Loyra

Privacy Policy

Last updated: ⁨July 21, 2026⁩

Loyra is a wallet-first loyalty service for restaurants, cafés and any venue with a counter. You tap a venue’s QR code to add a stamp card to Apple or Google Wallet, and staff add a stamp when you visit. To collect stamps you don’t create an account, and you don’t give us your name, email, or password. Some venue features — joining a walk-in queue or booking a table — do ask for a name and contact number so the venue can reach you; those are covered in “Walk-in queue & reservations” below. This policy explains the data we handle.

Who we are

This service is operated by VAIA SDN. BHD. (Company No. ⁨202601027449 / 1689545-A⁩), which is the data controller responsible for your personal data. Contact our data-protection team at ⁨tech@vaia.my⁩.

What we collect

• An anonymous loyalty card. When you add a stamp card, we create a random card that stores your stamp count. It is not linked to your identity. Some venues let you attach a phone number to recover your card — that is optional and only used to find your card.
• A wallet update token (only if you opt in). To keep your wallet pass up to date and, if you allow it, remind you, your device/browser gives us an anonymous token. You can turn this off any time in your device settings.
• Basic technical data. Standard request information (e.g. an approximate region and device type) needed to run the service securely and prevent abuse.

Walk-in queue & reservations

Some venues use Loyra for more than loyalty. If you join a walk-in queue or make a reservation, the venue asks you for a name and a contact number — and sometimes a party size or a short note — so they can call you when your table is ready and hold your booking. Unlike the anonymous stamp card, this information is provided by you and identifies you to that venue.

• It is used only to manage your place in line or your booking with that venue.
• It is visible to that venue’s staff, and to no other venue.
• You can ask the venue — or us at ⁨tech@vaia.my⁩ — to remove it.

The camera

The app uses your camera only to read a venue’s QR code, on your device, in the moment you scan. We do not take photos, we do not record video, and no camera image ever leaves your phone or is stored.

What we do NOT do

• We do not sell your data. Ever.
• We do not require an account, name, email, or password to collect stamps.
• We do not track you across other apps or websites for advertising.
• We do not access your contacts, photos, or precise location without asking.

How your data is used

Only to run the service you asked for: keep your loyalty stamps, keep your wallet pass up to date, and keep the platform secure. Your card is shared only with the specific venue whose card you added.

Where your data is processed

Our servers are hosted in the European Union (Frankfurt, Germany). To provide the service your data is transferred to and processed there; we rely on your consent and apply appropriate safeguards. If you are in Saudi Arabia or Malaysia and do not want your data processed abroad, please do not submit it.

Cookies

We use only essential cookies — the functional cookies needed to run the service (for example, remembering your language) and basic error monitoring to keep it reliable. We do not use advertising or cross-site tracking cookies.

Retention

Wallet update tokens are cleared after a short period of inactivity. Loyalty cards persist so your stamps aren’t lost between visits, until you or the venue removes them.

Your choices

• Turn notifications on or off in your device settings at any time.
• Delete the app / clear the web page to remove locally stored card data.
• Contact us to request removal of a loyalty card.

Children

Loyra is a general-audience service and is not directed at children under 13.

Contact

Questions about privacy? Email ⁨tech@vaia.my⁩.