Privacy policy

Last updated: September 2026

mylo works because it asks for almost nothing. A tap creates a wallet card — no account, no form, no app. This page explains the little data we do handle, both for you as a business and for your customers.

1. What we collect from you

To open and bill your account: business name, contact name, email, phone, locations, and billing details. Payments are processed by our payment provider — card numbers never touch our servers.

2. What we collect from your customers

• A card identifier created when they first tap the plate.
• Visit events: date, time and location of each tap, plus points earned and redeemed.
• Optionally a first name and an email or phone, only if the customer chooses to add them.

We do not collect their location, contacts, photos or anything else from their phone. A tap reads the plate; it does not read the device.

3. Wallet cards

Cards are issued as Apple Wallet and Google Wallet passes. When a balance changes we send the updated pass through those services, which handle the delivery under their own privacy terms. Removing the pass from the wallet stops those updates.

4. How the data is used

To keep point balances accurate, to show you your dashboard and per-location reports, to send transactional notices, and to keep the service secure. We do not build advertising profiles and we do not share data between businesses — each program is isolated.

5. Who else sees it

Only the providers we need to operate: hosting, the wallet pass services, our payment processor and our email sender. Each is bound by contract to process the data solely on our instructions. We disclose data to authorities only when the law requires it.

6. How long we keep it

Visit history is kept while the program is active and for 12 months after a card goes inactive, then deleted. Billing records are kept as long as tax rules require. When you close your account we delete your program data within 90 days.

7. Rights

You and your customers can request access, correction or deletion of personal data at any time, and can object to its processing. Write to privacidad@myloloyalty.com and we answer within 30 days. Deleting a card also deletes its point balance.

8. Cookies

This site uses only the cookies needed to keep you signed in to the dashboard and to measure aggregate traffic. No advertising or cross-site tracking cookies.