Privacy Policy
1. Who we are, and who is responsible for your data
Tsaami is a loyalty-card service operated by Tsaami LLC, Commercial Registration No. 1677897, Sultanate of Oman. Website: tsaami.com.
Privacy contact. Tsaami LLC — Privacy, info@tsaami.com, WhatsApp +968 7727 2705.
This policy follows Oman's Personal Data Protection Law (Royal Decree 6/2022, the "PDPL") and its Executive Regulation (Ministerial Decision 34/2024 of the Ministry of Transport, Communications and Information Technology).
Two kinds of people use Tsaami, and the responsibility is different for each:
| You are | Who decides how your data is used (the "controller") | Tsaami's role |
|---|---|---|
| A customer of a shop (a "member") who joined the shop's loyalty card | The shop you joined, for your membership at that shop | Tsaami processes the data for the shop, under a Data Processing Agreement |
| The same customer, for the shared record described below | Tsaami | Controller |
| A shop: the owner, the team and the counter staff who sign in | Tsaami | Controller |
One record per mobile number. Tsaami keeps one core record for each mobile number: the number, and the name, e-mail address and date of birth first given with it. Each shop you join has its own card, balance, history and notes for you. A shop can never see which other shops you have joined, or your cards, balances or history there. But if you join a second shop with the same mobile number, that shop may see the core details (your name, and your e-mail address) you gave earlier. A shop can fill in a detail that is blank, but cannot overwrite one that is already set.
Part A — if you are a customer of a shop
2. What is collected about you
| What | Where it comes from |
|---|---|
| Mobile number (always) | You, when you join on the shop's join page or at the counter |
| Name; e-mail address (optional); date of birth (only if the shop asks for it) | You, when you join |
| Your card and its history: stamps, points or cashback balance, rewards earned and used, the date and branch of each visit, and the bill amount where the shop enters it | Created when the shop's staff scan your card |
| Tier, milestones, gifts and offers you were given; your referral code and who invited whom; ratings and comments you leave | Created by using the card |
| The shop's own notes about you: notes, tags, groups such as "regular" or "not seen lately" worked out from your visits, its own reference number for you, and whether it has blocked your card and why | The shop |
| Your consent record: when and how you agreed, the version of the words you agreed to, and the network (IP) address used | Recorded when you join |
| Wallet card details: the card's serial reference and the token Apple or Google issues so the card on your phone can be updated | Your phone's wallet, when you add the card |
| A record of who looked at your data at the shop, and of privacy requests you make | Created by the system |
| A one-time code sent to your number, where a shop uses phone checks | Created by the system; short-lived |
We do not collect your payment card details, your precise location or your contacts. An iPhone may show your card on the lock screen when you are near a branch; that is done on your phone by Apple Wallet, and Tsaami is not told where you are. Shops are not allowed to record sensitive data about you (for example health or religion).
3. Why it is used
- To create your loyalty card and keep your balance and rewards correct.
- To put the card in Apple Wallet or Google Wallet and keep it up to date.
- To let the shop see its members, their activity and reports about its programme.
- To let the shop send you messages about your card (for example "you earned a stamp" or "your reward is ready").
- To let the shop send you offers, only if you agreed to receive them. Agreeing to offers is a separate, optional choice, never a condition of joining, and you can stop at any time (section 9). Offers are not sent at night (they are sent only between 08:00 and 21:00, Oman time).
- To prevent abuse (for example repeated joins or fake stamps) and keep the service secure.
- To answer your privacy requests and keep the records the law requires.
Tsaami does not sell your data and does not use it for its own advertising.
Automatic grouping. A shop may group its members automatically by how often and how recently they visit, and may set a rule that gives an offer to members who have not visited for some time. No decision with a legal effect on you is made automatically.
4. The legal basis
The shop collects and uses your data on the basis of your explicit consent, given when you join (PDPL, Article 10; Executive Regulation, Article 4). You can withdraw it at any time (section 9). Receiving offers needs your separate agreement, which you give by ticking the offers box yourself; it is never ticked for you (PDPL, Article 22). Some records are kept because the law requires it.
