Privacy policy

Last updated: July 2026

At tarjeteapp we take your data privacy seriously. This page explains what information we collect, why, and the rights you have over it.

Who we are

tarjeteapp is a digital loyalty platform developed by Avocoding, used by local businesses to run stamp cards, points programs and promotions for their customers. It's available as a website and as iOS and Android apps.

Data we collect

What we collect depends on how you use tarjeteapp:

• Customers: name, email, phone, date of birth and address fields you choose to provide, plus your stamp/points activity with each business you join.
• Business owners: business name, contact email, phone and address, plus billing details processed by our payment provider (we never store full card numbers).
• Business staff and internal Avocoding staff: name, email and role, used to control access to the admin and internal tools.

How you sign in

Accounts sign in with an email and password managed by Amazon Cognito, our authentication provider — we never see or store your password ourselves.

Why we use it

To run your account and the loyalty programs you join, to process payments, to send you account and transactional emails, and to keep the service secure and working correctly. We do not sell your data.

Cookies

We use essential cookies to keep you signed in and remember your cookie choice. If you opt in to analytics cookies, we use them to understand how the site is used — you can change your choice at any time from the "Manage cookies" link in the footer.

Camera access (mobile app)

The tarjeteapp mobile app asks for camera access only to scan a business's QR code and collect a stamp or point. The camera feed is processed on your device to read the code — no photo or video is ever stored or sent to our servers.

Location access (mobile app)

tarjeteapp asks for your approximate location only when you choose to find businesses near you, and only after you grant permission. Your coordinates are sent to our API once to rank businesses by distance and are never stored against your account. Prefer not to share it? You can type a city or postcode instead — location is entirely optional.

Push notifications (mobile app)

If you turn them on, we send you a notification when a business gives you a gift (on your birthday, for example) or launches a promotion. They are optional and off by default: we only send them if you accept the system permission and switch them on in your profile. To do so we store a technical device identifier (a “token” issued by your phone), linked to your account and never to your name or location. That token is passed to Apple (APNs) or Google (Firebase Cloud Messaging) so the message can reach your device. You can turn them off at any time from your profile or your phone's settings; when you do — or when you sign out or delete your account — we delete the token.

Who we share data with

We share data only with the service providers that make tarjeteapp work: our cloud hosting provider (Amazon Web Services), our payment processor (Stripe) for billing, and our email delivery provider for transactional messages. Each of them only receives what's needed to perform their service. If you turn push notifications on, your device identifier is additionally shared with Apple (APNs) and Google (Firebase Cloud Messaging) solely to deliver those alerts.

How long we keep it

If you leave a business's loyalty program or delete your account, we anonymize your personal data (name, email, phone and other identifying fields) within 90 days at the latest, while keeping non-identifying transaction history a business may need for its own records.

Your rights

Under GDPR and equivalent laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request erasure of your personal data (customers can also do this directly from the app's account settings)
• Receive your data in a portable format
• Object to certain uses of your data

To exercise any of these rights, contact us using the details below.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page and, where required, ask you to accept the updated terms again.

Contact us

For any privacy enquiries, write to us at dpo@avocoding.com.