Privacy Policy

1. The short version

The whole policy is below, but this is the substance of it:

• We collect what an account needs — your email address, your name, your loyalty activity — and very little else.
• We do not sell your data, and there is no advertising or third-party tracking in the app or on the website.
• A venue that scans your code sees your member ID, your display name and the balance you hold with that venue. It does not see your email address, your password, or where you are.
• Location is optional, used only while you have the app open, and never stored on our servers.
• You can delete your account from inside the app at any time, without asking us first.

2. What we collect

Some of it you type in, the rest comes from using the app:

• Account details — your email address (which identifies the account), your display name, your profile photo if you add one, and which sign-in method you used: email, Google, Apple or Facebook.
• Loyalty activity — the stamps you collect, rewards unlocked and redeemed, coupons issued to you, your points and level, and a timestamped record of each transaction and the venue it happened at.
• Preferences and device details — app language, time zone, country, whether you prefer kilometres or miles, light or dark theme, and a notification token for each device you have the app installed on.
• What you write — ratings and reviews you leave for a venue, and any message you send to support or through the website contact form.
• Your location, and only with your permission — see section 4.

We do not ask for your payment card details, your date of birth or your home address, and we would rather not have them. RayPass never processes a payment: you pay a venue exactly the way you did before.

3. Why we use it

Every piece of it has a job:

• Running your account and your loyalty cards — this is us performing the agreement you accepted when you signed up.
• Sending the notifications you asked for: a stamp landed, a reward is ready, a coupon is about to expire.
• Keeping the system honest. Spotting duplicate accounts, impossible scan patterns and other fraud is in our legitimate interest, and in yours — a stamp is only worth anything if it had to be earned.
• Answering you when you get in touch, and telling you about changes to your account or to these documents.
• Passing on marketing from venues whose cards are already in your wallet, if you have notifications switched on — see section 5.

We do not build advertising profiles, we do not make automated decisions that have a legal effect on you, and we do not sell, rent or trade your personal data. Not to venues, not to anyone.

4. Location

The Discover map and the distance shown next to each venue need to know roughly where you are. If you grant location permission, your device's coordinates are used to sort venues by distance and to centre the map on you. They are sent with the request so the server can work out distances, and they are not written to your profile or kept as a location history. Refuse the permission and everything else still works — you lose distances, and the map opens on the city instead of on you. You can withdraw the permission at any time in your device settings, and RayPass does not track you in the background.

5. Notifications

Two quite different things arrive as notifications, and they are governed differently:

• About your own activity — a stamp was added, a reward unlocked, a coupon you hold is about to expire, and the occasional nudge if you have not visited a venue in a long while. These follow from using the service.
• Marketing from venues — a campaign or a personal coupon from a venue whose card is already in your wallet. A venue may send at most one campaign a day and thirty a month, plus up to one hundred personal coupons a month. Across every venue in your wallet you will not receive more than three marketing notifications on any single day.

A venue never receives your device token or your contact details — we do the sending on its behalf. Turning notifications off in your device settings stops all of it at once. Delivery to your device is handled by Expo's push service (section 9).

6. What a venue can see

When staff scan the QR code on your Member Pass, the venue's app receives:

• Your member ID and display name, so staff can confirm the right card is open.
• Your stamp balance and available rewards at that venue only — never what you hold anywhere else.
• The stamps and redemptions that happened at their own venue, with dates and times.

A venue does not receive your email address, your password, your location, your profile photo through a scan, or anything at all about the other venues in your wallet. Your QR code is rebuilt every few minutes and a scan is refused once the code is more than three minutes old, so a screenshot of it is worth nothing.

7. What other people can see

RayPass is not a social network and there is no profile page for anyone to visit. Two things are nonetheless visible beyond you and the venue:

• A review you write appears, once approved, next to the venue it is about, with your display name and profile photo. You can edit or delete it yourself from the venue's page at any time.
• Profile photos of a venue's members may appear as a small stack of thumbnails on that venue's card, with a count of how many people collect there. No names, and nothing about who collected what.

Both are avoidable: your display name does not have to be your full name, and the profile photo is optional. Change either under Profile › Personal Information.

8. Apple Wallet and Google Wallet

You can add your Member Pass to Apple Wallet or Google Wallet. The pass carries your member ID, your display name and your RayPass level and points — the same things a scan reveals. If you add it to Apple Wallet, Apple gives us a device identifier and a pass push token so the pass can refresh itself when your balance changes; that identifier belongs to the pass rather than to you, and it stops being used when you remove the pass. What Apple and Google do on their own side is covered by their privacy policies, not by this one.

9. Companies that handle data for us

We keep this list short deliberately. Each of these processes data on our instructions, under contract, and none of them may use it for its own purposes:

• Supabase — database, file storage and sign-in. Your account and loyalty records live here.
• Expo — delivery of push notifications to your device.
• Apple, Google and Facebook — only if you choose to sign in with one of them, in which case they confirm who you are and pass us your email address and name.
• Geoapify, using OpenStreetMap data — turning a venue's street address into map coordinates. This runs on venue addresses, never on yours.
• Apple Maps and Google Maps — the map tiles themselves, drawn by your own device.

Where any of them processes personal data outside the United Kingdom, the transfer relies on an adequacy decision or on standard contractual clauses.

10. How long we keep things

Your account and its history stay for as long as the account is open. After that:

• Deleting your account erases your name, email address, profile photo, referral code and notification tokens, and revokes your sign-in the moment it runs.
• The stamps, rewards and transaction records held by each venue survive in anonymised form. They are that venue's trading records as much as yours, and once your account is gone they are no longer attached to a name or an email address.
• Anything we are legally required to retain is kept for as long as the law requires, and no longer.

Deletion is permanent and cannot be reversed. Signing up again later creates a new, empty account — nothing from the old one is restored to it.

11. Deleting your account

Open Profile › Personal Information and tap Delete Account at the bottom. You are asked to confirm once, and it takes effect immediately — no waiting period, no email to us, no charge. If you have already uninstalled the app, write to support@raypassapp.com from the address you signed up with; we check the request really comes from you and complete it within 30 days.

12. Security

Traffic between the app and our servers is encrypted in transit, and your session token is kept in your device's secure keystore rather than in ordinary app storage. We never store your password — sign-in is handled by Supabase, which keeps only a hash of it. Access to production data is limited to the people who need it. No system is perfect, and if a breach ever affects your personal data we will tell you and the regulator without undue delay.

13. Your rights

Wherever you live, you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong or incomplete;
• delete your data — the right to be forgotten;
• restrict what we do with it, or object to it;
• hand your data to you, or to someone else, in a portable format.

Your display name and photo you can change yourself under Profile › Personal Information, and deletion is a button in the same place. For anything else, write to support@raypassapp.com — we answer within 30 days and it costs nothing. If you are not satisfied you can complain to a regulator: the Information Commissioner's Office (ico.org.uk) in the UK, the Kişisel Verileri Koruma Kurumu (kvkk.gov.tr) in Turkey, or your national data protection authority elsewhere in Europe.

14. Children

RayPass is not built for children, and you must be at least 16 to hold an account. We do not knowingly collect data from anyone younger. If you believe a child has an account, tell us at support@raypassapp.com and we will delete it.

15. Changes to this policy

If we change something that matters — a new category of data, a new recipient, a new purpose — we will update the date at the top and tell you in the app before it takes effect. Small clarifications go in quietly. The current version is always in the app under Profile › Privacy Policy, and at raypassapp.com/privacy.