Who we are
prklo is a loyalty card service based in Cairo, Egypt. You can reach us at support@prklo.com. The shop whose card you hold runs its own loyalty program and decides its rewards; prklo provides the technology and processes your information on the shop’s behalf and under this notice.
What we collect from customers
- Your mobile number, to sign you in with a one-time code and to make sure you have one card per shop. We never ask for a password.
- The name you choose for your card, so staff can greet you.
- Your card activity: stamps or points earned, rewards redeemed and corrections, with the branch and time of each visit.
- Wallet passes: if you add your card to Apple Wallet or Google Wallet, an identifier for that pass so it can be kept up to date. An Apple pass holds only your name, member code and card QR; it never contains your phone number.
- Technical basics: the kind of browser you use, a session cookie that keeps you signed in, a cookie for your language, and a short-lived record of your network address used only to stop abuse of the sign-in codes.
Why we use it
- To run your card: sign you in, count your visits, unlock rewards and show your history.
- To let the shop serve you: staff see your name, member code, the last three digits of your number, your balance and your visits. They never see your full number.
- To keep the service safe: limits on sign-in codes, detection of repeated or suspicious stamps, and an audit trail of staff actions.
- To keep your wallet pass current after each visit.
We do not sell your information, we do not use it for advertising, and we do not send you marketing messages. A shop may contact you only through the ways you agreed with that shop.
Who else handles it
We use a small number of service providers to run prklo, each under a contract that limits them to our instructions:
- Supabase hosts our database in Frankfurt, Germany.
- Vercel serves the website and apps.
- Twilio delivers the sign-in codes by SMS.
- Resend delivers emails to shop staff and owners.
- Apple and Google receive what is needed to show and update a pass when you choose to add your card to their wallet, under their own privacy terms.
Beyond these and the shop whose card you hold, we share information only if the law requires it.
How long we keep it
We keep your card and its history for as long as you are a member of that shop’s program. If you ask us to delete your card, or the shop closes its program, we delete your card within 30 days. Records that the shop needs for its own accounting, such as totals of redeemed rewards, are kept without your personal details.
Your rights
You can see your card and history at any time in the card page. You can change your name there. To get a copy of your information, correct it, or delete your card and number, write to support@prklo.com from any channel that lets us confirm it is you, and we will answer within 30 days. These rights follow Egypt’s Personal Data Protection Law (Law 151 of 2020).
Security
Your information travels encrypted and is stored in a database that only the shop’s own staff accounts and our systems can reach, each limited to its own shop. Customers have no password to lose: a code sent to your phone signs you in, and you can refresh your card’s QR at any time from its settings if you think it was copied.
Children
prklo cards are meant for people aged 16 or older. If you believe a younger child has joined a program, tell us and we will remove the card.
Shop owners and staff
If you run or work at a shop that uses prklo, we keep your name, email address, role and the actions you take at the counter or in the dashboard, so the shop has a record of who did what. Counter devices are paired to a branch and identified by a name the owner gives them.
Changes
If this notice changes in a way that matters, we will show the new version here with a new date, and shops will be told in advance.