Loyale Privacy Policy
Last updated: 5 November 2026
Who is responsible for your information
Loyale is operated by Loyale Programming and Graphic Design W.L.L, a limited liability company registered in the Kingdom of Bahrain under Commercial Registration number 135962-1. In this policy, "Loyale", "we" and "us" mean that company. "You" means whoever is using the Loyale app, except in section 11.
Loyale is a loyalty app. You collect stamps and cash credit at shops, cafés and restaurants that take part, and redeem them for rewards. Those businesses are called merchants in this policy.
We are the data controller for the information described here, and we handle it in accordance with the Personal Data Protection Law (Law No. 30 of 2018) of the Kingdom of Bahrain. Each merchant is a separate controller for the information it receives about you (section 4).
Contact us about anything in this policy at info@loyaleapp.co. A person reads it, and none of it costs you anything.
1. What is not switched on
We would rather tell you plainly than write this policy in a tense it has not earned.
- Loyale never receives your full card number or security code. When you pay in the app, your card details go directly to our payment processor, Tap Payments. From Tap we keep only the card type, its last four digits, how you paid and the payment reference, for your receipt and for refunds.
- Gift cards are not switched on. We will update this policy before they are.
- We do not sell your personal information. Not to merchants, not to advertisers, not to anyone. There is no arrangement of that kind and there never has been.
2. What we collect
What you give us when you sign up. Your mobile number, your email address and your name, and your date of birth, nationality and gender as the sign-up screens ask for them. Your mobile number is how we identify you — it is the account.
What happens as you use the app. Every collect and redeem: which merchant, which branch, when, the amount of the receipt where the merchant's system sends it, and the stamps or credit it earned. Your redemptions, vouchers, gift transfers, promo codes and streaks. This is the record that makes your balance mean something, so we keep it for as long as you have an account.
Loyale Streak, once the app shows it to you. Which of your orders counted, the dates of your run, and the rewards you earn and use. We keep this with the rest of your record, to run Loyale Streak and to settle with merchants for the rewards you use.
Your orders, if you order in the app. What you order, any notes you add, the branch and how you collect it — your table, or, for drive-through, the car details you save (plate number, make and colour). The merchant preparing your order sees these details, with your name and the last four digits of your mobile number. If you rate an order, the merchant sees your rating and comment with your first name and initial; we may hide a rating that is abusive, false or unlawful. Notes can mention allergies; add only what the merchant needs to know. If you pay in the app, we also keep the payment and any refund, with the card details described in section 1.
Your device and the app. A device identifier, the device type and operating system, the app version, and a push notification token if you allow notifications. Crash and error reports where the app fails. The first time you open the app, it also checks whether a Loyale link brought you to install it: on an iPhone it sends us the device identifier, model, operating system version, screen size and time zone to match the link, and on Android, Google Play tells the app.
How you use the app. Which screens you open and where you tap on them, and a recording of the screen while you use the app, with every word and picture on it hidden. We link this to your member code, never to your name, mobile number or email, and use it only to fix faults and make the app easier to use. Recordings are deleted after 30 days.
What you search for. When you finish a search, we keep the words you typed, the hour you searched, the app's country and language, how many merchants it found, which one you tapped, if any, the app version and whether your phone is an iPhone or Android. If you tell us which merchant you would like on Loyale, we keep the name you type, with your search, the same way. None of it is linked to you — not to your account, member code, mobile number, email, device or internet address — so we cannot pick out your own searches. We do not keep a search that looks like a phone number or an email address. We use this only to improve search and to learn which merchants customers want, and keep it for up to 12 months. Your recent searches stay on your phone.
Where you are, only if you allow it. The app asks for your location, only while you are using it, to show you merchants near you, put the nearest branch first and, for a drive-through order, tell the merchant when you are getting close. If you say no, the app works — you sort and search instead. Your position stays on your phone: the map and the nearest branch are worked out there. The one exception is drive-through. While a drive-through order's tracker is open, the app sends us your distance to the branch in metres, not your coordinates. The Tell the shop automatically when I'm close switch is on unless you turn it off when you order. Only the latest distance is kept, as part of that order's record (section 6). We do not track your location in the background and we do not build a history of where you have been.
