Privacy Policy

At Fidely (a product engineered and operated by JouriaTech), privacy is an architectural guarantee—not an afterthought. This Privacy Policy explains how we collect, process, isolate, and protect information for both Shop Owners (Merchants) and End Customers (Pass Holders).

1. Strict Tenant Isolation & Zero Ad-Brokerage

Unlike traditional retail loyalty platforms that pool customer phone numbers and purchase histories across merchants to build advertising profiles, Fidely strictly isolates each merchant’s data using PostgreSQL Row-Level Security (RLS).

• We never sell, rent, or share Shop Owner or Customer Pass data with third-party advertisers or data brokers.
• We do not embed third-party behavioral ad trackers or cross-site tracking pixels inside our merchant dashboard or pass enrollment pages.

2. Information We Collect

A. Shop Owner (Merchant) Account Data

When you register a Shop Owner account on Fidely, we collect your name, work email address, password hash (managed via Supabase Auth bcrypt/argon2), shop name, shop category, physical storefront address, and store coordinates (used to configure pass lock-screen beacons).

B. End-Customer Wallet Pass Data

When a customer enrolls in a shop’s loyalty program, we generate a unique cryptographic pass serial (`#FD-...`) and store the minimal fields configured by that shop (such as customer display name, optional email/phone for pass recovery, stamp balance, cashback balance, and counter scan timestamps) on behalf of that specific Shop Owner.

3. How Apple Wallet & Google Wallet Geo-Fencing Works

Fidely passes support location-based lock screen notifications when a customer walks near a participating shop.

• 100% On-Device Evaluation: Your shop’s fixed GPS coordinates are embedded inside the `.pkpass` (Apple Wallet) or Google Wallet Loyalty Object metadata.
• Zero Live GPS Tracking: The customer’s iOS or Android operating system evaluates proximity locally on their phone. Fidely servers never receive or log real-time GPS coordinates of customers.

4. Infrastructure & Security

• Edge Delivery: Fidely web applications are served over TLS 1.3 via the Cloudflare global edge network.
• Database Encryption & RLS: All database records are stored in Supabase PostgreSQL with encryption at rest (AES-256), encryption in transit, and strict Row-Level Security policies enforcing `auth.uid() = owner_id`.

5. Data Ownership, Export & Deletion Rights

Shop Owners retain 100% ownership of their shop configuration and customer pass roster. You may export your records or delete any customer pass or your entire shop account directly from your Fidely Dashboard at any time. Upon shop deletion, all associated loyalty programs, passes, and transaction logs are permanently cascaded (`ON DELETE CASCADE`) from our database.

For privacy inquiries or formal GDPR / CCPA / Law 09-08 data deletion requests, contact the JouriaTech engineering team via JouriaTech.com.