Privacy Policy — LocaLoyal (Consumer App)

Last updated: May 16, 2026

This Privacy Policy describes how LocaLoyal ("we", "us", or "our") collects, uses, and shares information when you use the LocaLoyal consumer mobile application (the "App"). The LocaLoyal Shelf Scanner app, used by store owners and staff, is covered by a separate privacy policy.

1. Information We Collect

We collect the following information when you use the App:

Account information. Your email address, which you provide when you sign in. If you sign in with Apple or Google, we receive only the information required to authenticate you (typically an email address; Apple may provide a private relay address that forwards messages to your real address without sharing it with us).
User identifier. A unique account identifier we generate to associate your activity (favorites, searches, notifications) with your account.
Location data. Your device's precise geographic coordinates, requested only when you open the Map tab or use location-based features. Location is used to show stores near you that carry the products you want. We do not store your location history on our servers.
Search history. The product and brand searches you perform in the App, used to power the "recent searches" feature on your Profile screen.
Favorites and notification preferences. The brands and products you save and the products you have asked to be notified about when stores stock them.
Usage analytics. Anonymized analytics about how you interact with the App (which features you use, screens you view, taps and scrolls) collected through Firebase Analytics and Mixpanel. We do not collect advertising identifiers (IDFA on iOS or AAID on Android).
Crash data. If the App crashes, technical diagnostic information collected through Firebase Crashlytics to help us improve stability.

We do not collect: phone numbers, payment information, contacts, photos, videos, audio recordings, health or fitness data, browsing history outside the App, or biometric information.

2. How We Use Information

We use the information we collect to:

Operate, maintain, and improve the App.
Authenticate you and manage your account.
Show you stores near you that carry products you are searching for.
Power features like favorites, recent searches, and product notifications.
Send transactional notifications related to your account or products you have asked to be notified about.
Detect and prevent fraud, abuse, and security incidents.
Comply with applicable laws and respond to lawful requests.

We do not use your information for advertising, and we do not sell your personal information.

3. Sign in with Apple

When you sign in to LocaLoyal using Apple's Sign in with Apple service, we receive your email address from Apple. If you choose to hide your email, Apple provides a private relay address that forwards messages to your real address without sharing it with us.

We use this information solely to:

Create and manage your LocaLoyal account.
Authenticate you on subsequent sign-ins.
Communicate with you about your account, including account confirmations, password resets, and important service updates.

We do not share your email or Apple-provided identifier with third parties for marketing purposes.

You can revoke LocaLoyal's access to your Apple ID at any time by going to Settings > [your name] > Sign-In & Security > Sign in with Apple > LocaLoyal on your Apple device. Revoking access will sign you out of LocaLoyal; you will need to sign in again or create a new account to continue using the app.

4. Sign in with Google

When you sign in to LocaLoyal using Google Sign In, we receive your email address from Google. We use this information only to authenticate you and manage your account. We do not share your email with third parties for marketing purposes.

5. How We Share Information

We share information only as follows:

With service providers. We use third-party infrastructure providers to host data (Supabase), provide analytics and notifications (Google Firebase, Mixpanel), and host our website. These providers process information on our behalf under appropriate confidentiality and security obligations. We do not allow these providers to use your information for their own advertising or marketing.
For legal reasons. We may disclose information when required by law, legal process, or to protect the rights, safety, or property of LocaLoyal, our users, or the public.
In a business transfer. If LocaLoyal is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your account information for as long as your account is active. You may request deletion of your account at any time from within the App (Profile > Delete Account) or by contacting us at the address below; we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, security, or operational reasons.

7. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information. However, no system is completely secure, and we cannot guarantee the security of information transmitted to or stored on the Service.

8. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal information, or to restrict or object to certain processing. To exercise these rights, contact us at the address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other means before the changes take effect. The "Last updated" date at the top of this policy indicates when it was most recently revised.

11. Contact

If you have questions about this Privacy Policy or about how we handle your information, contact us at privacy@localoyal.com.