Privacy policy

Glad You're Back (“we”, “us”) provides digital loyalty cards that cafés and other local businesses give their customers through Apple Wallet and Google Wallet. This policy explains what we collect, why, and the choices you have. We collect as little as we can: you don't need an account, an email address or a phone number to use a card.

If you have a loyalty card

What we collect

• Your card: a random card number and code, which business it's for, and whether it's in Apple Wallet or Google Wallet.
• Your visits: each stamp, reward and birthday treat, with the date and time, and any correction staff make.
• Your birthday, if you add it: the day and month only, never the year. You can also give your name with it.
• Wallet details: the identifiers Apple and Google need to update your card, such as Apple's device and push identifiers.
• A cookie on the device you signed up with, so scanning the poster again gives you back the same card instead of a new one.

We don't collect your location. If a business has added its address, your wallet app may remind you about the card when you're nearby, but that happens on your phone and isn't shared with us or the business.

How we use it

• To keep your card up to date: stamps, rewards, birthday treats and messages from the business.
• To show the business its customers' card activity, so staff can help you at the counter and see how their card is going.
• To stop misuse, such as too many stamps in a short time.

We don't sell your information, and we don't use it for advertising.

Who can see it

The business that gave you the card can see your card, its history, and your name and birthday if you gave them. Each business sees only its own customers' cards. Businesses can also send messages that appear on your card.

If you run a business on Glad You're Back

We collect the name and email address of each staff member who signs in (including from Google if you sign in with Google), your business details, card design, and any addresses you add. We use them to run your account and contact you about it. Signing in uses a cookie to keep you signed in.

Services we use

We rely on these companies to run the service. They handle information for us, under their own privacy terms:

• Supabase stores our database, in the United States.
• Vercel hosts the website.
• Apple and Google deliver cards and updates to their wallet apps. Google also provides sign-in for businesses.

Because of this, your information may be stored and processed outside Australia, mainly in the United States.

How long we keep it

We keep a card and its history while the business uses Glad You're Back, so your stamps and rewards stay correct. If a business leaves, or you ask us to delete your card, we delete the card and its history. Removing the card from your wallet stops updates to your phone, but doesn't delete the history the business holds; ask us if you want that deleted too.

Your choices

• See or correct your information: ask the staff at the counter, or email us.
• Delete your card and its history: email us and tell us which business it's for. Show the card code from the back of your card if you can.
• Stop notifications: turn them off for the card in your wallet app, or remove the card.

Security

Information is sent over encrypted connections, and each business can only reach its own customers' cards. Links on your card, like the one to add your birthday, are signed so they only work for your card.

Children

The service isn't aimed at children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update it here and change the date at the top.

Contact

Questions, requests or complaints: email support@gladyoureback.com. If you're not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Need help with your card instead? See Support.