Privacy Policy

Effective October 16, 2026. Questions: support@getclubcards.com

1. Who we are

Clubcards ("Clubcards", "we", "us") is a loyalty card service operated by Juan Pablo Vengoechea Jacome, doing business as Clubcards, based in Florida, United States. Local businesses use Clubcards to give their customers stamp cards in Apple Wallet and Google Wallet. This policy explains what information we handle for three groups of people: cardholders (customers who join a business's card), business users (owners and staff who use the Clubcards portal or app), and website visitors.

2. Our role and the business's role

When you join a business's card, that business decides to run a loyalty program and receives your card information. Clubcards provides the technology and handles your information on the business's behalf, under this policy and our agreement with the business. Each business is responsible for how it uses the information it can see, such as contacting you outside Clubcards. For business accounts and our own website, Clubcards is responsible for the information.

3. Information we collect

Cardholders

• What you enter when you join: your name, mobile phone number, an optional pet or reference name, and whether you want to receive offers from that business (with the date you chose).
• Card activity: your card number, the stamps and rewards on your card, when each was recorded, and which staff account recorded it.
• Wallet information: if you add the card to Apple Wallet, your device sends us an anonymous device identifier and a push token so your card can update. If you add it to Google Wallet, a copy of your card is stored with Google so it can appear in your Google Wallet.
• Review link: if you tap the "Leave a Google review" link on your card, we record that it was tapped and when.

Business users

• Your email address, a password (stored only as a secure one-way hash, never in readable form), your role (owner or staff), and the business you belong to.
• Business details you provide: name, logo, colors, reward, address, hours, phone, booking and review links, the store location used for lock-screen suggestions, and the promotions you publish.

Website visitors

• We do not use analytics, advertising or tracking tools. Our application does not keep logs of the pages you visit.
• Like any website, our hosting provider processes technical information such as your IP address to deliver pages and protect the service. We briefly keep IP addresses in memory to limit repeated sign-in and signup attempts.
• If you email us, we receive your email address and message.

What we do not collect

• Your location. The lock-screen suggestion is decided by your iPhone, using the store location saved on the card; your location is not sent to us.
• Payment card details. When business billing starts, payments will be handled by our payment processor, not stored by us.
• Government ID numbers or sensitive personal information.

4. How we use information

• To create your card, add stamps, track rewards and keep the card in your Wallet up to date.
• To show promotions from the business on your card, only if you chose to receive them.
• To let business users see their customers, visits and rewards, and to show which staff member recorded each stamp.
• To keep the service secure and fair, for example by asking for confirmation before a second stamp within 30 minutes and by limiting repeated attempts.
• To answer questions, provide support and comply with the law.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use cardholder information to market Clubcards or other businesses to you.

5. Promotions and messages

If you chose to receive offers, the business's promotions appear on your card and your phone may show a Wallet notification, depending on your phone's settings. You can turn offers off anytime on your card page ("Receive news and promotions") or by removing the card from your Wallet. Clubcards does not send text messages or make phone calls. Your phone number is used to identify your card, and the business you joined can see it.

6. Who we share information with

• The business whose card you joined, which can see your card information and activity.
• Service providers that help us run Clubcards, only as needed to provide their service: our cloud hosting provider (Railway), Apple (Apple Wallet and its update service), Google (Google Wallet, and Google Fonts, which loads the fonts on our pages), the content network that delivers the QR-scanning library used in the business portal (unpkg), our email forwarding provider (Porkbun) and, once billing starts, our payment processor.
• Legal reasons: if required by law, or to protect the rights, safety or property of our users, the public or Clubcards.
• Business transfer: if Clubcards is sold or transferred, information may move with it under this policy.

7. How long we keep information

We keep your card information while the card is active in the business's program. It is deleted from our system when the business removes you, when the business closes its Clubcards account (after the export period described in our Business Terms), or when you ask us to delete it. Deleting your information from Clubcards stops your card from updating; to remove the card from your phone, delete it from your Wallet app. Business user accounts are kept while the business uses Clubcards. Sign-in sessions expire after 8 hours.

8. Security

We use encrypted connections (HTTPS), store passwords only as secure hashes, protect each card with a private code, and limit who can see business data to that business's own accounts. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you and the affected business as required by law.

9. Your choices and rights

You can ask us to tell you what information we have about you, correct it, delete it, or give you a copy. You can also turn off promotions at any time. Send your request to support@getclubcards.com and include the business name and the phone number on your card so we can find and verify it. We may also forward the request to the business you joined. We respond within 45 days. Depending on where you live, you may have additional rights under state privacy laws, and we will honor them. We will not treat you differently for using your rights. Because we do not sell or share information for advertising, there is nothing to opt out of; we treat Global Privacy Control signals as a request not to sell or share.

10. Age requirement

Clubcards cards are for people 18 or older. We do not knowingly collect information from anyone under 18. If you believe a minor has joined a card, contact us and we will delete it.

11. Where information is processed

Clubcards is operated from the United States and is intended for people in the United States. Our service providers may process information in the United States and other countries where they operate.

12. Changes to this policy

If we make material changes, we will update the effective date and post the new version here. Where required, we will notify business users by email before the change takes effect.

13. Contact

Juan Pablo Vengoechea Jacome, doing business as Clubcards
support@getclubcards.com