Your approximate location, from your internet address. When the app connects, our analytics provider (section 4) works out the country and city your internet address belongs to, and does not keep the address itself. This happens whether or not you allow location, and it is linked to your member code like the rest of How you use the app.
What we never collect from customers. We do not collect your card number, your CPR, your passport, your bank details, your contacts, your photos, your messages, or anything from other apps on your phone.
3. Why we are allowed to hold it
Under Bahrain's Personal Data Protection Law we must have a lawful basis for each thing we do with your information. Ours are:
| What we do | Why we are allowed to |
|---|---|
| Run your account, your balance and your redemptions | Performing the contract you have with us |
| Send you the verification code to sign in | Performing the contract |
| Tell a merchant you redeemed at their branch | Performing the contract — the redemption cannot work otherwise |
| Keep records of transactions | Our legal obligations, including tax and accounting |
| Fix bugs, improve the app, prevent abuse, keep the service secure | Our legitimate interests in running a working, honest service |
| Send you marketing messages | Your consent, which you can withdraw at any time |
| Use your phone's location (merchants near you, the nearest branch, the drive-through distance) | Your consent, given through your phone's permission prompt |
| Work out your approximate location from your internet address | Our legitimate interests in knowing where the app is used and keeping it working |
Where we rely on your consent you can take it back whenever you like, and doing so never costs you your rewards.
4. Who sees your information
Merchants see what they need to serve you and honour your rewards. When you collect or redeem at a merchant, that merchant sees the transaction at its branch and enough to identify you at the till: your name, your member code and your balance with it. Once you have used a merchant, it can also see your date of birth, nationality, gender, email address, mobile number and how much you have spent with it, and its staff can export them. A merchant may use this only to identify you, honour what you hold, serve you through Loyale, handle complaints, meet its legal duties and prevent fraud — never to contact you outside Loyale, to sell or share it, or to combine it with other information to build a profile of you. Each merchant is responsible, as a separate controller under the Personal Data Protection Law, for what it does with the information it receives. A merchant cannot see where else you shop, what you collect anywhere else, or your balance with anyone but them.
Our suppliers, for the jobs they do. We use a small number of service providers, each of which sees only what its job requires:
- Mobishastra — sends your sign-in codes and notices by SMS. It receives your mobile number.
- Resend — sends our emails, including sign-in codes sent by email. It receives your email address.
- Google Firebase — delivers notifications to the app on your phone and collects crash reports (Crashlytics). It receives a notification token for your device, and crash reports with your device details; and the same for the Loyale Merchant app (section 11).
- Google Maps — draws the map of merchants. Your phone loads the map from Google, as with any map; the app does not give Google your position.
- PostHog — app analytics, in the European Union. It receives what section 2 describes under How you use the app, the device details and crash and error reports described under Your device and the app, and the approximate location described under Your approximate location, from your internet address, linked to your member code; and, for the Loyale Merchant app, what section 11 describes.
- Foodics — a till system used by some merchants. Where a merchant uses it and you place an order, your order reaches their till.
- Tap Payments — our payment processor for payments in the app. It receives your name, your mobile number, the amount and the merchant's name, to take the payment, and it may send you its own receipt. Your card details go directly to Tap; we receive from it only what section 1 describes.
- Hosting and analytics providers, which hold the systems the app runs on.
Each of them is bound to use the information only to provide that service to us.
Nobody else. We do not share your information with anyone else unless the law requires it of us, or a court or a competent authority in Bahrain orders it.
5. Where your information is kept
Your information is held on servers operated for us. Some of our service providers process information outside Bahrain. Where that happens, we take reasonable steps to ensure the information is protected to a standard consistent with the Personal Data Protection Law, and we only use providers that commit to protecting it.
6. How long we keep it
While you have an account, we keep your account and your transaction history — because your balance is made of that history, and a balance with no record behind it cannot be audited or trusted.
Deactivating your account in the app switches it off and signs you out; it does not delete your information. To delete your account, tap Delete my account on the same page in the app, or ask us (see Deleting your account below). The deletion takes effect 30 days after you confirm it in the app, or after we have checked that an emailed request is yours; signing in again before then cancels it. When we delete an account, we delete your profile and stop using your information to identify you, and we keep the financial and transaction record only for as long as Bahraini tax and accounting law requires, because we are obliged to.
