Privacy policy
Last updated: 1 November 2026
IkhlassDZ is a digital loyalty card for local businesses in Algeria. This policy explains what we collect when you use the IkhlassDZ app or website, why, who can see it, and how to have it deleted. It is written to comply with Law 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data.
Who we are
IkhlassDZ, Algiers, Algeria, is responsible for the processing of your data in the app and on the website. Contact for anything about your data: support@ikhlassdz.com.
Each business whose card you hold is responsible for how it uses the customer information it sees (below).
What we collect
- Your account: first and last name, email address, phone number, preferred language, and how you sign in (a password, which we store only as a hash, or your Google or Apple account identifier). With Sign in with Apple you may hide your email; we then receive Apple's relay address.
- Your loyalty activity: the businesses whose card you hold, your stamps or points, each visit recorded at the counter (date, branch, and for points programmes the purchase amount), rewards and gift cards, and invitations you send to friends.
- Your device: a notification token, the platform, app and system version and language, and whether a notification was delivered or opened.
- Crash reports from the app (Firebase Crashlytics), linked to an internal account number, never to your name.
- Messages you send us through the in-app help form, with any screenshot you attach.
- A profile picture, only if you choose one in the app. We crop it to a small square and remove the data a photo carries (such as where it was taken). Only you see it: not the businesses, not their counter devices.
We do not collect your location, your contacts, or advertising identifiers. We do not track you across other apps or websites, and we show no advertising.
Why we use it
- To run your cards: credit your visits, show your balance and rewards, and keep one balance across all branches of a business.
- To send you service notifications, such as a reward being ready or a gift card about to expire.
- To send you offers and news only if you agreed: once for IkhlassDZ, and separately for each business. Both are off until you turn them on, and you can turn them off at any time in the app (Account, or the card's page).
- To prevent fraud: unusual activity is flagged for the business to review. Nothing is blocked automatically.
- To answer your support requests and fix problems in the app.
Running your cards is the service you ask for when you create an account. Offers and news rest on your consent alone, which you can withdraw at any time without affecting anything else.
Who can see it
- Each business sees only its own customers: your name, your phone number and your activity at that business. It never sees your email address, nor your cards or activity at other businesses.
- A business's counter device shows only your first name and a short code, never your phone number.
- Service providers that process data on our behalf and for no other purpose: hosting and databases, email delivery, Google Firebase (notifications and crash reports), error monitoring (Sentry), and Google and Apple when you choose to sign in with them. Some of these providers are located outside Algeria; such transfers are made under the conditions set by Law 18-07.
- We never sell your data or share it for advertising.
How long we keep it
- Your account data is kept while your account is open.
- When you delete your account, your name, email, phone, profile picture, sign-in identifiers and your requests to support are erased at once, your cards are closed and your notification tokens are removed. The record of past visits stays in each business's books, anonymised, because it is their accounting.
- An account created with a password, never confirmed by email and never used at a counter, is closed automatically after 7 days.
- Encrypted backups are kept for 30 days and then deleted.
Your rights
You can access and correct your information in the app (Account), and delete your account yourself: Account → Security → Delete my account. If you signed in with Apple, deleting your account also revokes IkhlassDZ's access to your Apple ID. You may also ask for a copy of your data, object to a use of it, withdraw a consent, or ask any question by writing to support@ikhlassdz.com; we answer within 30 days. You can also contact the national authority for the protection of personal data (ANPDP).
Security
Data travels encrypted (HTTPS). Passwords are stored as hashes. Each business's data is isolated from every other business's at the database level. You can lock your cards in the app with your phone's biometrics or PIN.
Cookies
The website uses only the cookies needed to keep you signed in and remember your language. There are no advertising or tracking cookies.
Children
IkhlassDZ is not intended for children under 13. If you are under 18, use it with the permission of a parent or guardian.
Changes
If this policy changes in a way that matters, we will say so in the app before the change applies. The date at the top shows the current version.