Privacy Policy

Last updated: 13 August 2026

1. Who we are

Freddaki Loyalty Ltd. ("Freddaki", "we", "us") operates the Freddaki loyalty platform, including the website at freddaki.com and the Freddaki app. We are the data controller for the personal data described in this policy.

Contact: support@freddaki.com — Freddaki Loyalty Ltd., Nicosia, Cyprus.

2. What data we collect

• Account data: name, email address, and a PIN/password (stored only as a one-way hash).
• Profile data: phone number (optional), birthday (optional), and referral codes.
• Activity data: loyalty stamps, rewards, transactions, and purchase history within Freddaki.
• Cafe data: for merchant accounts, the cafe name, address, and map location.
• Device data: device identifiers and approximate location only when you choose to share your location for nearby-cafe features.

3. How we use your data

• To create and manage your account and verify your identity.
• To operate loyalty cards, stamps, and rewards.
• To process cafe subscription payments via our payment processor.
• To provide customer support and send service messages.

4. Legal basis

We process your data based on: (a) performance of the contract you have with us; (b) your consent, where required; and (c) our legitimate interest in operating and securing the platform.

5. Payment processing

Payments for cafe subscriptions are processed by Stripe. We do not store your card details. Stripe processes payment data under its own privacy policy and is our data processor for payment purposes.

6. Storage and security

Your data is stored on our servers and in your device's local storage to enable offline use. We apply industry-standard security measures, including encrypted connections (HTTPS), access controls, and monitoring. No method of transmission is 100% secure.

7. Retention

We keep your data for as long as your account is active or as needed to provide the service and meet legal obligations. You may request deletion at any time (see Section 8).

8. Your rights

Under the GDPR and the Cyprus Protection of Personal Data Law (Law 125(I)/2018), you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time.

To exercise any of these rights, contact us at support@freddaki.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus.

9. Cookies and local storage

The Freddaki website and app use local storage (not cookies) to remember your session, preferences, and to enable offline use of the app. This data stays on your device and is not used for advertising. Our payment provider may set strictly necessary cookies to complete payments.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes through the app or on this page. Continued use after changes take effect constitutes acceptance.