Privacy policy
DelTeQ Web Services (Pty) Ltd (registration number 2021/671559/07), of 1A Pagoda Street, Salisbury Park, Gqeberha, Eastern Cape, 6070, South Africa, operates the tenStampd app. We are the responsible party for the personal information described here, as that term is used in the Protection of Personal Information Act, 2013 (POPIA).
Our Information Officer can be reached at privacy@delteqis.com.
Who this policy is about
tenStampd has three kinds of account, and they are not treated identically:
- Customers — people collecting stamps and points at the shops they visit.
- Shop owners — businesses running a loyalty programme.
- Employees — staff working a counter, whose working hours the app records.
Where a shop is the responsible party for information about its own customers and staff, we process that information on the shop’s behalf as an operator. Where the information is about your tenStampd account itself, we are the responsible party.
What we collect, and why
| Information | Why we hold it |
|---|---|
| Email address and password | To create and secure your account. Passwords are handled by Google Firebase Authentication and are never visible to us. |
| Name and phone number | To identify you to yourself in the app, and to a shop where you have chosen to share your details with it. |
| Date of birth (optional) | Only if you provide it, and only so a shop running birthday rewards can offer you one. You can leave it blank. |
| Profile picture or shop logo (optional) | Shown on your card and in the app. Stored in Google Cloud Storage. |
| Member number | The number a counter is shown to find your card. It resolves to your first name and nothing else. |
| Stamps, points, rewards and visits | The loyalty record itself — what the app is for. Held per card, meaning per shop. |
| Offers sent to you, and whether you have read them | So a shop can reach its members, and so you are not shown the same message twice. |
| Feedback you leave for a shop | So the shop can read and answer it. |
| Notification tokens | An identifier for the device you have asked to be reached on. One per device, deleted when you sign out. |
| Employees only: shift start and end times, roster entries, shift swaps, pay rate and a counter PIN | So the shop can roster staff and count hours worked. |
Sharing your details with a shop
Your name, email address, phone number and birthday are held against the card for a particular shop, not taken from your profile. A shop sees them only where you have chosen to share your contact details with that shop. Choosing not to does not stop you collecting stamps there.
Camera
The app asks for the camera to read the code on a card or a member’s phone. Images are read on the device and are not uploaded or kept.
Location
Location is only ever requested from employees, and only where their employer has switched on the setting that asks staff to be at the shop when they clock in and out. It is requested while the app is in use, never in the background.
Your position is not stored. The device compares where it is against the shop branch’s own recorded address and reports only whether it was close enough. No coordinate belonging to a person is written to our records or sent to your employer.
Subscription and payment information
Shop owners pay for tenStampd through the Apple App Store or Google Play. We never see or hold your card details — Apple and Google collect payment and tell us only which plan is active, when it renews, and whether it is in a trial. We use RevenueCat, Inc. to receive and verify that information.
Customers are not charged for tenStampd and are not asked for payment details.
What we do not do
- We do not sell your personal information.
- We do not share it with advertisers, data brokers or ad networks.
- We do not track you across other apps or websites.
- We do not use your information to make automated decisions with legal consequences for you.
Who else processes it
We use these service providers, who process personal information on our instructions:
- Google (Firebase) — authentication, database, file storage, notifications and server functions.
- RevenueCat, Inc. — verifying shop subscriptions purchased through the app stores.
- Apple and Google — app distribution and, for shop owners, payment.
Your information is also visible to the shops you collect at, to the extent described above.
Information leaving South Africa
Our servers are hosted by Google in the United States, and RevenueCat processes subscription information in the United States. This means your personal information is transferred outside South Africa. We rely on these providers’ contractual data-protection commitments, which require a level of protection comparable to POPIA, as permitted by section 72 of the Act.
How long we keep it
We keep your information for as long as your account exists. When you delete your account it is deleted or anonymised as set out below, with one exception: records of hours worked by an employee are kept for three years, which is the minimum period the Basic Conditions of Employment Act, 1997 requires time and pay records to be kept.
When you delete your account
You can delete your account from inside the app, and it is a real deletion, not a deactivation. What happens depends on the kind of account:
- Customers. Your cards, point balances, unclaimed rewards, the offers sent to you, your profile, your picture, your member number and your sign-in credential are all deleted. Two things are anonymised rather than deleted: the record of stamps rung up at a counter, and any feedback you left. Your name is removed and your identity is replaced with a token that resolves to nothing and never will. This is because those records are also the shop’s own trading history — deleting them would silently change last month’s takings for a business that had nothing to do with your decision. What remains cannot be traced back to you.
- Shop owners. The shop, its programme, its branches, its staff records and its cards go with the account.
- Employees. Your account and profile are deleted. Records of hours you worked are kept for three years, because they are your employer’s payroll record rather than ours to erase, and the law requires them to be kept.
Deleting your account does not cancel a subscription bought through the App Store or Google Play. Cancel that in your Apple or Google account settings, or you will continue to be billed.
Your rights
Under POPIA you may:
- ask what personal information we hold about you, and get a copy;
- ask us to correct anything that is wrong or incomplete;
- ask us to delete it, and delete most of it yourself from within the app;
- object to us processing it, or withdraw a consent you gave;
- complain to the Information Regulator.
To exercise any of these, write to privacy@delteqis.com. We will respond within a reasonable period and in any event within the time POPIA allows.
The Information Regulator (South Africa) can be reached at inforegulator.org.za, or at complaints.IR@justice.gov.za.
Security
Access is controlled at the database itself, not only in the app: rules on our servers decide what each account may read and write, so a customer cannot reach another customer’s card and an employee cannot reach anything their employer has not given them. Traffic is encrypted in transit, and passwords are stored and verified by Google Firebase Authentication rather than by us.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the Information Regulator as POPIA requires.
Children
tenStampd is not aimed at children, but a shop’s loyalty programme may have members under 18.
POPIA treats anyone under 18 as a child, and generally requires the consent of a competent person — a parent or guardian — before a child’s personal information may be processed. If you are under 18, you may use tenStampd only with your parent’s or guardian’s permission, and a shop should not sign you up as a member without it.
We do not knowingly process a child’s personal information without that consent. If you are a parent or guardian and believe your child is using tenStampd without your permission, write to privacy@delteqis.com and we will delete the account and the information held against it.
Changes to this policy
If we change this policy we will update the date at the top, and where the change is significant we will tell you in the app before it takes effect.
Contact
DelTeQ Web Services (Pty) Ltd (registration number 2021/671559/07) 1A Pagoda Street, Salisbury Park, Gqeberha, Eastern Cape, South Africa, 6070 privacy@delteqis.com