Data Deletion

1. Your Rights

You have the right to request the deletion of all personal data that LoyalStash holds about you. This right applies regardless of how you signed up for our services — whether through email/password, Facebook, Google, or Apple sign-in.

Upon receiving your request, we will permanently delete your personal data from our systems, subject to any legal obligations that may require us to retain certain information.

2. How to Request Data Deletion

You can request deletion of your data using any of the following methods:

Option A: Email Request

Send an email to contact@loyalstash.com with the subject line "Data Deletion Request". Please include:

• The email address associated with your LoyalStash account
• Your full name (as registered on the account)
• Whether you are a customer, merchant, or both

Option B: In-App Deletion (Customer App)

If you are a customer using the LoyalStash mobile app:

1. Open the LoyalStash app
2. Go to Profile
3. Tap Manage Account
4. Scroll to the bottom and tap Delete Account
5. Confirm the deletion

Option C: Merchant Portal

If you are a merchant or a member of a merchant's staff:

1. Log in to the merchant portal
2. Go to Account
3. Click Delete Account
4. Confirm the deletion

The same option is in the LoyalStash Merchant app, under the Account tab.

Deleting a manager's account deletes the business. Deleting a staff member's account removes only that person's access.

3. What Gets Deleted

When we process your data deletion request, the following information is permanently removed:

For Customers

• Your account profile (name, email, phone number, avatar)
• Your loyalty cards, stamp balances and unredeemed rewards
• Your reviews and comments, and the accounts you have blocked
• Authentication credentials and linked social login connections

For Merchants

• Your account profile and business information
• Staff accounts and invite records
• Promotions, notifications and ownership records
• Authentication credentials and linked social login connections

What We Keep

• A record of past stamp and reward transactions, for the retention period in our Privacy Policy. The link to the deleted account is removed, so these records no longer identify anyone.
• When a merchant deletes their business, its loyalty card is deactivated rather than removed, so customers have 90 days to redeem rewards they had already earned. The card and those stamp balances are then deleted.

4. Processing Time

Deletions started in the app or the portal take effect immediately. Email requests are processed within 30 days of receipt. Either way you receive a confirmation email once your data has been deleted.

In some cases, we may need to retain certain information for a limited period to comply with legal obligations (such as tax or accounting requirements). Any retained data will be securely stored and deleted as soon as the retention period expires.

5. Third-Party Logins (Facebook, Google, Apple)

If you signed up or logged in to LoyalStash using a third-party service (Facebook, Google, or Apple), deleting your LoyalStash data will:

• Remove all your data from LoyalStash — your profile, stamps, rewards, and any other information stored in our systems
• Revoke the connection between your third-party account and LoyalStash

Deleting your LoyalStash data does not affect your third-party account (Facebook, Google, or Apple). To manage your third-party account settings or revoke app permissions, visit:

• Facebook: Settings > Apps and Websites > Remove LoyalStash
• Google: Google Account > Security > Third-party apps > Remove LoyalStash
• Apple: Settings > Apple ID > Sign-In & Security > Sign in with Apple > Stop using Apple ID with LoyalStash