Fidelito
Privacy Policy
Last updated: October 20, 2026 · United States
Draft. This text still needs to be reviewed by a lawyer (including state privacy laws such as the CCPA/CPRA) before it's used with real customers.
This policy explains what personal information Fidelito (loyalty cards in Apple Wallet and Google Wallet) collects, how we use it and the choices you have.
1. Who we are
Fidelito, with its address at calle San Antonio número 26, colonia La Gloria, C.P. 29000, Tuxtla Gutiérrez, Chiapas, México. Contact for anything related to your data: hola@fidelito.com.mx.
2. Customers of businesses (people who save a card)
When you save a business's loyalty card, that business controls your information and Fidelito processes it on its behalf (as a service provider), only to provide the card.
- Information: your name, your WhatsApp number and birthday (month and day) if you provide them, and your card history (stamps, purchases, wallet balance, level, packages and the location where they were recorded).
- How it's used: to create and update your card, record your visits and rewards, notify your phone when you earn something or a package is about to expire, and send the business's automatic messages and up to 4 promotions a month.
To exercise your rights over this information, contact the business. You can also email us and we'll pass it along.
3. Business owners and their staff
Name, email and password (stored encrypted) of the owner and cashiers, store names and locations, card logos and images, scanner activity and the location of the phone running the scanner. We use it to provide and bill the service, give support, and confirm the scanner is used at the business's locations. Scanner location results are deleted after 90 days.
4. People who contact us through our website
Name, business name, WhatsApp number and message, to contact you about the service. If you don't sign up, we delete it after 12 months or sooner if you ask.
5. We don't sell your information
We do not sell or share personal information for cross-context behavioral advertising, and we don't use it for third-party advertising.
6. Service providers
We use providers that store or process data for us: Supabase (database), Cloudflare (website hosting and bot protection), Google and Apple (phone wallets and notifications), Resend (email) and Stripe (card payments).
7. Your choices and rights
You can delete your card from your phone's wallet at any time. Depending on your state (for example, California), you may have the right to know, access, correct or delete your personal information, and not to be discriminated against for exercising these rights. Email hola@fidelito.com.mx and we'll respond within 45 days.
8. Children
Fidelito isn't directed to children under 13, and we don't knowingly collect their information.
9. Security
Connections are encrypted (HTTPS), passwords are stored encrypted, and each business only sees its own customers.
10. Changes
If we change this policy, we'll post it here with its new date and, for important changes, email the businesses that use Fidelito.