D+1. Who we are
D+ is a digital loyalty platform that replaces paper stamp cards with digital cards. It consists of the D+ Android app and this website. In this policy, “D+”, “we” and “our” refer to the team that operates the service.
2. Data we collect
Account data
- First name, last name and email address.
- Your password, stored only as a hash: nobody, not even us, can read it.
- If you sign in with Google: your Google account identifier and profile photo. We never receive your Google password.
Loyalty program data
- Your cards: which promotions you take part in, how many stamps you have and when you completed a card.
- Each code you scan: date, time and, if you granted location permission, your approximate location at the time of the scan.
Business data (only if you apply as a business)
- Business name, category, description, address, map location, phone, WhatsApp, social media and opening hours.
- The promotions you create and the images you upload (for example, your card background).
- Contact details you give us to arrange the Premium plan. Payment does not happen in the app and we never store credit or debit card data.
Device data
- If you allow notifications, a push notification identifier (Firebase Cloud Messaging token) and your device platform.
- The IP address you connect from, which our server logs for technical operation and protection of the service.
D+ does not access your contacts, photos, files, microphone or call log, and does not use your location in the background. See App permissions for details on each permission.
3. How we use it
- To create and maintain your account and sign you in.
- To record your stamps, show your cards and let you redeem rewards.
- To show nearby businesses on the map.
- To prevent fraud: each code works only once and is logged with date, time and approximate location.
- To send you notifications (for example, when you're one stamp away from a reward) and service emails such as password recovery or the answer to your business application.
- To show each business statistics about its loyalty program, and to give our team overall usage statistics.
We do not use your data for third-party advertising and we do not sell your personal data.
4. What businesses see
When you receive a stamp or redeem a reward, the business that gave it to you sees your name, part of your email (for example “cli…@gmail.com”), the date and time and your progress in its promotion. A business cannot see your cards from other businesses.
5. Who we share it with
Only with the providers we need to run D+:
| Provider | Purpose |
|---|---|
| Our server hosting provider | Storing the database and running the service. |
| Google (Firebase Cloud Messaging) | Delivering push notifications. |
| Google (Sign in with Google) | Verifying your identity if you choose to sign in with Google. |
| OpenStreetMap | Displaying the map. Your device downloads map images directly from their servers. |
We may also disclose information when required by a competent authority under the law.
6. Security
All communication between the app and our server is encrypted (HTTPS). Passwords are hashed, sessions use expiring tokens and stamp codes expire within minutes. No system is 100% foolproof, but we apply reasonable measures to protect your information.
7. Retention
We keep your data while your account is active. When you delete your account, we immediately delete your account, your cards, your sessions and notification identifiers and, if you have a business, the business, its promotions and images. Logs of codes you used remain only as business statistics, without any data that identifies you. Deleted data may remain for a limited time in server backups until they are rotated; we do not use it for any other purpose.
8. Your rights
- Access and correction: you can see your data in the app and ask us to correct it.
- Deletion: in the app under My profile → Delete my account, or by following these steps if you no longer have the app.
- Withdrawing permissions: you can turn off location, camera or notifications at any time in Android settings.
9. Children
D+ is not directed at children under 13 and we do not knowingly collect data from children under that age. If you believe a child has given us their data, contact us and we will delete it.
10. Changes to this policy
If we change this policy, we will publish the new version on this page with its update date. If the change is significant, we will also notify you in the app.
11. Contact
For any privacy question, write to soporte@bardcrack.com.