Privacy Policy

Last updated: May 7, 2026

This Privacy Policy describes how LocaLoyal ("we", "us", or "our") collects, uses, and shares information when you use our mobile application and related services (collectively, the "Service"). By using the Service, you agree to the practices described below.

1. Information We Collect

We collect the following information when you use the Service:

• Account information: first name, last name, email address, and phone number, which you provide when creating an account.
• Verification data: we send one-time passcodes (OTPs) to your phone number to verify your identity. We do not store the OTP itself; we only record whether your phone number has been verified.
• Store information: the businesses you associate with your account, including their name, address, and your stated relationship to them (owner, employee, or community member).
• Location data: your device's geographic coordinates at the time you record or submit a scan, used to verify that submissions originate at the correct store. We also read location metadata embedded in videos you upload from your device's photo library, for the same purpose.
• Camera and media access: videos you record within the Service, and videos you select from your device's photo library, are uploaded to our systems for processing.
• Device information: we collect basic device identifiers (such as device type, operating system version, and a push notification token) to deliver notifications and diagnose technical issues.
• Usage data: anonymized analytics about how you interact with the Service and our website at localoyal.com, including which features and pages you use and when. We do not collect advertising identifiers (IDFA on iOS or AAID on Android).
• Crash data: if the Service crashes, we collect technical diagnostic information to help us improve stability.

2. How We Use Information

We use the information we collect to:

• Operate, maintain, and improve the Service.
• Verify your identity, your phone number, and the location of your submissions.
• Process videos you submit using automated image-recognition systems (including third-party AI services) to identify products on store shelves.
• Send you transactional notifications related to your account, your submissions, or actions taken by other users (such as confirmations of co-ownership requests).
• Detect and prevent fraud, abuse, and security incidents.
• Comply with applicable laws and respond to lawful requests.

We do not use your information for advertising, and we do not sell your personal information.

3. SMS / Text Messaging

Use case. When you provide your phone number, we use it to send one-time passcodes (OTPs) to verify your identity. This is a transactional two-factor authentication / account verification flow. We do not send marketing or promotional SMS.

Frequency and rates. Message frequency varies based on login and scan activity, typically one message per verification request. Msg & data rates may apply.

HELP and STOP. Reply HELP to any LocaLoyal SMS for support information. Reply STOP to any LocaLoyal SMS to opt out of further messages from us.

No sharing of mobile information. Mobile information (phone numbers and SMS opt-in data) is not shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in consent is not transferred to or shared with any third party for any purpose.

For full details on the SMS verification consent flow, including the in-app disclosure and a sample message, see our SMS Verification & Consent page.

4. Sign in with Apple

When you sign in to LocaLoyal using Apple's Sign in with Apple service, we receive your name and email address from Apple. If you choose to hide your email, Apple provides a private relay address that forwards messages to your real address without sharing it with us.

We use this information solely to:

• Create and manage your LocaLoyal account.
• Authenticate you on subsequent sign-ins.
• Communicate with you about your account, including account confirmations, password resets, and important service updates.

We do not share your name, email, or Apple-provided identifier with third parties for marketing purposes.

You can revoke LocaLoyal's access to your Apple ID at any time by going to Settings > [your name] > Sign-In & Security > Sign in with Apple > LocaLoyal on your Apple device. Revoking access will sign you out of LocaLoyal; you will need to sign in again or create a new account to continue using the app.

5. How We Share Information

We share information only as follows:

• With service providers: we use third-party infrastructure providers to host data (Supabase), deliver SMS (Twilio), perform image recognition (Anthropic), provide analytics and notifications (Google Firebase), and host our website. These providers process information on our behalf under appropriate confidentiality and security obligations.
• With other users at the same store: verified store owners can see submissions made for their store, including the first name of the user who made each submission.
• For legal reasons: we may disclose information when required by law, legal process, or to protect the rights, safety, or property of LocaLoyal, our users, or the public.
• In a business transfer: if LocaLoyal is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

As stated in Section 3, mobile information (phone numbers and SMS opt-in data) is excluded from any sharing for marketing or promotional purposes, and SMS opt-in consent is not transferred to or shared with any third party for any purpose.

6. Data Retention

We retain your account information for as long as your account is active. You may request deletion of your account at any time by contacting us at the address below; we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, security, or operational reasons.

7. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information. However, no system is completely secure, and we cannot guarantee the security of information transmitted to or stored on the Service.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal information, or to restrict or object to certain processing. To exercise these rights, contact us at the address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other means before the changes take effect. The "Last updated" date at the top of this policy indicates when it was most recently revised.

11. Contact

If you have questions about this Privacy Policy or about how we handle your information, contact us at privacy@localoyal.com.