Loyalee
Privacy policy
Last updated: 23 October 2026
This policy explains how Loyalee processes personal data when you use the customer app Loyalee, the app Loyalee for Business for businesses, and this website.
Data controller
Madsen Apptakk, org. no. 838324312, Klubbåsveien 25, 9411 Harstad, Norway, is the data controller. Questions about privacy can be sent to apptakk@gmail.com.
What data we process
| Data | Purpose | Legal basis |
|---|---|---|
| Mobile number | Log in with a one-time code by SMS. | Contract (GDPR art. 6(1)(b)) |
| Name and email, if you give them | Show who you are to stores you work in, and contact about the account. | Contract |
| Stamp cards, stamps and rewards, with time and store | Provide your stamp cards and rewards. | Contract |
| For businesses: organization number, store details, roles and invitations | Manage stores, staff and subscription. | Contract |
| Usage data from the apps (Firebase Analytics), such as screen views, device type and approximate country | Understand use and improve the apps. | [Legitimate interest / consent (to be clarified)] |
| Crash reports from the apps (Firebase Crashlytics), such as error message, app version and device type | Find and fix errors in the apps. | Legitimate interest |
| Your location, if you tap "Show where I am" on the map | Show where you are on the store map. The location is only used on your phone and is not stored by us. | Consent (the access you give the app on your phone) |
What stores see
Staff in a store see the stamp cards and rewards for their store when they scan your card. Stores do not see your stamp cards from other stores.
Who we share data with
We use Google Firebase (Google Ireland Ltd.) as data processor for login, storage, server functions, analytics and crash reports. The data is stored in [region]. Google may process data outside the EEA. The transfer is covered by the EU standard contractual clauses and the EU-US Data Privacy Framework. The map in the apps uses Google Maps (Google Ireland Ltd.). When you open the map, your phone loads map data from Google. We do not sell personal data and do not use it for advertising.
How long we keep the data
We keep the data for as long as you have an account. Crash reports are deleted automatically after 90 days.
Delete your account
You can delete your account in the Loyalee app or in Loyalee for Business, under Profile and Delete account. If you no longer have the app, you can send an email to apptakk@gmail.com with the phone number the account is registered with. We will then delete the account for you.
The account is closed right away, and after 30 days we delete your name, phone number, stamp cards and your access to stores. If you change your mind before then, you can contact us. Stamps you have given customers as staff stay with the store, but without name or phone number. If you own a store, you must delete the store before you can delete the account.
Your rights
You can ask for access to, correction or deletion of your data, and object to or ask for restriction of the processing. You can also ask to receive your data (data portability). Contact us at apptakk@gmail.com.
If you believe we process data in breach of the rules, you can complain to the Norwegian Data Protection Authority, Datatilsynet.
This website
The website does not use cookies or tracking. Our hosting provider (Firebase Hosting) processes technical data such as IP address to deliver the pages.
Changes
We update this policy when we change how we process data. The date at the top shows the latest change.