7stamp.com

Menu
Log In

Create Card

Privacy Policy

Last Updated: 04. 12. 2025

1.WHO WE ARE

PayForSay s.r.o. (“we”, “us”) operates the website https://7stamp.com, the 7Stamp mobile application, and the 7Stamp Scanner application. We are committed to protecting your personal data in accordance with the GDPR (EU) and CCPA (California).

Contact: Doležalova 3424/15C, 821 04 Bratislava – Ružinov, Slovakia. Email: info@7stamp.com.

2. DATA WE COLLECT

We collect the following types of information:

  • Identity Data: Email address, Name, Phone number, User ID (assigned via Google/Apple/Facebook login).
  • Technical Data: IP address, device model, operating system, crash logs (via Google Analytics).
  • Location Data (End Users): We collect precise GPS location only with your explicit consent. This is used solely to trigger “Geo-push” notifications when you are near a Merchant’s location.
  • Camera Data (Scanner App): The 7Stamp Scanner app requires access to your device’s camera solely to scan QR codes for stamp validation. We do not record, store, or transmit video or images from the camera to our servers. All processing is done locally on your device “on-the-fly”.

 

3. HOW WE USE YOUR DATA

Purpose

Legal Basis (GDPR)

Account Registration & Authentication

Performance of Contract (Art. 6(1)(b))

Sending Loyalty Notifications

Consent (Art. 6(1)(a))

Geo-Location Alerts

Explicit Consent (Art. 6(1)(a))

Service Improvement (Analytics)

Legitimate Interest (Art. 6(1)(f))

 

4. SHARING OF DATA

We share data with trusted third-party service providers (Sub-processors) to operate our Service:

  • Google Firebase (USA): For authentication, database hosting, and push notifications.
  • Google Analytics (USA): For aggregated usage statistics.
  • Merchants: If you join a Merchant’s loyalty program, they can see your accumulated stamps and basic profile info to validate rewards.

 

5.INTERNATIONAL TRANSFERS

We use services provided by Google LLC. Data may be transferred to and processed in the United States. Such transfers are safeguarded by the EU-US Data Privacy Framework (to which Google is certified) or Standard Contractual Clauses (SCCs), ensuring an adequate level of data protection.

 

6. YOUR RIGHTS

Under GDPR and CCPA, you have the right to:

  • Access and Rectify your data.
  • Delete your account and associated data.
  • Withdraw Consent: You can turn off Location Services or Camera permissions at any time in your device settings.
  • California Residents: We do not sell your personal information. You have the right to request details about the categories of information we collect.

 

7. DATA RETENTION

We retain your personal data only as long as your account is active or as needed to provide you with the Service. Upon account deletion request, data is removed within 30 days, except for data required for tax/legal compliance.

 

8. CHANGES TO THIS POLICY

We may update this policy from time to time. We will notify you of any material changes through the App or Website.