5. Messages you may receive
- On your wallet card: updates when your balance changes, and messages the shop sends to its card holders. You can switch notifications off for a card in your phone's wallet, or remove the card.
- By e-mail, if you gave an e-mail address and a notice about your card is sent that way.
- By WhatsApp, only where a shop has this enabled and only from the shop's own number — never from Tsaami's number.
Tsaami itself never sends you marketing, and never messages a shop's customers in its own name.
To stop offers from a shop, use the "Stop offers" control in your wallet card at any time, or tell the shop; it stops at once and free of charge (Executive Regulation, Article 22).
Part B — if you are a shop (owner, team member or counter staff)
6. What is collected and why
| What | Why |
|---|---|
| Business details: shop name, logo, branches and addresses, contact e-mail and phone, the owner's name | To set up and run your account and show your shop on cards and join pages |
| Sign-in details of each person: e-mail address, a protected (hashed) password, two-step sign-in settings, passkeys, counter PINs (hashed), role and permissions | To let the right people sign in, and nobody else |
| Security records: sign-in times, network (IP) address, browser or device, active sessions, and an activity log of changes made in your account | To protect your account and investigate problems |
| Billing: plan, invoices, credit notes, payment status and Thawani's payment reference | To charge the subscription and keep the accounts the law requires |
| Messages you send us and support sessions opened on your account | To help you |
We do not receive or store your payment card number, expiry date or security code: those are entered on Thawani's page (see the Payment and Security page).
The legal basis is the contract with your business (the Terms of Service), our legal duties (for example tax records) and keeping the service secure. Tsaami may send you service messages (invoices, reminders, security alerts). We send you marketing only if you agreed, and you can stop it at any time.
Part C — for everyone
7. Who your data is shared with
The shop you joined, and the people it gives access to.
Service providers that work for Tsaami ("sub-processors"):
| Provider | What it does for Tsaami | Data involved | When |
|---|---|---|---|
| Railway (United States) | Hosts the application and the database | All data in the service | Always |
| Cloudflare (R2 storage) | Holds encrypted backups | An encrypted copy of the database | Always |
| Google (Google Drive) | Holds an encrypted backup copy | An encrypted copy of the database | Always |
| GitHub | Runs the scheduled backup job | The database copy while it is encrypted and uploaded | Always |
| Apple | Apple Wallet: delivers and updates cards on iPhones | What is shown on your card, and the card's update token | If you add the card to Apple Wallet |
| Google (Google Wallet) | Delivers and updates cards on Android phones | What is shown on your card | If you add the card to Google Wallet |
| Resend | Sends e-mail (for example password resets, invitations and card notices) | E-mail address and the message | For people who sign in to a shop, and for members who gave an e-mail address when a shop's message goes by e-mail |
| Thawani | Takes a shop's subscription payment by card | The shop's name, the amount and a payment reference; card details are entered directly on Thawani's page, never through Tsaami | When a shop pays online by card |
These providers are bound by their own data-protection terms. Where a shop connects its own WhatsApp number, WhatsApp (Meta) carries those messages; this is switched off until it is ready. The card-design helper that would use a third party receives only what a shop types about its own business and never any customer data; it is switched off unless a shop's own key is set.
Authorities, where Omani law or a court order requires it. If Tsaami's business is transferred, the data moves with it under the same protections, and you are told.
8. Where your data is kept, and transfers outside Oman
Tsaami's servers are hosted by Railway in the United States, and the encrypted backups and some of the providers above are also outside the Sultanate of Oman. Your data is therefore processed outside Oman. Tsaami uses providers that are bound by their own data-protection obligations, and the backups that leave the main service are encrypted. Personal data is transferred outside Oman only as the PDPL allows (Article 23; Executive Regulation, Articles 37 to 39).
