Privacy Policy

Perka provides customer retention software for local businesses. Businesses use Perka to create loyalty programs, enroll customers, issue Apple Wallet and Google Wallet passes, track points or stamps, and redeem rewards.

For account and product data, contact us at privacy@perka.example. If a local business invited you to join its rewards program, that business may also be responsible for how it uses your customer data.

Business account data: name, email address, business name, business slug, plan, settings, billing status when payments are enabled, and authentication records.

Customer rewards data: customer name, email, phone number, points balance, stamps balance, reward redemptions, wallet card status, QR identifiers, transaction history, and location assignment when a business uses locations.

Technical data: IP address, device/browser information, session cookies, security logs, app usage events, and diagnostics needed to run and protect the service.

Wallet provider data: pass identifiers, serial numbers, Apple Wallet or Google Wallet object identifiers, and pass URLs when wallet issuing is enabled.

We use personal data to create and manage accounts, operate loyalty programs, enroll customers, calculate points and stamps, issue or update wallet passes, provide analytics, prevent abuse, secure the service, and respond to support or legal requests.

We do not sell personal data. We do not use customer rewards data for third-party advertising. If marketing features are added later, they should include a clear opt-in or lawful basis before use.

For business users, we usually process data to perform our contract, provide the service, secure accounts, and comply with legal obligations.

For loyalty customers, the business running the rewards program usually decides the lawful basis for enrollment and reward processing. Perka processes that data to provide the service to the business.

Where consent is used, it can be withdrawn. Withdrawal does not affect processing that happened before withdrawal or data we must keep for legal, security, or dispute reasons.

We share data with service providers that host, authenticate, secure, store, email, or process the service. Current or planned providers may include Supabase, Apple Wallet, Google Wallet, Cloudflare R2, hosting providers, analytics tools, email providers, and payment processors such as PayFast when billing is enabled.

Businesses can export reports and may process customer data outside Perka. Their own privacy notices should explain how they use that data.

We keep account and loyalty data while an account or rewards program is active. We delete or anonymise data when it is no longer needed, when an account is deleted, or when a valid erasure request applies.

Some information may be retained longer where required for legal obligations, security, fraud prevention, backups, accounting, dispute resolution, or establishment and defence of legal claims. Backup copies are overwritten according to provider schedules and are kept beyond use where immediate deletion is not technically possible.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing, receive a portable copy of your data, withdraw consent, and complain to a supervisory authority.

Business users can delete their account from Settings. Loyalty customers can contact the business that enrolled them or email privacy@perka.example with enough information to identify the rewards profile.

Perka and its processors may process data in countries outside your own. Where required, transfers should rely on appropriate safeguards, adequacy decisions, or contractual protections.

We use authentication, row-level database security, server-side access checks, security headers, signed wallet links, and provider access controls to protect data. No online service can guarantee absolute security.