Privacy and guest terms

Version 2026-11-08

Summary: one minute

• Eyab calls its guests to the counter when their order is ready, and keeps their loyalty card in the phone's Wallet. It takes no food orders and no payments.
• It collects the least it can: your first name, how you sign in, your visits and stamps. No national id, no car plate, no stored position.
• A venue sees your first name, visits and its own card only. It sees your age, birthday, full email or full phone only if you agree.
• Your location is used for one request and never stored. No ads, no trackers, and we never sell your data.
• You can download your data, delete it or withdraw consent in one tap from your card. Every request is answered within 6 working days.
• Rewards, memberships and bundles are the venue's promise, not Eyab's, and you pay the venue only.

Part 1: Privacy Policy

1. Who we are.

• Eyab is the controller of your account and wallet: how you sign in, your first name, all your cards, your consents and your rights requests.
• Each venue is the controller of its own customer relationship: its card, its visits and its customer list. Eyab runs that for the venue, on its written instructions, and never shows one venue the data of another. Eyab is your contact for every right below in both cases.
• You can use the service with no app: on the web page, in Apple Wallet or Google Wallet. The app is a recommended upgrade.

2. What we collect, and why.

• Your account: your sign-in identity (Apple, Google, or an email that sends you a code), your first name and your email. To let you in and restore your cards on a new phone.
• Your phone number: not needed for the pager. It joins your account only when you scan the cashier's QR yourself, in person, so points the cashier added by number reach you. That scan is your consent, and we log it.
• Your visits: venue, branch, time and kind (stamp, points, reward, undo). To run the card and to count the venue's guests each month.
• Your pager ticket: its number, status, times and your replies from a fixed list. To call you.
• What you choose to share (optional, one question at a time): birthday or age, gender and area. For a birthday reward and for anonymous charts that are never shown for a group under 10 guests.
• Consent records: venue, channel, yes or no, time and the text version. To prove your choice.
• Your device: your notification subscription, your Wallet pass id, a device name, last seen and a shortened IP address. For security and to keep your card up to date.
• Never collected: a national id, a car plate number, a payment card number, a precise or stored position, your photo, your contacts, an advertising id, or any third-party tracker.

3. Who sees your data.

• The venue sees your first name, your visits and its own card only.
• The cashier sees your first name and a masked number ("+20 10•• ••• 789"), nothing else.
• Birthday, age, gender, full email and full phone reach a venue only if the Super Admin of Eyab turned on customer details for that company and you agreed to share them with that venue. Every view and download is logged. If you withdraw, the details leave every later download at once.
• A venue never learns which other venues you use.
• Eyab's team sees your data masked. It sees details only under a recorded grant and a written reason; this is logged and shown in your account.

4. Who we share your data with.

• We do not sell your data and do not share it for advertising. There are no third-party trackers or SDKs.
• Data leaves only in a few ways: the database host (today in Frankfurt, Germany), the email service, crash reports with personal data removed, and Apple and Google if you choose to add the card to your Wallet (they receive the venue name, your first name and the stamp count). Later, a message-writing service and a payment gateway for businesses, each under a contract that binds it to protect your data. Your data does not go to a payment gateway.
• Storing data outside your country needs the licence of the authority in Egypt, and in KSA follows the transfer rules.
• No private detail goes into a notification, a log or an error message.

5. How long we keep it. These are defaults, set in the admin panel:

• Your account: while it lives, and deleted when you delete it.
• A pending card for a number whose owner has not signed up: 90 days, then the number and the points are deleted. Nothing is ever sent to that number.
• A pager ticket: 30 days, then made anonymous.
• A notification subscription: until you withdraw it, or 180 days without use.
• Sessions and devices: 90 days. The log of a card's messages: 365 days. Crash reports: 30 days.
• The marketing consent record: 3 years from the last message (Egyptian law).
• The audit log: 7 years; when you delete your account your id in it becomes an anonymous code.
• Your visit rows are not erased when you delete: they stay anonymous so the venue's totals add up.
• Backups expire on their own schedule, and rows are deleted again on a restore.

6. Your rights, and how to use them. From your card or account, free of charge:

• To know and get a copy: "Download my data": one link that works once and expires in 24 hours.
• To correct: edit your name, email and optional details. A stamp or points correction goes through the venue as a new row with a reason.
• To delete: "Delete my account": your personal data is removed and the visit rows become anonymous.
• To withdraw consent and object: two switches per venue ("Offers from…" and "Share my details with…") and one for location; they take effect on the next request. To object to a result such as an "At risk" status, write to the data protection officer.
• To be told of a breach that touches your data, by email and a notice in your account, never by text message or chat app.
• To complain: in Egypt to the Personal Data Protection Center; in KSA to SDAIA.
• Any request that is not instant is answered within 6 working days, the shorter of the two countries' limits. A guest who never signed in is helped in person at the venue.

