Privacy Policy

"BTAGTI" is a unified digital loyalty platform that lets you create one account and use one digital card to join multiple loyalty programs at participating stores, while each store’s points, stamps, and rewards remain independent of other stores.

The data controller and platform operator is Adwaa Munira Fashion Design Company ("AM Design Co.") — a single-person company, State of Kuwait — referred to in this policy as "BTAGTI", "we", or "us". The BTAGTI iOS app is currently published through the developer account of Nasser Alrashidi — the company’s owner — on the company’s behalf and under its responsibility.

This policy applies to the BTAGTI app, batagti.com, the digital card, and related services and features. It also applies to the personal data of merchant-dashboard users (merchant.batagti.com) to the extent we process it, complemented for them by the Merchant Terms.

It also applies to the BTAGTI Business app for Android and iOS (iPhone), a cashier-station app for the staff and owners of participating stores, published on Google Play and the App Store through personal developer accounts of the company’s owner, on the company’s behalf and under its responsibility. The app offers no self sign-up, shows no ads, contains no payments, and does not request access to location, contacts, stored photos or notifications.

This policy explains the types of data we collect and how we use, process, share, protect, and retain it, along with the rights and choices available to you.

The data we collect depends on how you use BTAGTI and which features you choose to use.

Account data: When you create an account, we may collect your name, phone number, email, verification and sign-in data, and your BTAGTI account identifier.

Optional data: We may let you provide optional information such as date of birth, gender, occupation, governorate/area, and interests and preferences. It is used to improve your experience and tailor certain offers, benefits, and content, and is not required for core functions unless explicitly stated.

Loyalty-program data: When you use BTAGTI at a participating store, we may process the store and branch linked to an operation, its date and time, points or stamps earned or redeemed, rewards due or used, current balance, loyalty history, and your membership status in the store’s program.

Ratings and interaction: If you use rating, feedback, or support features, we may process the content you provide as needed to run them. Your store ratings are displayed publicly on the store’s page on batagti.com without your name or identity (only the stars, review text, and the store’s reply appear); only the store concerned can know which of its customers submitted a rating, so it can reply and act on feedback. Do not include personal data about yourself or others, or any sensitive information, in a rating; you can edit your rating from the store page or request its removal via the channels in Section 20.

Technical and security data: Our systems may automatically collect information needed to run and protect the service, such as device type, operating system, app version, IP address, device and session identifiers, push-notification tokens, sign-in, error and crash logs, and unauthorized-use attempts. We use aggregate usage metrics that do not build an individual profile of you, and we do not use advertising-tracking cookies.

Digital-wallet data: If you add your BTAGTI card to Apple Wallet, Google Wallet, or another supported digital wallet, the digital card contains your name, your card number, and technical tokens for creating and updating it; the QR code of the unified BTAGTI card carries your card number plus a verification code; and once added it is processed by the wallet provider under its independent policies. Using your BTAGTI card inside a wallet does not give us access to the bank cards or payment information stored in your wallet.

Store staff data: The store owner creates each staff account in the merchant dashboard; staff accounts cannot be created from the app. We process the staff member’s name as entered by the owner, the sign-in email, role, branch, permissions and last sign-in time. The password is set either by the owner when creating or resetting the account, or by the BTAGTI team when resetting it, and is shown once to whoever set it; the staff member can also choose a new one themselves via "Forgot password?", which sends a link to their sign-in email. We keep only its cryptographic hash, from which neither we nor the owner can recover the password. If our team resets a staff member’s password, a security audit record of that reset, including the sign-in email, is kept (Section 8). Every operation a staff member performs is recorded with their identifier, which is linked to their name, together with the branch and time; the store owner sees it for accounting, reconciliation and fraud prevention, and colleagues at the same store see the last 7 days in the app’s activity log. These operations are: granting stamps or points, redeeming a reward or code, undoing an operation, and requesting approval to cancel one. A staff member’s scan of a customer’s card code carrying the verification code is also recorded with their identifier, the store and the time, in a record that neither the store owner nor colleagues can see and that is replaced at the next scan of the same card at the same store.