9. Your rights and how to use them
Under the PDPL (Article 11) you can withdraw your consent; ask for your data to be corrected, updated or blocked; get a copy of your data in a readable form; have your data moved to another controller; ask for your data to be erased; and be told if your data is involved in a breach.
If you are a customer of a shop:
- Ask the shop. It records your request in its Privacy Centre in Tsaami, which shows the date by which it must be answered. The shop can download a copy of your data for you, correct it, stop offers, or remove you from its programme.
- Or write to Tsaami at the privacy contact above, in particular if you want your shared record erased for every shop at once.
- Every shop's join page carries a "Your data" link that shows this contact.
If you are a shop user, write to the privacy contact, or use the "Your data" page in the dashboard to download the shop's data.
A request is free of charge. We may need to check that the request really comes from you (for example by your mobile number). You will get an answer within 30 days. A request may be refused, with reasons, where the law allows (Executive Regulation, Articles 17 and 18), for example where a record must be kept by law. You can complain to the Ministry of Transport, Communications and Information Technology (PDPL, Article 12; Executive Regulation, Article 41).
What erasure means.
- A shop removes you: that shop no longer sees your name, number or e-mail address, its notes about you are deleted, and your consent there is withdrawn. Other shops you joined are not affected.
- Tsaami erases your shared record: your name, number, e-mail address and date of birth are removed for every shop and cannot be recovered.
- In both cases the record of stamps and rewards stays, without your identity, so the shop's totals remain correct.
- After Tsaami erases your shared record we keep only a protected, one-way fingerprint of the number, which cannot be turned back into the number, so that an old customer list cannot bring you back without your knowledge.
10. How long data is kept
| Data | Kept for |
|---|---|
| A member's identity at a shop | Until the member or the shop removes it, or the member has not visited for the period the shop has set (24 months unless the shop chooses otherwise, between 6 and 120 months), after which the shop anonymises it |
| Stamp, point and reward history | Kept as part of the shop's records; without your identity after erasure |
| Consent records and the register of privacy requests | Kept as the shop's evidence and accounting records |
| Record of who viewed customer data | Up to 12 months |
| Invoices and other financial records of a shop's subscription | Kept as long as Oman's commercial record-keeping rules require |
| A shop's data after its subscription is cancelled | Available to download for 90 days, then deleted or anonymised |
| Backups | 35 days |
| One-time codes | Minutes |
A shop anonymises its own inactive members from its Privacy Centre; some periods above are applied by hand rather than on a timer.
11. Children
Tsaami is not directed at children. A shop must not enrol a child without the consent of the child's guardian (PDPL, Article 6; Executive Regulation, Article 11). A person who opens a shop's account must be 18 or over (Terms of Service, clause 1.4). For a shop's members, a lawyer has not yet confirmed the age at which the law stops treating a person as a child; until one does, a person under 18 is treated as a child, and the offers box is never shown for a date of birth under 18. If you believe a child was enrolled without a guardian's consent, tell the shop or us and the record will be removed.
12. Security
Data travels encrypted (HTTPS). Each shop's data is separated from every other shop's in the database and enforced by the database itself. Passwords and PINs are stored only in protected (hashed) form; owners must use two-step sign-in. Access to customer data is logged. Backups are encrypted. If a breach puts your rights at risk, the controller tells the Ministry and, where the risk to you is serious, tells you, within 72 hours of learning of it (PDPL, Article 19; Executive Regulation, Articles 30 and 32).
13. Cookies
The dashboard uses only the cookies needed to keep you signed in. The public pages remember your language choice on your device. We do not use advertising or tracking cookies.
14. Changes and contact
We may update this policy. A material change is announced on tsaami.com and to shop owners at least 30 days before it takes effect. This policy is written in Arabic and English; if they differ, the Arabic text applies.
Contact: Tsaami LLC, Sultanate of Oman. Privacy contact: info@tsaami.com, WhatsApp +968 7727 2705.