7. Location. We ask only with your permission, after your first stamp, one venue at a time. Your position is used for one nearest-venues query after it is rounded, and is never stored, logged or sent. We keep only whether you agreed, and when. Maps show only approved venues that are active.

8. Notifications.

• Service notices (Ready, a reminder after 5 minutes, a venue paused, a stamp earned, a reward ready) reach you only on the channels you allowed: the open ticket page, the Wallet card, browser push, the app or the watch. They are not marketing and carry no offer.
• A venue's offers reach you only if you turned on "Offers from…" for that venue; "Stop" ends them at once. They wait during quiet hours (22:00 to 08:00, branch time) and Ramadan hours, and go at the next open time.
• There are no text messages and no chat-app messages, ever.

9. Children. The pager works with no account and no personal data, at any age. The card needs an account, and you tick one line: "I am 18 or older, or my parent or guardian agrees." We cannot check age and do not claim to. If a guest turns out to be under 18, the venue sees only their first name and visits, no marketing reaches them, and they are left out of area statistics. A parent or guardian can ask for the account and its data to be deleted by writing to the data protection officer.

10. For venue staff. We keep your name, email, role, PIN (as a hash, never plain text) and your paired cashier devices, to secure the console. Your actions are written to a log that cannot be edited, and your company's owner sees its log. A cashier sees a guest's first name and masked number only. Your data is used for nothing but running and securing the console.

11. A breach. We tell the venue concerned without undue delay, the authority within 72 hours of knowing, and you within 3 working days after the authority is told. The notice says what happened, which kinds of data, and what to do. It carries no private detail.

12. Contact and changes. In your account, under "Help", you find how to write to the data protection officer. Before a material change to this policy we tell you in your account, and we keep the version of each text you agreed to.

Part 2: Guest terms

1. What the service is. Eyab calls a guest to the counter when the order is ready, and keeps venues' loyalty cards in one wallet. It is free for the guest. Eyab takes no food orders and no food payments, and has nothing to do with delivery: you pay the venue at its own till. A guest page wears the venue's design and shows "Runs on Eyab".

2. Your account. You sign in with Apple, Google or a code sent to your email, and confirm you are 18 or older, or that your parent or guardian agrees. Give true details; one account each. Never share the 4-digit code that redeems a reward. The pager needs no account.

3. The pager. We do our best to send the call at once, but it passes through your phone, your browser and Apple's and Google's services, so it can be late or fail. Stay near the counter and watch the screen or the venue's board. Eyab is not responsible for a late or incomplete order: that is between you and the venue.

4. The card and the stamps.

• Stamps, points and rewards are added by the venue at its counter. Their rules, thresholds and prizes are the venue's promise, not Eyab's.
• Your card shows every stamp. A wrong tap can be undone in the first 2 minutes; after that it is corrected by a new row with a reason, through the venue.
• Stamps are not paid out in cash and are not moved to another guest.
• A reward is earned by what you do, never by a draw or by luck. There are no random prizes.
• A venue asks every guest for a review in the same way, and no one is rewarded for a review.

5. Rewards and when they end.

• The venue sets when a reward ends. The date shows on the card, and you get a message before it ends.
• Time does not run on a reward while a venue's service is locked: expiry clocks pause and the days are added back when service returns. Your stamps stay as they are.
• Network points (if you join the network of venues) are earned at one venue and spent at another. They have no cash value, cannot be sold or moved, and end after 12 months without activity. A venue never learns which other venues you use.

6. Memberships and bundles. If a venue offers a membership or a bundle (a number of items over a period), it is the venue selling its own goods in advance. You pay the venue at its till. Eyab sees no amount, and records only what you used and what is left. Cancelling, refunds and expiry are between you and the venue, under the terms shown to you before you pay. If a venue closes, it must honour what it sold you. This feature is not available yet.

7. How you use it. Do not scan a code that is not yours, try to repeat a stamp or reward, disturb the service, or try to enter another person's account. We may suspend an account that abuses the service, and you may ask us to review that decision.

8. Leaving. You can delete your account at any time from your account. Your personal data is removed and your visit rows become anonymous (see Part 1, sections 5 and 6). The card in your phone's Wallet is removed by you, on your phone; Eyab cannot remove it, and removing it loses nothing while your account lives. If a venue leaves Eyab, your card says "Ask the venue about your membership", and the venue must honour what it sold.

9. Our responsibility. The service is provided as it is, with reasonable care. Eyab does not guarantee a venue's food, quality, prices or promises.

10. Changes, language, law. If these terms change materially we tell you in your account before the change applies. The Arabic text governs if the two differ. The law is Egyptian for Egyptian guests and Saudi for Saudi guests, with the courts of the guest's country.