OfferLak shows the offers of local shops on a map and gives you free coupons for them. This policy explains what we collect when you use the OfferLak app, the OfferLak for Shops app and our websites, why, who sees it and how long we keep it. We wrote it to be read, not skimmed past.
Who we are
OfferLak is operated by OfferLak, Homs, Syria ("OfferLak", "we"). You can reach us about anything in this policy at support@offerlak.com.
The short version
- You sign in with your phone number. We send the code on WhatsApp.
- Your location is used on your phone to show offers near you. We do not keep a history of where you have been.
- A shop sees your coupon, never your full phone number or your location.
- We do not sell your data and there is no advertising in OfferLak.
- You can delete your account at any time, in the app or on our website.
What we collect
Your account. Your phone number (required to sign in), and if you choose to give them: your name, your language and your notification choices. We record which version of our terms and of this policy you accepted, and when.
Sign-in codes. When you ask for a code we record the phone number, the time, the delivery result and the IP address that asked for it. Codes are stored only as a one-way hash and expire within minutes.
Your location. If you allow location access, the app uses it to centre the map and to ask our server for the offers around you. The coordinates are sent with that request and used to answer it; we do not store them with your account. If you turn on the daily "offers near you" notification, we keep the name of your area (for example a neighbourhood), not the exact point. You can use OfferLak without location access by choosing an area yourself.
Coupons and activity. The coupons you claim, cancel and use (which offer, which shop, when, and the result), the shops you save as favourites, and the problem reports you send us (with a photo if you add one).
Your device. An installation ID created by the app, the device platform and app version, the push-notification token that lets us send you notifications, and the IP address and device type when you sign in or your session is renewed. We use them to keep you signed in safely, to send notifications and to spot abuse.
Usage events. The app tells us about actions such as opening an offer, claiming a coupon or searching. Any location attached to such an event is reduced to an approximate area of about one kilometre before it is stored. We use these events to count what works, to fix problems and to give shops totals about their offers. Shops never receive the events of a named person.
If you work in a shop. The shop owner adds staff by phone number; we keep each person's name, role, branches and the coupons they scanned, so that the shop's records and statements are correct.
We do not collect your contacts, photos (except a photo you attach to a report or, for shops, the offer and logo pictures you upload), precise location history, or payment card details.
Why we use it
- To create and protect your account and to sign you in.
- To show offers near you, to issue coupons and to let shops redeem them.
- To send the notifications you chose (you can change them in Settings at any time).
- To prevent fraud and misuse: for example several accounts used to collect extra coupons, repeated failed codes, or a coupon scanned twice.
- To prepare the shops' monthly statements, which are based on redeemed coupons.
- To answer you when you contact us, and to handle reports and disputes.
- To understand, in totals, how OfferLak is used and to improve it.
We process this data because it is needed to provide the service you asked for, because we have a legitimate interest in keeping OfferLak safe and working, or, for optional features such as location access and notifications, because you allowed it.
Who sees it
Shops. When you show a coupon, the shop's staff see the coupon, the offer and whether it is valid. In the shop's records your phone number appears masked (only the last digits are visible). Shops do not receive your name, your full phone number or your location.
Service providers that work for us. Our hosting provider, which runs our servers; WhatsApp (Meta), which delivers the sign-in code to your phone number; Google, whose Maps service draws the map in the app and whose Firebase Cloud Messaging delivers notifications to your device. Each receives only what it needs to do that job. Some of them process data outside your country.
When the law requires it. We disclose data when we are legally obliged to, and only what is required.
Never for advertising. We do not sell or rent personal data, and we do not share it with advertisers or data brokers.
How long we keep it
- Your account: while it exists. When you delete it, it is closed after a grace period of 7 days (sign in again during that time to cancel). After that your phone number and name are removed. The records of coupons you used are kept without your identity, because the shops' statements and fraud checks depend on them.
- Sign-in code records: 90 days.
- Usage events: 13 months, after which only daily totals remain.
- In-app notifications: 90 days.
- Records of ended sign-in sessions: 180 days.
- Server logs: up to 14 days. Backups: up to 14 days.
Your choices and rights
- See and correct your name, language and notification settings in the app at any time. Ask us for a copy of the data linked to your account by writing to us.
- Location: allow or refuse it in your phone's settings; the app keeps working with an area you choose.
- Notifications: turn each type on or off in the app's Settings.
- Sign out of one device or of every device from your account screen.
- Delete your account in the app (Account → Delete account) or on our account deletion page.
- Object or complain: write to us. If you are not satisfied with our answer you may contact the authority that protects personal data where you live.
Security
Connections to OfferLak are encrypted. Codes and session tokens are stored only in hashed form, sessions can be ended remotely, staff access to the administration tools is limited, protected and logged, and our database is backed up and kept on servers with restricted access. No system is perfectly secure, so please keep your phone locked and never share a sign-in code with anyone, including someone who says they work for OfferLak.
Children
OfferLak is not meant for children under 13 and we do not knowingly create accounts for them. If you believe a child has an account, contact us and we will delete it.
Changes to this policy
When we change this policy we publish the new version here with its date. If the change is important we will tell you in the app and ask you to accept the new version before you continue.
Contact
OfferLak · Homs, Syria · support@offerlak.com