Marketing consent and location permission stop the moment you withdraw them.
7. Your rights
Under the Personal Data Protection Law you have the right to:
- be told what we hold about you, and why;
- get a copy of it;
- correct anything that is wrong;
- object to our using it for a particular purpose, including marketing;
- withdraw consent you have given;
- ask us to delete your account and your personal information, subject to the records we are legally obliged to keep;
- complain to the Personal Data Protection Authority in Bahrain if you think we have got it wrong.
How to use them. Write to info@loyaleapp.co from the number or email on your account, or ask in the app. We will answer within thirty days. There is no charge.
Deleting your account. You can delete it at any time, in the app or by asking us; the steps are on our Delete your account page. Be aware that deleting your account ends your stamps and credit once the 30 days have passed — they are tied to the account and cannot be transferred or reinstated afterwards. The app says so clearly before it deletes anything, and so will we, so nobody loses a balance by accident.
8. Children
Loyale is not for children under 13, and we do not knowingly create accounts for them. If you believe a child has an account with us, tell us at info@loyaleapp.co and we will remove it.
9. Keeping it safe
We protect your information with access controls, encrypted connections, and restricted internal access on a need-to-know basis. No system is perfectly secure and we will not claim otherwise. If a breach occurs that puts your information at risk, we will tell you and the Personal Data Protection Authority as the law requires.
10. Changes to this policy
We will change this policy as Loyale changes — in particular before gift cards are switched on. The date at the top always reflects the current version. Where a change materially affects how we use your information, we will tell you in the app or by message; we will not make a significant change quietly.
11. The Loyale Merchant app (for shops and their staff)
This section is for the people who use the Loyale Merchant app at a merchant: owners, managers and staff. Here, "you" means them. The rest of this policy is about customers.
What we hold. The shop's sign-in email and password. Each staff member's name, role (staff, manager or owner), branches and optional staff code, which the shop's owner adds and changes in the app. Each transaction entered at the counter: the bill amount, the amount used, the receipt number where one is entered, which branch it was entered at and which staff member entered it.
Your device and the app. A device identifier, a notification token, the app version and operating system, and crash and error reports (Google Firebase Crashlytics).
How the app is used. Through PostHog, in the European Union: the screens opened, where they are tapped and, when we switch it on, a recording of the screen with every word and picture on it hidden. This is linked to the shop's, branch's and staff member's numbers in Loyale, never to a name or email. Recordings are deleted after 30 days. PostHog also works out the country and city from the internet address, and does not keep the address.
What the app does not do. The camera is used only to scan a customer's code; no picture is taken or kept. The app does not use the phone's location. Android may list a location permission that comes from a component the app includes; the app never asks for it or uses it. Face ID or fingerprint, which unlocks owner mode, stays on the phone and never reaches us. If the app lets you upload a picture, for example for an offer, we store it and show it to customers.
Bluetooth. If a shop switches it on, its phone broadcasts a Bluetooth signal that carries only a fixed Loyale identifier and the shop's and branch's numbers. It is off unless the shop switches it on, it carries nothing about any person, and the app does not scan for other devices.
Customers' information. Staff may use customers' details only as section 4 allows.
Why, and for how long. We hold this to run the shop's account under its agreement with Loyale, to keep the records the law requires, and in our legitimate interests in fixing faults and keeping the service secure. We keep it until the shop's account is closed. After that, we keep the shop's agreement, invoices and transaction records only for as long as Bahraini tax and accounting law requires, and we delete staff members' details as the Delete your account page describes.
Deleting. To close a shop's account or delete a staff member's details, see Delete your account or write to info@loyaleapp.co.
Contact
Loyale Programming and Graphic Design W.L.L Commercial Registration 135962-1, Kingdom of Bahrain info@loyaleapp.co · WhatsApp +973 3933 1996
You may also complain to the Personal Data Protection Authority of the Kingdom of Bahrain at any time. You do not have to come to us first, though we would like the chance to put it right.