Data a store’s staff enter about you: Staff may look up your card by scanning its code or by entering your card number or phone number. When your card’s code is scanned and carries the verification code, we record the card, the store, the staff member who scanned it and the time, to verify that your first stamp at that store follows a scan of your code; we keep one such record per card and store, replaced at each new scan, it is not shown to the store or its staff, and after you delete your account it remains detached from your identity, like the operations ledger (Section 8). If you ask for a card at the counter, the staff member enters your name, email and phone number. This creates your BTAGTI account, to which this policy applies. Staff do not set your password: since October 8, 2026 the account is created with a random password that is not shown to anyone, any password dictated or typed at the counter is discarded and not stored, and you set your own later via "Forgot password". If you dictated a password at the counter before that date, we recommend changing it the same way. No consent of yours is recorded at the counter: the Terms of Use and this policy are published at batagti.com, and you may delete the account at any time under Section 10. With each operation we record the bill amount if entered, the number of stamps or points, the branch, the staff member who performed it, an optional note about the item, and, for your first operation at a store where you had no balance yet, whether your card’s code was scanned there within the 15 minutes before it.

Camera and receipt photos: BTAGTI Business uses the camera, with the staff member’s permission, for two purposes only: (1) scanning the QR code of a customer’s card or reward code — the image is read on the device itself and is neither stored nor sent; only the decoded text is sent: the text of the card code (the card number, plus a verification code when the code carries one) or the reward code; (2) optionally photographing the purchase receipt and attaching it to the operation as accountability evidence. Receipt photos are uploaded to private, non-public storage, visible only to that store’s staff and owner, and to the BTAGTI team when needed to resolve a dispute or suspected manipulation, and are used for no other purpose. The feature is intended for photographing the receipt only; staff should not photograph people or payment cards. The app does not access the device photo gallery and records no video or audio.

Crash reports in BTAGTI Business: When an error occurs, the app sends Sentry the error type and message, the code stack trace, the app version, the technical operation name and internal identifiers such as the store or operation ID. We do not include the staff member’s name or email, the customer’s name, phone or email, or receipt photos in these reports, and we strip database details that may carry record values.

We do not collect highly sensitive personal data (such as medical, biometric, or religious-belief information) — see Section 14.

We use personal data as needed to run BTAGTI and provide its services: creating and verifying the account, sign-in and account protection, operating the digital card, managing your participation in loyalty programs, calculating and displaying points, stamps and rewards, executing and documenting earn/redeem operations, and displaying your activity history.

We may use contact data to send notifications related to the account, security, loyalty operations, rewards, or important service changes, and we use data to improve app performance, detect faults, develop features, and understand how the platform is used.

We may use account, operations, and technical data to detect fraud, manipulation, and abuse — including fake or duplicated operations, unauthorized redemptions, exploitation of technical errors, and unauthorized-access attempts — and to comply with legal requirements and respond to lawful requests from competent authorities.

We process the data needed to create your account, run loyalty programs, and document operations because it is necessary to provide the service you chose to use. Optional data and certain marketing uses are processed based on your consent or preferences where consent is required. Processing may also occur to protect our legitimate interests in operating the platform securely and preventing fraud — without overriding your legal rights — or to meet a legal or regulatory obligation.

When you register yourself and accept the Terms of Use and this policy, we record your consent electronically with its date and the document version at the time it was given; this record serves as evidence of the consent, its scope, and its timing. No consent is recorded for an account created for you at a store’s counter (Section 2).

You may withdraw consent-based uses at any time via app settings or the channels in Section 20, without affecting the lawfulness of prior processing; withdrawal only affects the related feature, not the core service.

The privacy of your activity across stores is a core BTAGTI principle. Although your account and card are unified, each store’s loyalty program is independent of every other store’s programs.

The platform is designed with strict technical isolation controls so a participating store can only see what it needs to run its program with you: your name, phone number and email address, your membership with it, your balance with it, the operations, visits, points, or stamps related to that store, and your birthday (day and month, not the year) if you entered a date of birth and the store offers birthday gifts — and it cannot, through BTAGTI, see your points, stamps, visits, or activity at another store. If you join three stores’ programs, each store sees only its own program’s information; a unified card does not merge balances or expose one store’s data to another. This isolation is subject — like all controls — to Section 12, and any future feature allowing otherwise would only be enabled with your consent and prior notice.

