Privacy Policy — TikalLoyalty

1. Who we are

TikalLoyalty is a loyalty application operated by Servicios Avanzados en Tecnología, S.A., a Guatemalan corporation. The app lets customers of merchants ("franchises") on the TikalPOS platform earn and redeem loyalty points. TikalPOS and TikalLoyalty are separate services that interact with each other, both operated by Servicios Avanzados en Tecnología, S.A..

We are the controller of the personal data we collect through the app. For any privacy question, contact us at soporte@tikalpos.com.

2. Information we collect

We collect only the information needed to provide the loyalty service:

• Account data: your name, email address, and optionally a phone number and profile photo (avatar).
• Sign-in identifiers: if you register with Google or Apple, we receive an account identifier and your email to create your profile. We never receive your password for those providers.
• Loyalty data: the franchises you enroll in, your points balance per franchise, and your transaction history (earnings and redemptions).
• Push notification token: a device identifier issued by the notification service, used solely to send you alerts.
• Basic technical data: information needed for the app to function and stay secure (for example, device language).

We do not collect location data, contacts, or payment information through this app.

3. How we use your information

We use your information to:

• Create and manage your account and loyalty profile.
• Show your points balance and reward catalog, and enable QR redemption at the merchant.
• Send notifications about your points, rewards, and updates from the franchises you are enrolled in (you can turn these off at any time).
• Send transactional emails (account verification, password reset).
• Provide support and keep the platform secure.

We do not sell your personal information or use it for third-party advertising.

4. Push notifications

The app may send you push notifications (for example, when a reward is ready or a franchise posts a promotion). Notifications are optional: you can grant or revoke them from your device settings or the app Settings screen.

5. Who we share your information with

We share your information only as needed to operate the service:

• Enrolled franchises: each merchant you enroll with can see your membership profile (name, points balance, and transactions at that merchant) to administer your loyalty program. A franchise cannot see your activity at other franchises.
• Service providers: we use third parties that process data on our behalf, described in section 6.
• Legal obligations: we may disclose information if required by law or to protect rights, safety, or prevent fraud.

6. Service providers

We rely on a small number of providers:

• Apple and Google: for Sign in with Apple / Google and for push notification delivery.
• Expo: push notification delivery service.
• SendGrid (Twilio): transactional email delivery.

The rest of your data (profile, points, transactions) is stored on our own infrastructure, not on third-party services.

7. Data retention

We keep your information while your account is active or as needed to provide the service. If you request account deletion, we delete or anonymize your personal data, except where we must retain it for legal or accounting obligations.

8. Security

We apply reasonable technical and organizational measures to protect your information, including encryption in transit and secure credential storage. No system is 100% foolproof, but we work to keep your data protected.

9. Your rights

You can access, correct, or request deletion of your personal data, and withdraw consent for notifications. To exercise these rights, edit your profile in the app or contact us at soporte@tikalpos.com.

10. Children

TikalLoyalty is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us information, contact us to remove it.

11. International transfers

Some of our providers (Apple, Google, Expo, SendGrid) process data outside Guatemala, mainly in the United States. By using the app, you accept these transfers necessary to provide the service.

12. Changes to this policy

We may update this policy from time to time. We will post the current version on this page with its update date. Continued use of the app after a change means you accept the revised policy.

13. Contact

For any question about this Privacy Policy, contact us at soporte@tikalpos.com.

14. Merchant reviews

If you leave a review about a merchant, note the following about your data:

• Public content: your review (rating and text) and a light identity (your first name or initial, never fully anonymous) are shown publicly on the merchant profile within the app.
• Verified customer: only people with a real transaction with that merchant can review. We show a "verified customer" mark; we do not publish your transaction details.
• Mediated contact: during the resolution window, the merchant may send you one reply inside the app. We do not give the merchant your phone, email, or address for this purpose.
• Your rights: you can edit or withdraw your review at any time. If a review is removed through our moderation, an internal auditable record remains.
• Retention: we keep reviews while the merchant keeps them visible or as required by law; when you delete your account, your reviews are anonymized or deleted per the retention section.