Request for Data Deletion

This page explains how a business administrator or a customer (end user) can request deletion of data processed by TapLoyal.

What data we can delete

Business / administrator account data (email address, Firebase UID, subscription status).
Business profile data (name, logo, contact details, links, rewards, notifications).
Pseudonymous loyalty data associated with a specific business (visit counters, timestamps), where technically feasible.

What may be retained

Legal obligations: certain records may be retained if required by law.
Security & audit logs: retained for up to 30 days, then automatically deleted.

Self-service account deactivation (recommended)

Business administrators can deactivate their account directly in the app:

Open the app
Go to Settings
Select Deactivate account

After deactivation, the account is immediately signed out. Associated personal account data is permanently deleted within a reasonable period, typically within 30 days, unless a longer retention period is required by law.

Email deletion request (alternative option)

If you cannot access the app, you may request deletion by email.

Open the pre-filled email
or contact us at madalar2@gmail.com.

Your role: Business Admin or Customer.
Admins: the email address linked to your TapLoyal account.
Customers (no account): the business QR code, NFC tag, or link used (to help locate pseudonymous data).
A clear description of the requested deletion.

Response time: requests are usually acknowledged within 72 hours and completed within 7 business days.

Please do not include passwords, verification codes, or other sensitive information in your email.

Customers without an account

Customers do not create accounts in TapLoyal. Loyalty data is stored under a pseudonymous identifier and cannot always be linked to a specific person. Uninstalling the app or clearing app data removes locally stored data from the device.

Automatic deletion & retention

Only the most recent 50 notifications per business are retained; older ones are automatically deleted.
Business/admin accounts may be automatically deactivated after a prolonged period of inactivity.
Deactivated administrator accounts are permanently deleted after 30 days, unless legal obligations require longer retention.

Identity verification

We may request additional information to verify that you are the account owner or an authorized representative before processing deletion requests.

For more information about data categories and retention, see our Privacy Policy.