a reported problem. Read-only by default and recorded in an audit log. |
| sb- | Business owner | Session (renewed on use) | Supabase authentication cookies (names begin sb-) that keep you signed in to the merchant dashboard. |
| wivly.scanner.tokenlocalStorage | Counter device | Until sign-out | Keeps the counter device signed in to the staff scanner between shifts, so nobody re-enters the venue code mid-rush. |
| wivly.scanner.venuelocalStorage | Counter device | Until sign-out | Which venue this counter device is stamping for. |
| wivly.scanner.queuelocalStorage | Counter device | Until synced | Stamps taken while the connection was down, held on the device until they sync. Cleared as soon as they reach the server. |
Who processes data on our behalf
Data is stored in the EU. We rely on these sub-processors:
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Database & merchant authentication | EU (Ireland, eu-west-1) |
| Vercel | Application hosting & serverless functions | EU (Dublin, dub1); US company |
| Apple | Apple Wallet passes & push notifications | US (EU-US DPF) |
| Google Wallet passes | US (EU-US DPF) | |
| Resend | Transactional email: merchant sign-in and account notices, plus card recovery and prepaid card records for customers who gave an address. Never marketing to customers. | US (SCCs) |
| Stripe | Merchant subscription billing | US (EU-US DPF) |
| Vercel Web Analytics | Aggregate page-view counts for our own marketing site (cookieless, no cross-site profiling) | EU (Dublin, dub1); US company |
Contact
Questions about this notice: privacy@wivly.me.
This is a plain-language summary. Merchants using Wivly: see the Data Processing Agreement in the product docs.