Privacy Policy

Last updated: 30 September 2026

This policy explains how Magnet ("we", "us") collects, uses, stores, and protects personal data when you use the Magnet website, owner app, or customer loyalty apps. If you have any questions, email us at info@magnetapp.co.uk.

1. What data we collect

We collect only the data we need to run the service:

• Account data: When you sign up, Supabase Auth stores your email address and a password hash. You may also provide optional profile information such as your full name, phone number, and date of birth in your user metadata.
• Business data: Business owners provide a business name, branding, reward scheme details, and staff/branch information so we can build and publish your branded loyalty app.
• Customer and loyalty activity: We process visit/stamp records, reward redemptions, and campaign activity so the loyalty program can operate and automate re-engagement messages.
• Push tokens: If you enable push notifications, we store an Expo push token in our user_push_tokens table, linked to your user ID and the business you belong to, so we can send notifications to the correct device.
• Demo enquiries: When you book a demo on this website, the form data (name, email, phone, business name, and message) is sent via Web3Forms to info@magnetapp.co.uk.
• Website analytics: We use Cloudflare Web Analytics to understand traffic to this site. It does not use cookies and does not require a consent banner.

2. How we use your data

We use data to:

• Create and authenticate your account.
• Build, publish, and operate your branded customer and owner apps.
• Run your loyalty scheme and deliver automatic or manual re-engagement messages.
• Send push notifications to customers and owners who have opted in.
• Respond to demo enquiries and provide support.
• Improve and secure the service.

3. Legal basis

We process data on the basis of contract (to provide the service you signed up for), consent (where you explicitly opt in, for example to push notifications), and legitimate interest (to keep the service secure and to respond to enquiries). You can withdraw consent or request deletion at any time by emailing info@magnetapp.co.uk.

4. Who we share data with

We do not sell personal data. We use the following processors to run the service:

• Supabase — hosting and database for account, business, loyalty, and token data.
• EAS / Expo — app builds and push notification delivery.
• Cloudflare — hosting for this website and Cloudflare Web Analytics.
• Web3Forms — temporary handling of demo form submissions on their way to our inbox.
• Stripe — payment processing for subscription billing elsewhere in the platform. This website does not take payments directly.

5. International data transfers

Most of your data is stored and processed within the UK and European Economic Area (EEA) — our database is hosted in Ireland. Some of the service providers we use to run Magnet are based outside the UK/EEA, primarily in the United States:

• Expo processes push notification delivery and app builds in the US.
• Cloudflare processes website analytics and hosting requests through its global network, which may include the US.
• Stripe, where used for payment processing, operates primarily in the US.

Where your data is transferred outside the UK or EEA, it is protected by UK adequacy regulations or standard contractual clauses, which require these providers to protect your data to UK standards.

6. Data retention and deletion

We keep data for as long as your account is active or as needed to provide the service. If you close your account or ask us to delete your data, we will delete or anonymise it within a reasonable period, except where we need to keep it for legal, security, or billing reasons. To request deletion, email info@magnetapp.co.uk.

7. Children

Magnet is not directed at children under 13, and we do not knowingly collect personal data from children under 13 or under 16 without appropriate consent.

8. Your rights

You have the right to access, correct, restrict, or delete your personal data, and to object to or complain about our processing. To exercise these rights, contact us at info@magnetapp.co.uk. You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

9. Changes to this policy

We may update this policy as the service changes. The "Last updated" date at the top of this page shows when it was last revised.

10. Contact

Magnet
Email: info@magnetapp.co.uk