Privacy Policy

Effective: October 5, 2026 · Last updated: October 5, 2026

LoopDine ("we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect through the LoopDine mobile app, the LoopDine pages you reach by tapping or scanning a stand at a business (tap.loopdine.com), and our website (loopdine.com), how we use it, and your rights regarding that information.

1. What we collect

LoopDine mobile app — customers

• Phone number — to sign you in with a one-time code and to link your loyalty cards across businesses. There is no password.
• Name — so a business can recognise you at the counter.
• Email and birthday — only if you choose to add them.
• Profile photo — only if you choose to set one. We read the single photo you pick, never the rest of your library.
• Visits and rewards — each visit a business adds to your card, the rewards you earn, and the rewards you redeem.
• Notification token — if you allow notifications, a device token so we can deliver them.

LoopDine mobile app — businesses and their staff

• Email address and password — to sign in to a business account. Passwords are stored hashed by our authentication provider.
• Actions you take — which staff account added a visit, redeemed a reward, or sent a message, so the business has an audit trail.
• Camera — used only to scan a customer's LoopDine code. The camera image is processed on the device and is not stored or uploaded.

Stand pages (tap.loopdine.com)

When you tap or scan a LoopDine stand at a business and choose to play or join:

• First name, phone number and email you enter, and your birthday if the business asks and you provide it.
• Your choices — whether you agreed to receive emails, and separately whether you agreed to receive texts, with the time and the wording you agreed to.
• Prizes and visits — what you won, and whether it was redeemed.
• Abuse-prevention signals — a session cookie and a one-way hash of your IP address and browser type, used to limit repeat plays. We do not store the raw IP address for this purpose.

Apple Wallet

If you add a loyalty card to Apple Wallet, Apple gives us a device token for that pass so we can update it when your visit count changes. We do not receive any other information from Wallet.

Website (loopdine.com)

If you fill in a form on our website, we collect what you enter, such as your name, email, phone number and business name. Our hosting provider (Vercel) may log standard request data such as IP address, browser type, referring page and timestamps, which we use only for security and operations.

What we do not collect

We do not collect your location, your contacts, your browsing activity in other apps or sites, or payment card details.

2. How we use your information

• To run your loyalty cards — sign you in, show your cards, add visits, and issue and redeem rewards.
• To keep cards accurate — prevent duplicate entries and investigate mistakes or misuse.
• To deliver what you asked for — a prize, a reward, a sign-in code, or an update to a Wallet pass.
• To send messages you agreed to — see section 5.
• To give a business its own totals — such as visits and rewards redeemed.
• To respond to questions you send us.

We do not use your information for third-party advertising, and we do not build advertising profiles.

3. What businesses see

A LoopDine loyalty card is a relationship between you and a business. When you join a business's program, or a staff member starts a card for you with your phone number, that business can see your name, phone number, email and birthday if provided, and your visits and rewards at that business. A business cannot see your cards or activity at any other business.

Your LoopDine code is the same at every business, but it is a random code that carries no personal details by itself.

4. Who we share it with

We use a small number of service providers to operate LoopDine. They process data on our behalf:

• Supabase (database and sign-in) — stores accounts, loyalty cards, visits and rewards, and sends sign-in codes through its SMS provider. See Supabase's privacy policy.
• Vercel (hosting) — serves loopdine.com, app.loopdine.com and tap.loopdine.com. See Vercel's privacy policy.
• Resend (email delivery) — delivers prize emails and emails from businesses you joined. See Resend's privacy policy.
• Apple — delivers push notifications and Apple Wallet pass updates. See Apple's privacy policy.
• Formspree (website forms) — processes some forms on loopdine.com. See Formspree's privacy policy.

We do not sell or rent your data to anyone. We share information with law enforcement only when legally required.

5. Emails and texts

• Sign-in codes — sent by text when you sign in to the app. These are not marketing.
• Emails from a business — if you gave your email and agreed to the email terms shown, that business can email you your prize and occasional offers. Every email names the business, includes its postal address, and has an unsubscribe link that works with one click. Unsubscribing from one business does not affect the others.
• Texts from a business — only if you separately ticked the box to receive texts. This is always optional and is never required to play, join or earn a reward. Reply STOP to any text to opt out. Message and data rates may apply.

6. Cookies & analytics

• Stand pages use one first-party session cookie so a refresh does not count as a new play.
• Business dashboards use cookies to keep you signed in.
• loopdine.com uses browser localStorage for small preferences on your own device.
• No third-party advertising cookies — we do not run advertising trackers, retargeting pixels or social-media tracking SDKs.

7. Your rights and deletion

Deleting your account and data

In the app, go to Profile → Personal → Delete account. This permanently deletes your account, your profile, and your loyalty cards, visits and unredeemed rewards at every business. It takes effect immediately and cannot be undone. Businesses keep only anonymous totals, such as the number of rewards given, which are no longer linked to you.

If you used a stand page without creating an app account, or you cannot access the app, email hello@loopdine.com from the email address on your card, or tell us the phone number, and we will delete your data within 30 days.

If you're in the European Union or United Kingdom (GDPR)

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate information
• Right to erasure — ask us to delete your data
• Right to object — opt out of marketing messages at any time
• Right to data portability — receive your data in a machine-readable format
• Right to lodge a complaint with a data protection authority

If you're in California (CCPA / CPRA)

• Right to know what categories of personal information we collect and how we use them
• Right to delete your personal information
• Right to opt out of sale — we don't sell your data
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, email hello@loopdine.com. We respond within 30 days.

8. Security & retention

We protect your data with HTTPS encryption in transit, encrypted storage at our providers, and access controls that limit each business to its own customers.

We keep your account and loyalty data until you delete your account or ask us to delete it. Records of the consent you gave for emails or texts are kept for as long as needed to show that the consent was given. Website form submissions are kept until you ask us to delete them.

9. Children

LoopDine is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact us so we can remove it.

10. Changes to this policy

We may update this Privacy Policy as we add features or as laws change. When we do, we'll update the "Last updated" date at the top of this page.

11. Contact us

Questions, requests, or concerns? Email hello@loopdine.com. We respond to all privacy-related requests within 30 days.