perkked
Privacy policy · Last updated 12 November 2026

Your card. Your details.

Perkked is a digital stamp card for independent shops. This page says what we keep about you, why, for how long, and how to have it deleted. It covers the Perkked app, app.perkked.com and perkked.com.

In short

  1. Joining shares nothing.A shop sees a card number and a balance, like a paper card. Not your name, not your email.
  2. You choose, one detail at a time.If a shop asks for your first name or birthday, you decide, and you can take it back whenever you like.
  3. No ads, no tracking.No analytics, no advertising networks, no selling of data. Ever.
  4. Leave in two taps.Delete your account and your cards, stamps and shared details are erased.

01Who we are

Perkked is run by Vekyra Technologies, a company whose registration is in progress (“Perkked”, “we”). We are the controller of the personal data described on this page, except where it says a shop is.

For anything about your data, write to contact@perkked.com.

02What we keep, and why

We keep only what the service needs to work. Each line below says what it is for, the legal basis under the GDPR, and how long we keep it.

WhatWhyHow long
Sign-in email and passwordHeld only by our sign-in service, auth.perkked.com. The password is stored as a one-way hash. The app's own database never stores your sign-in email. To create your account, sign you in and send verification and password reset emails. Contract. Until you delete your account. See section 07.
Your user IDA random identifier that ties your cards to your account. To run your account. Contract. Until you delete your account.
Your cardsWhich shops' cards you hold, each card's number and balance, and each stamp, reward and correction with its time, shop location and counter device. To keep your stamps and rewards, and to settle a disagreement about them. Contract. Until you delete your account.
Your counter codeA secret on your phone that makes the code you show at the counter. It changes over time. So a shop can stamp your card without knowing who you are. Contract. Until you delete your account. Stored encrypted.
Details you choose to shareFirst name, last name, contact email, phone number, birthday, and whether a shop may contact you. Only what a shop asked for and you accepted. To give a shop the details you agreed to give it. Your consent, which you can withdraw at any time, per detail. Until you withdraw it or delete your account. Encrypted with a key that is yours alone.
Business and team dataFor shop owners and their staff: the business's name, business number and language; each location's address, phone and opening hours; card settings; team roles and invitations (invited addresses are stored encrypted); counter devices; and a record of who did what (stamps, corrections, settings). To run the business's cards and team. Contract. The record of actions keeps the cards honest and settles disputes. Legitimate interest. Until the business is closed and erased.
Technical logsIP address, time and the address requested, written by our servers. To keep the service secure and fix faults. Legitimate interest. Only as long as needed for that, then deleted on a rolling basis.

03What shops can see

When you join a shop's card, the shop sees a card number and a balance. Nothing else. Staff at the counter see the same.

A shop can ask for specific details, giving a reason for each. You accept or refuse each one separately, and you can withdraw any of them later in the app; withdrawal takes effect at once and your stamps stay. Permission to contact you is a separate choice, off by default.

Once you share a detail, the shop is responsible for how it uses it, and may use it only for the reason it gave. The shop sees it in Perkked and cannot export it from Perkked. If a shop copied a detail by hand, withdrawing it in Perkked does not reach that copy: ask the shop directly.

04What we never do

  • We do not sell, rent or trade personal data.
  • We do not show ads, and we use no analytics or tracking tools, in the app or on our websites.
  • We do not build profiles of you or of your habits.
  • We do not use cookies. Our websites load nothing from other companies; even the fonts are our own copy.

05Where your data lives

All of it is stored in the European Union, on servers we run. Two companies help us, under data processing terms, and only on our instructions:

  • Scaleway SAS (France) provides the servers, stores our encrypted backups and sends our emails (verification, password reset, team invitations).
  • OVH SAS (France) hosts our domain names and our mailbox, contact@perkked.com.

We do not transfer personal data outside the European Economic Area. Apple's App Store and Google Play deliver the app under their own privacy policies.

Data is encrypted in transit. Shared details and counter-code secrets are also encrypted at rest, each person's with their own key.

06How long we keep it

As long as your account exists, and no longer, except where this page says otherwise. Backups are kept for a limited time and then overwritten. When your account is deleted we destroy your personal encryption key, so the details you shared can no longer be read anywhere, backups included.

07Deleting your account

You can delete your account in the app (Account screen) or at app.perkked.com, or by writing to contact@perkked.com from your sign-in address.

If you collect stamps

Your cards, stamps and shared details are erased at once, and shops keep nothing about you. A shop's totals for past days may go down as a result. Your sign-in account is removed; for up to 30 days our sign-in service keeps a stripped record of it (your user ID and its dates, without your email address), and your address can be used again straight away.

If you own a business on Perkked

The business gets 90 days' notice: it is frozen, its customers can still redeem their rewards, and it is then closed and erased. Records of who did what in it no longer name you.

08Your rights

Under the GDPR you can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, give it to you in a portable format, or stop using it where we rely on legitimate interest. You can withdraw consent at any time; that does not affect what was done before.

Write to contact@perkked.com. We answer within one month, and we may ask you to confirm the request from your sign-in address. For details a shop holds, we will tell you which shop to ask.

You can also complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu, or to the authority where you live.

09Children

You must be 16 or older to create an account on your own. Under 16, a parent or guardian must agree. If you believe a child has an account without that agreement, write to us and we will delete it.

10On your phone and in your browser

  • Camera: the app uses it only to read a shop's code. Images are not stored or sent.
  • Phone storage: the app keeps your sign-in session in the phone's secure storage.
  • Browser storage: app.perkked.com keeps your sign-in session, your language and the card you last opened in the browser's local storage; perkked.com keeps only your language. Signing out clears the session.

11Changes to this policy

If we change this policy in a way that matters, we will tell you in the app or by email before the change applies. The date at the top shows the current version.

12Contact

contact@perkked.comQuestions, requests and complaints about your data.