Regular helps you collect stamps at the places you love. This policy explains what we collect, why, who can see it and how you stay in control.
1. Who we are
Regular is operated by [LEGAL NAME], NIF [NIF], [ADDRESS], Spain ("Regular", "we"). You can reach us at privacy@tryregular.app.
2. Our two roles
For guest accounts, the Regular app and Wallet passes, we decide how your data is used (we are the controller).
For information a business adds about its own guests and staff, such as a note on someone’s usual order or staff names, we act on that business’s instructions (we are a processor) under our Data Processing Agreement.
3. What we collect from guests
When you use Regular we collect:
- Your first name, and your phone number or email
- Your Apple or Google sign-in identifier, if you use one
- Your birthday, only if you add it
- Your visits, stamps and rewards at each venue
- A push token for your device, and Wallet pass identifiers
- Your approximate location, only while you use Discover and only if you allow it
4. What we collect from businesses
Owner and staff names and emails, staff PINs (stored only as a secure hash), venue details and photos, your VAT or NIF number and billing details. Card payments are handled by Stripe; we never see or store full card numbers.
5. Why we use it
We use your data on these legal bases:
- To run your account, stamp cards and rewards (performance of a contract)
- To prevent fraud such as double stamping, keep the service secure and improve it with aggregated statistics (legitimate interest)
- To send you offers from venues by push or Wallet message (your consent, which you can withdraw at any time)
- To keep invoices and tax records (legal obligation)
6. What venues can see
A venue sees your first name and initial, and your visits, stamps and rewards at that venue only. It never sees your activity at other venues, your phone number or your email address.
8. International transfers
Some providers may process data outside the European Economic Area. When they do, we rely on an adequacy decision or the European Commission’s Standard Contractual Clauses.
9. How long we keep it
- Account data: until you delete your account
- Stamp history: while your card is active, then anonymised [12] months after your last visit at that venue
- Business invoices: for as long as Spanish tax law requires
- Backups: overwritten within 30 days
10. Your rights
You can access, correct, delete or export your data, restrict or object to its use, and withdraw consent. Most of this is in the app under Profile › Privacy; for anything else, email privacy@tryregular.app. You can also complain to the Spanish data protection authority (AEPD, aepd.es).
11. Children
Regular is not meant for children under 14, and we don’t knowingly collect their data.
12. Security
Data is encrypted in transit, access is limited to people who need it, and member codes change every minute so a screenshot can’t be reused.
13. Changes to this policy
If we make important changes, we’ll tell you in the app or by email before they apply.
Sorun mu var? Yaz: privacy@tryregular.app ya da [ADDRESS].