Privacy Policy

Last updated: 14 June 2026

loymint is a privacy-first loyalty wallet. Privacy is not a setting here — it is how the product is built. This policy explains what we do and, more importantly, what we deliberately cannot do with your data.

Placeholders below in [brackets] must be completed with your legal entity details before publication.

Who we are

This site and the loymint apps are operated by [Legal entity name], [address], [country]. For any privacy question, contact us at [privacy@loymint.com].

The short version

• Your loyalty cards are encrypted on your device. Our servers only ever store an unreadable blob — we cannot read, sell or hand over your card contents.
• No ads. No advertising SDKs. No selling or brokering of your data. Ever.
• On this website, we only store the email you give us to join the waitlist, and we only run analytics if you explicitly accept.

Data we process

On this website (loymint.com)

• Waitlist email — when you join the waitlist, we store your email address (and optional first name) for the sole purpose of notifying you when loymint launches. Legal basis: your consent.
• Acquisition metadata — if available, the page and referrer of your signup, to understand where interest comes from.
• Analytics — only if you accept in the cookie banner. See our Cookie Policy.

In the loymint apps

• Encrypted card vault — your cards are encrypted on-device with a key that never leaves your device. We store the resulting ciphertext to sync it between your own devices. We hold no key to decrypt it (zero-knowledge).
• Device & authentication data — device public keys (Ed25519) and passkeys used to authenticate you and enroll your devices. We never receive your biometrics or private keys.
• Optional account email — used for sign-in and security notifications, where you choose to set one.
• Diagnostics — minimal, aggregated technical logs to keep the service running and secure.

What we never do

• We never read the contents of your loyalty cards.
• We never sell, rent or share your personal data with data brokers or advertisers.
• We never embed third-party advertising or tracking SDKs in the apps.

Hosting

Data is hosted on independent, GDPR-aligned infrastructure within the European Union at [hosting provider / location].

Retention

• Waitlist emails are kept until launch and the related notification has been sent, then deleted, unless you have separately created an account.
• App data is kept for as long as your account is active. You can delete it at any time.

Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to processing. To exercise these rights, contact [privacy@loymint.com]. You also have the right to lodge a complaint with your supervisory authority (in France, the CNIL).

Changes

We may update this policy. Material changes will be reflected by the “last updated” date above.