Privacy Policy
Last updated 3 September 2026 · Version 2026-09-03.draft-1
Draft — attorney review required
This document is a draft. It has not been reviewed by an attorney and is not legal advice. It is published so the product can be tested end to end, and it must be replaced with reviewed text before any real customer uses this service.
Who this is between
When you join a loyalty program, you are joining that business’s program. The business decides what its rewards are and what it says to you. Cync provides the software and stores the data on the business’s behalf.
Each business can only see its own members. A business cannot see that you are a member anywhere else, and cannot see any other business’s customers, staff or activity. This is enforced in the database itself, not only in the application.
What is collected
- What you type when you join — your first name and the phone number or email address you give. Nothing else is required.
- Your loyalty activity — visits recorded by staff, rewards earned and redeemed, and which staff member recorded each one.
- Your consent choices — which boxes you ticked, the exact wording shown to you at the time, when you ticked them, the IP address and browser used, and which version of this policy was in effect. Refusals are recorded too.
- Private feedback, if you choose to send it.
There is no tracking pixel, no advertising identifier, no third-party analytics, and no cross-site tracking. Cync does not sell personal information and does not share it with data brokers.
What is not collected
- No location tracking. This service does not request or use your device location, does not use geofencing, and does not send messages based on where you are. If that ever changes it will require a separate, specific opt-in — never a silent update to this page.
- No payment details. Loyalty membership does not involve a payment, and no card data is collected or stored.
- No purchase contents. A visit is recorded as a visit. What you bought is not recorded.
Your QR code
Your digital card carries a random code that identifies your membership. That code is all it contains — not your name, phone number, email address or visit count. Someone who photographs your screen learns nothing about you, and the code cannot be used to add or spend rewards without a staff sign-in.
Messages
Loyalty messages and marketing messages are separate choices, and neither is required to join. Marketing consent is never a condition of participating in a loyalty program. The Messaging Policy explains each type and how to stop it.
Your choices and rights
You can make any of these requests at any time, and you will not be charged or penalised for it:
- Get a copy of the information held about you.
- Correct anything that is wrong.
- Delete your membership and personal information.
- Withdraw a consent — for example, keep the loyalty card but stop marketing messages. Withdrawing marketing consent never affects your rewards or your balance.
Ask the business running your program, or contact Cync. Requests are answered within 45 days. Some US states, including California, give residents specific versions of these rights; this policy applies them to everyone rather than only where they are required.
Draft note: the contact address, the verification method for a deletion request, and the state-specific disclosures still need to be set by the business and reviewed by an attorney.
How long information is kept
| What | How long |
|---|---|
| Membership and visit history | While the membership is active, then 24 months after the last visit, then deleted. |
| Consent records | 6 years after consent is withdrawn or the membership ends. These are the evidence that a message was permitted, so they outlive the membership on purpose. |
| Private feedback | 24 months, then deleted. |
| Audit log of staff actions | 24 months. Records who added or reversed a visit, never why a customer visited. |
| Deletion requests | The request itself and its outcome are kept for 24 months so we can show the deletion happened. |
Deleting your membership removes your name and contact details. Consent records are kept longer on purpose: they are the evidence that a message was permitted, and destroying them would remove the proof that your choices were honoured.
Children
This service is not directed to children under 13, and a business should not enrol one. If you believe a child has been enrolled, contact the business or Cync and the membership will be deleted.
Changes to this policy
The version number and date at the top of this page change whenever the wording does. Past versions are kept, because your consent record points at the version that was shown to you — not at whatever this page says today.
Cync is an independent service. Apple, Google, and any business listed in this app are not sponsors of, and do not endorse, review or administer, this loyalty program. Apple Wallet and Apple are trademarks of Apple Inc. Google, Google Wallet and Google Reviews are trademarks of Google LLC. Use of these names is for identification only.