Your name, phone number and email address are shown to the store owner in the merchant dashboard for every customer with a balance or an operation at that store, even a single operation the store recorded on your card number; the store’s staff at the counter are shown only your card number and your balance, rewards and operations at that store, and your name when they redeem a campaign, BTAGTI network offer or birthday-gift code issued to you, plus anything they enter themselves as described in Section 2. You receive an in-app notification for every stamp or point added to your card at any store; if you see one at a store you have not dealt with, contact us via the channels in Section 20.

Each store is independently responsible for any use of the data it accesses outside the platform or in violation of the law or its obligations under the Merchant Terms; BTAGTI is not responsible for such use.

We do not sell your personal data. We may use or share aggregated or anonymized data that cannot identify you; such data is not personal data.

The necessary minimum of data may be shared with the store you interact with to run its loyalty program (per Section 5), and with technical service providers acting on our behalf, each for its purpose and to the minimum needed: Supabase (database, authentication and backend, on AWS infrastructure) · Vercel (website hosting and aggregate usage metrics) · Twilio (sending your SMS sign-in code to your phone number) · Resend (sending sign-in code and password-reset emails to your email address) · Sentry (technical crash data) · Cloudflare (the Turnstile service, which checks that whoever signs in, creates an account or submits certain forms is not an automated program, processing the IP address, TLS fingerprint and browser type to provide that check for us, and also using them, as an independent controller under its Turnstile privacy notice, to improve its bot detection — not to identify, profile or target individuals) · Google ML Kit (a library that reads QR codes on the device itself in the Android version of BTAGTI Business and sends Google the device model and OS version, the app package name and version, per-installation identifiers not intended to identify a user or device, and library performance metrics — never the captured images; on iPhone the code is read on the device itself without ML Kit, and nothing is sent to Google for this) · Apple and Google (when you use their wallets, as independent processors under their own policies). Except as stated above for Cloudflare (which also uses Turnstile signals, as an independent controller, to improve its bot detection), Google (which uses ML Kit data for ML Kit diagnostics and usage analytics) and the digital-wallet providers, providers may not use the data for independent purposes beyond the contracted services, and we require them to process it securely.

We may also disclose information where required by law or under a request or order from a competent court, governmental, or regulatory authority, or as needed to investigate fraud or security threats or protect the rights and safety of BTAGTI, its users, or participating stores.

Your core data is stored with our provider Supabase on Amazon Web Services infrastructure in the EU Central region eu-central-1 (Frankfurt, Germany — European Union), and the website is hosted on Vercel. Limited categories of data may be processed by other providers outside Kuwait — such as Twilio for sign-in SMS, Resend for sign-in and password-reset emails, Sentry for crash reports (in the United States), Cloudflare across its global network, and Google for ML Kit performance data (in the Android version of BTAGTI Business only) — meaning your data is processed and stored outside the State of Kuwait.

For transfers or processing outside the country, we apply appropriate safeguards including encryption in transit and at rest, contractual restrictions on purpose and use, and minimum-necessary sharing, in line with applicable legal requirements. Our providers’ processing locations may change from time to time while maintaining an equivalent level of protection, and we will update this section upon any material change.

We keep personal data for as long as needed to run the service, fulfill the purposes it was collected for, and meet legitimate legal and security requirements. While your account is active, we keep the data needed to operate it and its loyalty programs; a store’s subscription ending on the platform does not affect the loyalty history kept in your account.

Upon account deletion, we delete or de-identify personal data for which no legal or legitimate retention reason remains; the loyalty operations ledger at stores remains anonymized in a form that cannot be linked to you, preserving the integrity of store records. We may retain limited records where necessary to meet legal requirements, fight fraud, or handle an ongoing complaint or dispute. Deleted data remains inside our encrypted nightly backups until their 90-day retention period lapses. We also keep a limited number of encrypted backup copies outside that backup storage for disaster recovery, and copies restored from our backups to test that restoration works, with no fixed period yet; we use them only for those two purposes and delete them once they are no longer needed for them. We do not keep personal data longer than necessary.

Among the fraud-prevention records referred to above, specifically: when you redeem a one-time BTAGTI network welcome offer, we retain an obfuscated cryptographic fingerprint derived from your phone number (not the number itself) for no longer than 12 months from redemption. This fingerprint persists even after account deletion, for the sole purpose of preventing the same one-time offer from being claimed again with a new account. We do not use this fingerprint to recover your number, to contact you, or for any purpose other than preventing repeat claims; it is designed so that no party without our servers’ secret can reverse it, and it is erased automatically once the period lapses.

