1. Information we collect
Merchants provide an email address and account credentials. We also process business details such as name, locations, logo, brand colour, program settings and team access.
Customers can join with minimal information. Depending on the merchant’s settings, a name, email address or phone number may be optional or required. We process card membership, consent choices, stamps, rewards and redemption history. MoreClub does not currently ask customers for a birthday.
For security and operation, we may process session information, user agent, platform, app version, language, internal identifiers, push tokens and hashed IP addresses in limited security, recovery and audit records.
2. How we use information
We use information to provide accounts and loyalty cards, operate stamp and reward flows, recover access, customise branding, send requested service messages, support users, prevent abuse, secure the service and understand product performance.
3. Merchants and customers
A merchant controls its loyalty program and can see the customers who joined it and their program activity. A customer’s permission is required before staff can find that card by name, email or phone at the counter. MoreClub does not sell personal information.
4. Service providers and sharing
Information is shared only as needed to run the service: Cloudflare R2 for private media storage; Mailgun for service emails; Apple and Google for app purchases and, when enabled, wallet passes; Expo Push or Web Push infrastructure for requested notifications; and Sentry for error diagnostics only when configured. Sentry is configured not to send default personal information.
We may also disclose information when required by law, to protect rights and safety, or as part of a business transaction subject to appropriate safeguards.
5. Payments and subscriptions
Merchant subscriptions in the initial release are processed by the Apple App Store or Google Play. MoreClub receives subscription identifiers, status and dates needed to grant access, but does not receive full payment-card details. Stripe is present only as disabled, post-MVP infrastructure and is not used for current checkout.
6. Notifications
Merchants may receive operational push notifications and service emails. Customers receive marketing messages only after a separate opt-in and can withdraw it from their card. Device or browser push tokens are used only to deliver enabled notifications.
7. Analytics and diagnostics
MoreClub stores its own operational analytics events, such as program creation, joins, stamps and rewards. These events use internal identifiers and defined dimensions such as platform, app version, country and language; unnecessary personal information is not added. The public website has no analytics trackers and sets no non-essential cookies.
8. Storage, security and international processing
Data is stored in PostgreSQL and private object storage. MoreClub uses hashed credentials and tokens, tenant isolation, access controls, append-only audit and loyalty records, encryption in transit and restricted provider credentials. No system can be guaranteed completely secure.
MoreClub and its providers may process information outside the user’s country. Appropriate contractual and technical safeguards should be confirmed for each launch region.
9. Retention
Information is kept while needed to provide the service, meet legal or financial obligations, resolve disputes and maintain security. Expired card-recovery records are removed after a short cleanup period. A merchant deletion request has a 30-day cancellation period. Transactional loyalty and audit records may remain in anonymised form because they also record actions involving other parties.
10. Deletion and user rights
Merchants can schedule deletion inside MoreClub under Settings → Security & account → Delete account. Customers can leave a program from their card under Your data → Leave this card. Depending on location, users may also have rights to access, correct, export, restrict or object to processing, and withdraw consent.
11. Children’s privacy
MoreClub is a business loyalty service and is not directed to children. Merchants must follow local age and consent requirements when offering a program.
12. Changes and contact
We may update this policy as the product or legal requirements change. The date above identifies the current version. Questions and privacy requests can be sent to the privacy contact shown below.