Privacy policy
Last updated 26 October 2026
The short version
- Stampz runs digital loyalty cards for cafés, shops and other businesses in Oman. We keep only what a loyalty card needs.
- We never sell data, never show ads and never track anyone across other apps or websites.
- A business decides what happens to its customers’ details. We look after them on the business’s behalf.
- The Stampz app uses the camera, photos and location only when you ask it to, for the one thing you asked.
- A business owner can delete the business’s whole account from inside the app.
Who we are
Stampz is a loyalty card service for cafés, shops and other businesses, based in Muscat, Oman. It is made of the Stampz app (used by business owners and their staff), the business owner website at app.stampz.om, and the loyalty cards customers keep in Apple Wallet or Google Wallet. You can reach us at support@stampz.om or on WhatsApp at +968 7747 4193.
Two kinds of data, two roles
Business accounts. For the details of a business, its owner and its staff, Stampz decides how the data is used and is responsible for it.
Customers of a business. When a customer joins a business’s loyalty card, that business is responsible for the customer’s details (it is the data controller). Stampz stores and processes them only to run the business’s card, on the business’s instructions (we are the processor). This matches the notice every customer sees before joining.
What we collect, and why
Business owners
- The business’s name, its branches and their locations, its reward settings and its card design (colours, logo and picture) — to run and show the business’s card.
- The owner’s email address and password — to sign in. Passwords are stored only as a one-way scrambled form (a hash); nobody at Stampz can read them.
- A weekly summary email to the owner, written from the business’s own totals.
- If the owner uses “Ask your business” in the app: the questions they ask and the answers, so they can look back at them.
Staff
- Each staff member’s name, as the owner types it, and a 4-digit PIN they choose. PINs are stored only as a hash.
- Which staff member gave each stamp or reward — so the owner can see the shift’s work and spot mistakes.
Café customers
- Name (it is printed on the card) and phone number.
- If the customer chooses to give them: email, gender, and birthday as day and month only — never the year.
- Whether they agreed to marketing messages, and when. The box is unticked unless they tick it.
- The card’s stamps, points, level and rewards, with the time and branch of each.
- To keep a Wallet card up to date, Apple and Google give us an anonymous device identifier and a push address for that card. It identifies the card on that phone, not the person.
- If the business turns on feedback: after a visit the card can offer a one-tap rating. A customer who chooses to answer gives a rating from 1 to 5 and, if they wish, a comment. The owner sees it with the customer’s first name, and gets an email for a rating of 1 or 2.
- If the business turns on “Ask us”: the questions a customer types through the card’s link and the answers. The owner sees the questions without names.
The Stampz app’s permissions
| Permission | When, and what for |
|---|---|
| Camera | Only while scanning a customer’s card. The code is read on the phone; only the card number is sent. No photo or video is taken or kept. |
| Photos | Only when an owner chooses a logo or picture for the business’s card. Only the picture chosen is uploaded, and it is used on the business’s card. |
| Location | Only when an owner taps “Use my current location” while adding or editing a branch, and only while the app is open. The coordinates are saved as that branch’s location, so customers’ phones can suggest the card nearby. The app never tracks where you go. |
| Face ID or fingerprint | To switch a phone back from counter mode to owner mode. The check happens inside your phone; Stampz never receives any biometric data. |
The Stampz app contains no advertising and no analytics or tracking tools. It does not use motion data or the microphone.
What we never do
- Sell personal data, or give it to anyone for their own marketing.
- Show ads, or track people across other companies’ apps and websites.
- Send marketing messages to a customer who did not agree to them.
Who helps us run Stampz
These companies process data for us, only to provide the service:
- Google Cloud — hosting, the database and its backups.
- Cloudflare — delivers our websites securely. On stampz.om it also counts visits without cookies or personal data.
- Apple and Google — deliver the cards to Apple Wallet and Google Wallet and their updates.
- Resend — sends the owner’s weekly summary email.
- Anthropic (an AI service) — writes the weekly summary from the business’s totals and its staff members’ stamp counts; looks at the website or photo an owner gives it when they ask for a design suggestion or a draft of their shop info; answers an owner’s “Ask your business” questions from the business’s totals, where a list of top customers shows only a first name and an initial; and answers a customer’s “Ask us” question from the shop info the business wrote. It never receives a customer’s phone number, email or birthday, and Anthropic does not use it to train its AI.
Where your data is kept
On Google Cloud servers outside Oman. It is protected by encryption in transit and in storage, access controls and the safeguards above.
How long we keep it
- A business account is kept while the business uses Stampz. When the owner deletes it, every phone is signed out at once and all of the business’s data — its cards, customers, staff and numbers — is deleted permanently 30 days later. Until then it can be undone by contacting us.
- A staff member deleted by the owner is deleted at once: name and PIN. Stamps they gave stay in the business’s totals with no name attached.
- A customer’s card is kept while it is in use. A customer can delete it themselves from My data on the back of the card: their name, phone, email, birthday, feedback and questions are erased at once, and the card on their phone is wiped. Visits and rewards stay in the business’s totals with no name attached. A customer can also ask the business, which asks us.
- A record of My data use — that it was opened, downloaded or used to change or delete something, and when, never the details themselves — is kept for 3 years, so the business and Stampz can show that requests were handled.
- Feedback (ratings and comments) is deleted 12 months after the visit.
- Questions — a customer’s “Ask us” questions and an owner’s “Ask your business” questions — are deleted after 90 days.
- Deleting a card deletes its feedback and its questions with it.
Your rights
Under Oman’s Personal Data Protection Law (Royal Decree 6/2022) you can ask to see, correct or delete your personal data, and you can withdraw your agreement to marketing at any time.
- Customers: open My data from the back of your card to see, correct, download or delete your details yourself, and to turn offers on or off. To protect them, it first asks for the last four digits of your phone number. Your birthday cannot be changed there, because it sets your birthday gift; ask the business if it is wrong. You can also ask the business, at the counter. The business is responsible for your details and we help it act on your request.
- Business owners: change your business’s details in the app or on the owner website, or delete the whole account from the app (Settings › Delete my business account).
- Staff: ask the business owner, who can delete you permanently from the Staff page.
You can always contact us directly at support@stampz.om.
Security
All traffic is encrypted (HTTPS). Passwords and PINs are stored only as hashes, sign-in attempts are limited, a counter phone can do nothing until the owner sets it up, and each business can only ever see its own data.
Changes to this policy
If we change how we handle data, we will update this page and its date. For a change that matters to business owners, we will tell them first.