Privacy Policy

This Privacy Policy explains how Wefer ("we", "our", or "us") collects, uses, shares, and protects your information when you use our loyalty application and related services (the "Services"). Our Services enable customers to earn and redeem loyalty points across participating marketplaces and merchants, including via NFC, QR codes, and supported payment cards (e.g., Visa).

Information We Collect

• Account Information: name, email, phone number, preferred language.
• Identity & Verification: IDs or verification data when required by law or fraud prevention.
• Transaction & Loyalty Data: purchases, earned/redeemed points, participating merchant and marketplace details, timestamps, and amounts.
• Payment Token Data: tokenized card identifiers provided by payment partners for multi-card support (we do not store full PANs).
• Device & Usage Data: device type, OS, app version, IP, logs, and diagnostic data.
• Location Data: approximate or precise location when you enable location-based features; you can disable this in your device settings.
• Communications: preferences and content related to WhatsApp/SMS/email notifications where applicable and permitted.

How We Use Your Information

• Provide, operate, and maintain the loyalty program and your account.
• Process point earning and redemption, and synchronize balances in real-time.
• Enable NFC/QR-based redemption and multi-card tokenized transactions.
• Prevent fraud, secure our Services, and comply with legal obligations.
• Personalize content and offers, including AI-powered recommendations.
• Communicate service updates, transactional messages, and—where permitted—marketing communications.
• Analyze usage to improve performance, features, and user experience.

Legal Bases

We process your data based on one or more of the following: performance of a contract, legitimate interests, consent, and legal obligations.

Sharing of Information

• Marketplaces & Merchants: to award and redeem points and validate transactions.
• Payment & Technology Partners: to process tokenized payments and enable NFC/QR features.
• Service Providers: hosting, analytics, communications, support, and security vendors.
• Legal & Compliance: to comply with law, enforce terms, or protect rights, safety, and property.
• Business Transfers: in the event of a merger, acquisition, or asset sale.

Data Retention

We retain personal data while your account is active or as required to provide the Services and meet legal obligations.

Your Rights

Subject to applicable laws, you may request access, correction, deletion, restriction, objection, or portability. Where processing is based on consent, you may withdraw it anytime.

Security

We implement administrative, technical, and physical safeguards, including tokenization and encryption in transit.

International Transfers

Your information may be processed in countries with different data protection laws; appropriate safeguards are used where required.

Children's Privacy

Our Services are not directed to children under 13 (or minimum age per local law).

Changes to This Policy

We may update this Policy periodically. Material changes will be communicated via the app or other means.

Contact Us

For privacy inquiries, contact privacy@wefer.shop.