Privacy Policy

Last updated: 27 October 2026

Pointy is a cashback points platform that connects customers with participating shops in Egypt. This page explains what data we collect, why, who sees it, and how you control it. We handle personal data in accordance with the Egyptian Personal Data Protection Law No. 151 of 2020.

Data we collect

• Mobile number: this is your account. We use it so cashiers can add points for you, and to send activation and redemption codes.
• Account details: your name, your password (encrypted), and optionally your email, date of birth and photo, plus your Google or Facebook account if you link one.
• Your transactions: the points you earned and spent, the shop, branch and date, and the invoice amount the cashier entered.
• Product requests and chats: the description and photo you send, and your messages with shops. Request photos are stored privately and are never published.
• Ratings: the rating and comment you write about a shop.
• Location: if you use "Nearest", we use your location at that moment only, to sort shops by distance, and we do not store it.
• Device: the notification token, device type and app version, so we can send you notifications.

How we use it

• To run your account: adding and redeeming points, and showing your balance and the history of each batch.
• To send codes and notifications by WhatsApp, SMS or in the app.
• Offers: if "Receive offers" is turned on, shops may send you offers on WhatsApp and in the app. You can turn this off any time from your account.
• To prevent fraud and to reconcile accounts between the platform and shops.

Who sees your data

• The shop you deal with: your name and your transactions with that shop only, and your number partially masked. On product requests, it sees only your first name, without your number.
• Shop campaigns: the shop chooses the filters and sees only the number of customers, never their phone numbers. We send the messages ourselves.
• Service providers: Meta (WhatsApp) and our SMS provider to deliver messages, and the hosting provider that runs our server.
• We do not sell your data to anyone.

How long we keep it

For as long as your account exists. The transaction record (points, amounts, shop, date and mobile number) is kept even after your account is deleted, because it is an accounting record for shops and cannot be edited or deleted.

Your rights

• Edit your details from your account in the app.
• Turn off offers and WhatsApp messages from your account.
• Delete your account from the app: My Profile → Delete account. Details are on the account deletion page.
• Request a copy of your data or ask any question at support@point-y.com.

Children

Pointy is not directed at children under 13, and we do not knowingly collect their data.

Security

Connections are encrypted (HTTPS), passwords are encrypted, and private photos are only shown through temporary links.

Changes

If we change this policy, we will update the date above, and if the change is significant we will let you know in the app.