Privacy policy

1. Who we are

Recouper Ltd is registered in England and Wales, company number 17500010. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Our ICO registration number is ZC272683.

Each loyalty card belongs to a venue, such as a café, pub or shop, and carries that venue's name and branding. The venue decides how its loyalty scheme works and is the controller of your stamps, balance and history at that venue. We run the app on the venue's behalf. We are the controller of your sign-in account, which lets one email address open cards at more than one venue.

Questions about your data: hello@recouper.app.

2. What we collect

If you have a loyalty card:

• Your email address, and when you confirmed it with a one-time code
• Your first name, if you choose to add one
• Your stamps, cash-back balance, and a history of stamps, credits and rewards at each venue, with dates and amounts
• If the venue uses Square: the amount of payments you make with a payment card linked to your loyalty card, so cash-back can be added automatically. We never receive your payment card number.
• Your choices about offers: which venues you want offers and news from, when and where you made each choice, the wording you saw, and for venues that sell alcohol, that you confirmed you are 18 or over
• Whether you've let a venue's till find you by your first name and email, and when you chose
• A sign-in cookie on your device

If you run or work at a venue:

• The owner's name and email address
• The venue's details, contact email and phone number, if given
• Your plan and billing status. Payments are taken by Stripe, which holds your card details; we never see the full card number.
• A record of which till devices have signed in with the staff PIN
• The venue's Square account connection, if the venue connects one

If you try the demo or ask us for one:

• Your email address and the venue name you give
• Whether you ticked the box for tips and news about Recouper, the wording you saw, and when
• If you ask for a demo: your name, phone number if given, and your message

If you email us, we keep the email and our reply.

We do not use advertising or analytics trackers.

3. Why we use it, and our lawful basis

A venue can send you offers only if you ticked the box for that venue, and your choice for one venue never applies to another. You can change your mind at any time in Account, under Offers and news, or with the link in any message. Venues do not see your email address; we send messages on their behalf.

We may also send you messages about your card itself, such as a reward being ready or a card about to expire. We will only tell you about other venues on Recouper if you have separately agreed to that.

4. Who we share it with

• The venue whose card you hold sees your stamps, balance and history at that venue. It does not see your activity at other venues, or your email address.
• Service providers who help us run Recouper: Render (hosting and database, in Frankfurt, Germany), Resend (sending sign-in codes and other emails), Stripe (venue billing), Google Workspace (our email inbox), and Square (only if the venue uses Square; Square receives a reference number and a generated address, not your real email, unless you tick to let that venue's till find you, when the venue's Square account also gets your first name and email. Untick it in Account and they're taken off again).
• Authorities, if the law requires it.

We never sell your data.

5. Where your data is kept

Our database and app are hosted in the European Union, which UK law recognises as giving adequate protection. Some of our service providers, such as our email and payment providers, may process data in the United States. Where they do, we rely on the UK Extension to the EU-US Data Privacy Framework if the provider is certified, or otherwise on the International Data Transfer Addendum approved by the ICO.

6. How long we keep it

• Your account is kept until you delete it from the Account page.
• A card expires after 12 months with no stamps, credit or rewards, and its stamps reset to zero. Any cash-back balance is not removed when a card expires.
• When you delete your account we delete your email address and name straight away. The venue's transaction records stay for up to 6 years for accounting, with nothing that links them to you.
• If a venue stops using Recouper, its card closes. 90 days later we delete your details for that venue. If that was your only card, your account goes too; cards at other venues are not affected.
• Venue owner and billing records are kept while the venue uses Recouper and for 6 years after.
• A demo deletes itself after 3 days unless we extend it for you. We keep your email and a note of what you tried for 12 months after we were last in touch, or until you unsubscribe if you ticked the box for tips and news or asked us to contact you.

7. Your rights

You can ask to see, correct, delete or get a copy of your data, to object to how we use it, or to restrict it. You can delete your account yourself on the Account page. For anything else, email hello@recouper.app. If your request is about a venue's scheme, we will pass it to the venue and help them answer it.

You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would like the chance to help first.

8. Cookies

We set a cookie to keep you signed in on your device, for up to 12 months. Venue owners and staff get a similar cookie for the dashboard and till. These are strictly necessary, so we do not ask for consent. We use no other cookies.

Your card also saves its last stamp count on your device so it can show a message when a new stamp lands. This stays on your device and is never sent to us or anyone else.

9. Age

You must be 13 or over to save a card. To get offers from a venue that sells alcohol, you must confirm you are 18 or over.

10. Security

We use encrypted connections, store sign-in tokens and passwords only in hashed form, encrypt venues' Square keys, limit repeated code guesses, and limit who can reach the database.

11. Changes

We will post any changes here and, for significant changes, tell you in the app. See also our terms.