Back

Privacy

Who runs this card

The business whose card you joined runs the stamp card and gives the rewards. Tap Tile Loyal runs the service for it. Tap Tile Loyal is run by Jake Zammit, trading as Luzzu Labs, 182 Mdina Road, Ħaż-Żebbuġ ZBG 9015, Malta. VAT MT27302808.

Who is responsible

For your card at a business (your stamps and rewards, whether you stopped messages, and the messages that reached your card), that business is the data controller and we are its processor. For your account (your email and the cookie that recognises your phone at every business on Tap Tile Loyal), we are the controller.

What we store

Your email, whether you stopped messages, which version of the offers line you were shown and when, your stamps and rewards with the time and the business each one was given, and the Google Wallet card id if you add the card to Google Wallet.

When you join from a QR code, we keep a scrambled form of your network address for one day, to stop the first stamp being misused.

If you add the card to Apple Wallet, we also store the id Apple Wallet gives your phone and its notification token, so the card can update itself. Both are deleted when you remove the card.

Messages and offers

Joining a card includes offers from that business on the card. If you add the card to Apple Wallet or Google Wallet, the business can post short messages to it, at most 3 in any 7 days and never at night, and one reminder when you are a stamp or two from your reward. To choose who gets a message, the business can sort its members by their stamps, for example its most regular customers or people who have not visited for a while.

You can stop all messages from a business at any time: open your card and press Stop messages. You can also ask the business to stop them. Removing the card from your Wallet stops Wallet messages too.

We note which messages reached your card and keep that note for 12 months, so the business can see how many people came back after a message. It sees totals only, never who. Someone counts as back when their card gets a stamp within 7 days after a message. That uses the stamp dates we already hold and nothing else.

Near the business

If you add the card to Apple Wallet or Google Wallet, the business can mark where its locations are. When you are close to one, your phone may show the card on your lock screen with a short line, such as how many stamps you have left. Your phone works this out by itself, or Google Wallet does on Android under your own Google settings. We never receive your location and we do not track where you go. To stop it, turn off Suggest on Lock Screen in the card's details in Apple Wallet, or turn off location or notifications for Google Wallet on your phone.

QR code on your card

Your card shows a QR code so staff can add a stamp or redeem your reward if the tap does not work. It only works on a phone the business has set up for its staff. Anyone else who scans it sees nothing about you or your card.

Cookies

One cookie recognises your card on this phone. One keeps a stamp for a few minutes while you join. One shows the Redeem button for 10 minutes after staff tap your full card. Phones a business sets up for its staff keep one more, so they can add stamps and redeem rewards at the till. No tracking or advertising cookies. The card cookie lasts 10 years, or until you clear it.

Who handles the data

These companies run parts of the service for us: Vercel (hosting, in Frankfurt), Neon (the database, in Frankfurt), Resend (the emails with your card link and your 6 digit codes), GitHub (a nightly copy of the database, encrypted before it is stored), and Apple and Google when you add the card to their Wallet. Google also runs the Gmail inbox that receives the requests you send us about your data. All are based in the USA. Where data leaves the EU, it is protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. Everything travels encrypted.

How long we keep it

Your card and its stamps: until 24 months after your last stamp at that business, or until the business's data is deleted 12 months after its subscription ends, whichever comes first.

Your email: while you have a card with any business.

The note of which messages reached your card: 12 months.

The scrambled network address from a QR join: one day.

The 6 digit code we email you to delete or download your data: 15 minutes. We keep only a scrambled copy of it.

Our nightly backups: each copy is deleted after 30 days.

Your rights

You can download your data or delete it yourself. Open your card and press My data. If your card has an email, we email you a 6 digit code to confirm, which works for 15 minutes. You choose to delete only that card, or everything: your email and your cards and stamps at every business on Tap Tile Loyal.

A card already in Apple Wallet stays on your phone until you remove it, but stops updating. A Google Wallet card moves to your expired passes. Our nightly backups are deleted after 30 days, so the last copy goes then. The business sees how many members deleted their card in the last 30 days, never who.

Or email luzzulabs@gmail.com and we do it for you within one month. You can also complain to Malta's Information and Data Protection Commissioner (idpc.org.mt).

Last updated 3 October 2026.