Privacy policy

The short version

• We collect only what a stamp card needs: a shop’s account details, and the names, phone numbers and visits that shops enter for their customers.
• We do not sell personal information, show ads or share it with advertisers.
• A shop’s customers belong to that shop. Other shops can’t see them, and our own admin screens show counts and totals per shop, not customers’ names or phone numbers.
• Our website counts visits without cookies and without storing IP addresses.
• You can ask us to delete your information at any time by writing to devsidharr@gmail.com.

Information from shop owners

When a shop signs up and uses Regularhood, we keep:

• Shop name, WhatsApp number and password, and an email address if you give one. You log in with the number or the email. Passwords are stored only as a salted hash; nobody, including us, can read them.
• We use your WhatsApp number to log you in and to help you set up. We don’t share it.
• Your shop’s settings: the number of visits for a reward, the reward, bonuses and limits.
• Where you first came from (for example a search result, an Instagram post or another shop’s referral link), so we know which of our marketing works and can give referral rewards.
• A log of actions in your shop account (visits added, rewards given, customers deleted), shown to you in the activity log.

Information about a shop’s customers

Customers don’t sign up with us. A shop adds them at its counter, and the shop decides what to record. For each customer we keep:

• Name and mobile number.
• Visits and stamps, bill amounts the shop enters, rewards given, and the time of each.
• A private link to the customer’s card, so they can see their stamps without an app.

Who is responsible for customer information

The shop collects its customers’ information and decides how to use it; we store and process it on the shop’s behalf, only to run the stamp card for that shop. Shops must tell their customers that they use Regularhood and use the information only for their loyalty program.

If you are a customer and want your information corrected or deleted, ask the shop: it can edit or delete you from its customer list, which removes your visits too. If the shop can’t help, write to us and we will.

Website visitors

Our website counts page views so we can see what people read. It does not use cookies and does not store IP addresses. For each page view we keep the page, the site that sent you, the campaign in the link (if any), the country, language, device type, browser, how long the page was open and how far it was scrolled.

To tell new visits from returning ones, your browser keeps a random ID for one day and another for the open tab, in local storage. They are not linked to your name or to other websites, and page views are deleted after about 13 months.

Your browser also keeps, in local storage: your login (if you are a shop), your language choice and, for 60 days, where you first came from. You can clear these at any time in your browser settings.

What we use information for

• Running the stamp card: counting visits, telling the shop when a reward is due, showing customers their card.
• Keeping accounts secure: logins, limits on visits per day and on very large bills, and the activity log.
• Supporting shops: answering questions and helping with setup.
• Improving Regularhood and knowing which marketing brings shops in, using counts and totals.
• Meeting legal obligations, and preventing fraud and misuse.
• We never use customers’ information for advertising. We message a shop’s customers only when that shop turns on automatic WhatsApp messages (Founding Shop), and only about their card at that shop.

Who else handles information

We use a few service providers to run Regularhood. They handle information only to provide their service to us:

• Amazon Web Services: the server and database where accounts, customers and visits are stored, and backups.
• Vercel: delivers the website.
• Google Fonts: the website’s fonts are loaded from Google, which sees your IP address when it sends them.
• Google Gemini: writes some of our website’s articles. No shop or customer information is sent to it.
• Razorpay: takes payments for the Founding Shop plan (UPI, cards, net banking). It receives the shop’s name, phone number and email for the payment; we never see or store card or bank details.
• Google Maps and WhatsApp (Meta): we look up publicly listed businesses on Google Maps and may send them one WhatsApp message about Regularhood. A business that replies “Not now” or STOP is never messaged again.

WhatsApp messages from shops

When a shop sends a customer their card or a reminder on WhatsApp, Regularhood opens WhatsApp on the shop’s own phone with the message filled in, and the shop sends it. We don’t send these messages and don’t see the chat.

A Founding Shop can turn on automatic messages. Then Regularhood’s own WhatsApp Business number sends that shop’s customers their card after a visit, a note when their reward is ready, a reminder if they haven’t visited for a while, and a request to review the shop on Google after a reward. Each message names the shop, and the shop can switch each kind off. These messages are sent through WhatsApp (Meta), which receives the customer’s phone number and the message. A customer who replies STOP gets no more messages from Regularhood’s number.

We will share information only when

• The law requires it, for example a valid request from a court or government authority.
• It is needed to protect people, shops or Regularhood from fraud or harm.
• Regularhood is merged or sold, in which case this policy continues to apply to the information.

How long we keep it

• Shop accounts and their customer lists: for as long as the account is open.
• A customer deleted by a shop is removed from the customer list along with their visits.
• When a shop asks us to close its account, we delete the account and its customers within 30 days. Copies in backups are overwritten within a further 30 days.
• Website page views: about 13 months.

Security

Information travels over HTTPS. Passwords are stored only as salted hashes, keys for outside services are kept encrypted, reset links work once and expire, and only a small number of people can reach the servers. No system is perfectly secure; if something goes wrong that affects your information, we will tell you and the authorities as the law requires.

Your rights

Under India’s Digital Personal Data Protection Act, 2023 you can ask what information we have about you, ask us to correct or delete it, withdraw consent, and nominate someone to act for you. Write to devsidharr@gmail.com and tell us the email or phone number the information is about; we reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

Children

Shop accounts are for adults running a business. Shops should not add customers under 18 without a parent’s or guardian’s permission. If we learn that a child’s information was added without it, we will delete it.

Changes to this policy

If we change this policy, we update the date at the top of this page. If a change matters for how we use your information, we will tell shops in the app, on WhatsApp or by email before it applies.

Contact and grievances

For privacy questions, requests or complaints, write to devsidharr@gmail.com. We acknowledge grievances within 24 hours and resolve them within 15 days.