Privacy Policy
What we collect, and what we do with it.
The short version
- We collect what a loyalty card needs to work: who you are, which cards you hold, and when they were stamped.
- A business sees your first name, last initial and your stamps at that business. It sees your email only if you choose to hear from it.
- We don't sell your data, and we don't hand one business's customer list to another.
- You can delete your account at any time. Here's how.
1. Who we are
The Usual is a digital loyalty service for local businesses. "We", "us" and "The Usual" mean the operator of this website and of The Usual's mobile and web application. You can reach us at jack@connect-quick.com.
2. What we collect
If you fill in the form on this website
Your name, business name, business type, email address and, if you give it, your phone number. We also record whether you ticked the box agreeing to product updates, and the wording you agreed to.
If you use the app as a customer
- Account details: your name and email address, and a phone number if you add one.
- Loyalty activity: the programmes you join, each stamp you receive (with the business, location, staff member and time), and the rewards you earn and redeem.
- Scan codes: the code on your card changes every 60 seconds and works once. We keep only a scrambled (hashed) copy, and delete it shortly after it expires.
- Your postcode or zip code, if you type one in to find nearby businesses. We don't track your location.
If you use the app as a business or a member of staff
- Your name and email, the business's name, category and addresses, and your role at the business.
- A record of each stamp you add, redemption you make and stamp you undo. This log is what lets an owner answer a disputed balance, and it can't be edited or deleted.
- Subscription status. Card payments are handled by our payment processor; we never see or store a full card number.
Automatically
Our website uses cookieless analytics that count page views and button clicks without identifying you, setting a cookie or following you to other sites. Like every web server, our hosts briefly process your IP address to deliver pages and to block abuse.
3. What we use it for
- To run your loyalty cards: recording stamps, issuing rewards, and preventing fraud such as copied codes or duplicate scans.
- To show businesses how their programme is doing — repeat visits, rewards issued, customers who have stopped coming.
- To answer you when you contact us, and to set up businesses that sign up.
- To send service messages (a reward is ready, a receipt, a security notice).
- To send marketing, only where you have opted in. See section 5.
- To keep the service secure and to meet our legal obligations.
4. Who sees your information
Businesses whose programme you join can see your first name, the first letter of your last name, and your stamp and reward history at their business. They cannot see your cards at other businesses. They see your email address only if you opt in to hear from that business.
Service providers process data for us under contract, and only to provide their service:
- Supabase — database and sign-in
- Vercel — website and app hosting, cookieless analytics
- Stripe — subscription payments for businesses
- Anthropic — when you write to support from inside the app, your message is read by an AI assistant (Claude) that drafts the first reply and tells our team how urgent it is. Anthropic processes it to provide that service and does not use it to train its models.
- Google Fonts — delivers the typefaces on this website, which means Google receives your IP address when the page loads
We do not sell personal information, share it for cross-context behavioural advertising, or give one business's customer list to another business. We may disclose information if the law requires it, or as part of a merger or sale of the service, in which case this policy continues to apply to it.
5. Marketing and your consent
Marketing is opt-in, separately for each source. Ticking the box on our signup form agrees to occasional product updates from The Usual. Inside the app, you choose business by business whether each one may contact you. Nothing is pre-ticked, and saying no never costs you a stamp or a reward.
You can withdraw consent at any time: use the unsubscribe link in any email, switch it off on the card in the app, or email us. Service messages about your account are not marketing and aren't affected.
6. How long we keep it
- Your account and cards: until you delete your account.
- Stamp and redemption records: kept after deletion, but with your name, email and phone removed, so the business's books still add up. They can no longer be linked to you.
- Website form submissions: up to 24 months after our last contact, or until you ask us to remove them.
- Support messages: up to 24 months. First replies are automated and labelled as such; billing, cancellations and anything the assistant can't answer go to a person.
7. Your choices and rights
Wherever you live, you can ask us for a copy of your information, ask us to correct it, or ask us to delete it, and we won't treat you differently for asking. Depending on where you live (for example California, other US states with privacy laws, the UK or the EU) you may have further rights, including to object to or restrict certain processing and to complain to your local regulator. Email jack@connect-quick.com from the address on your account and we will respond within 30 days.
Account deletion is self-serve: see Deleting your data.
8. Security
Data is encrypted in transit and at rest. Access inside the database is restricted row by row, so a customer can read only their own cards and a business only its own programme. Stamps and rewards can be changed only by a signed-in member of that business's staff, and every change is logged. No system is perfectly secure; if a breach affects you, we will tell you.
9. Children
The Usual isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has given us information, email us and we'll delete it.
10. Changes
If we change this policy in a way that matters, we'll say so in the app or by email before the change takes effect. The date at the top always shows the current version.