Privacy Policy

1. Scope of the service

Frezz allows users to sign up or log in, browse participating merchants, use digital loyalty cards, interact with promotions, register stamps through NFC or tag-associated URIs, view maps and seller promotional content, and manage account-related requests.

The public website and seller area also provide commercial information, authenticated access, shop management tools, promotion and alert publishing, support pages, and procedures for privacy or data deletion requests.

2. Categories of data processed

• Identification and account data, such as email address, display name, technical profile identifiers, authentication tokens, and profile image if provided by the login provider.
• Service usage data, such as active cards, collected stamps, redeemed rewards, promotion interactions, viewed alerts, technical logs, and data required for service security.
• Data related to NFC tags or promotion-associated URIs, including tag codes, scan logs, and references to the relevant promotions.
• Location or proximity data, if the user enables the permissions required to show nearby merchants, sort results by distance, or open external navigation services.
• Seller data, such as business name, email address, shop address, coordinates, logo, promotional content, user-facing messages, and data needed to manage the shop.
• Seller subscription data, such as the selected plan, purchase store, transaction or purchase identifiers, subscription status, renewal or expiry date, and technical data required to verify receipts with the applicable digital store.
• Data stored locally on the device, such as session tokens, display name, profile image, and preferences strictly necessary to use the app.

3. Purposes of processing

• Providing access to the app, website, and restricted areas, including login with Google, Apple, or email/password credentials where available.
• Linking loyalty cards to users, recording NFC scans or equivalent operations, and updating stamp or reward counts.
• Showing participating merchants, maps, promotions, rewards, weekly seller alerts, and other content connected to use of the service.
• Allowing sellers to manage their profile, logo, promotions, scan history, alerts, and shop-related features.
• Managing seller subscriptions, including technical verification of receipts or purchase tokens, checking plan status, and enabling subscription-related features.
• Managing support, security, maintenance, abuse prevention, technical monitoring, service continuity, and data deletion requests.
• Complying with legal obligations or defending rights in out-of-court or judicial proceedings.

4. Legal bases

Processing may be based on performance of the service requested by the user, legitimate interest in the technical, administrative, and security management of the platform, compliance with legal obligations, and, where required, the user's consent, for example for geolocation or device permissions such as photo library access.

5. External login, maps, digital stores, and other third-party services

Depending on the features actually used, Frezz may integrate or open third-party services such as Google or Apple authentication, Google Maps, Apple Maps, Waze, external review links, and the device digital store. When the user opens an external service or purchases a subscription through a digital store, the related processing is also governed by that provider's own policies and terms.

For seller subscriptions, the digital store used handles payments and may process billing data or payment methods according to its own rules. Frezz does not receive the user's full card or payment method details, but it may receive and process technical data strictly necessary to verify and reconcile subscription status.

6. Data retention

Data is retained for the time strictly necessary for the purposes for which it was collected, taking into account security, audit, technical support, administrative management, fraud prevention, subscription management, rights protection, and applicable legal obligations.

Data stored locally on the device may remain until logout, app uninstallation, or manual deletion of app data, unless otherwise managed by the operating system or the authentication provider.

7. Data sharing

Data may be processed by authorized personnel and, where necessary, by technical providers supporting hosting, authentication, maintenance, security, cloud services, geolocation, maps, subscription verification, or operational assistance. Data may also be disclosed to authorities or other entitled parties when required by law.

8. Data subject rights

• Access to personal data.
• Rectification or update of inaccurate data.
• Erasure, restriction of processing, or objection where provided by law.
• Data portability, where applicable.
• Withdrawal of any consent given.
• Complaint to the competent supervisory authority.

9. Privacy and support contacts

These contact details may be used for operational support, privacy requests, exercise of rights, and account-related notices. If the service is managed through a separate legal entity, the relevant identifying details will be updated on this page.