Staff accounts: When a staff account is deleted, whether by the staff member in the app or by the store owner or our team, it immediately loses the ability to sign in and to perform any operation. If the staff member performed no operations, the account is deleted entirely. Otherwise sign-in is permanently disabled, the email and password are erased, and the staff record — name, identifier, role, branch and permissions — stays attached to past operations in the store ledger for as long as the store’s account and its accounting ledger are retained, to preserve the integrity of accounting records. In both cases the deletion does not erase limited security records: the authentication service’s sign-in logs, which may include the email and IP address, and, if our team ever reset the password, the security audit record of that reset, which includes the sign-in email. If the staff member deletes the account themselves, we also keep a security audit record of the deletion itself that contains internal identifiers only (the staff, account and store identifiers and the type of deletion), without the email. They are kept with the limited records described above, with no fixed period yet, and are used only for security and fraud prevention.

Receipt photos: We keep them for as long as the store account exists, and we delete them when the store account is deleted or at the store owner’s request.

Subject to applicable laws, you may: request to know the personal data linked to you · correct or update inaccurate data · obtain a copy of your data (a data-export option is available in-app) · delete your account and data · withdraw consent for consent-based processing · object to processing based on our legitimate interests, which we will review unless overriding legitimate grounds exist · stop marketing communications and adjust notification preferences · and lodge a complaint with the competent regulator if you believe we mishandled your request.

Requests are submitted exclusively via the channels in Section 20, and we may verify your identity before acting, to protect your account from unauthorized access or deletion. We respond within a reasonable period not exceeding the timeframes set by applicable regulations, and we may decline unjustifiably repetitive or abusive requests, or requests the law prohibits us from fulfilling, stating the reason where possible.

You can delete your account in-app via: My Account → Delete Account. If you cannot access the app, you can request deletion via batagti.com/delete-account by phone or WhatsApp from the phone number registered on your account — this verification is a condition for fulfilling the request.

Account deletion permanently terminates the account — it is not deactivation. The account, points, stamps, and rewards cannot be restored afterwards, and their loss carries no compensation. Upon confirmation your personal data is erased, subject to the limited records described in Section 8, and the operations ledger remains anonymized in a form that cannot be linked to you.

Deleting a staff account (BTAGTI Business): A staff member can delete their own account in the BTAGTI Business app: Settings → Privacy & account → Delete my account, then confirm; the deletion takes effect immediately (in app versions that include this option; in older versions the button opens the deletion page). The store owner also creates and deletes staff accounts in the merchant dashboard: Staff → Delete account. If neither is possible, a staff member may ask the store owner, or ask us directly via WhatsApp at +965 6009 0695 or via batagti.com/delete-account, stating the store name and sign-in email. We may verify your link to the account before acting. A store owner account cannot be deleted from inside the app: deleting it means closing the store account, which we carry out on request via the same page. What is deleted and what remains is set out in Section 8.

We may send messages and notifications necessary to run the service (verification messages, security alerts, operation information, account updates, and important changes). Our current channels are in-app notifications, push notifications, and sign-in SMS — we do not currently send marketing emails, and if we add new marketing channels we will only use them with your consent.

You can stop marketing notifications or change preferences from the app or device settings without deleting your account; essential messages for account security or service operation may continue.

We apply technical and organizational measures designed to protect data from unauthorized access, use, disclosure, alteration, or loss, including — depending on the functions — encryption in transit, authentication systems, permission controls, isolation of store data, database access rules, and security monitoring and fraud prevention. User passwords are never visible to us in readable form. Nevertheless, no electronic service can be guaranteed 100% secure.

If a security incident affects your personal data, we will notify the competent authorities and affected users as required by applicable regulations and within their prescribed timeframes, using means suited to the incident (in-app notice, message, or website posting), describing its nature, the measures taken, and recommended steps — such notification does not constitute an admission of liability or fault.

You are responsible for the confidentiality of your sign-in data and device; if you believe someone accessed your account without permission, contact us immediately — we bear no harm arising from your sharing of sign-in data or delay in informing us.

To protect users, stores, and the platform, we may analyze operation logs, activity, and technical data to detect activity suspected of being fraudulent or in breach of the Terms of Use — such as granting points without a real operation, unlawful redemptions, exploiting system errors, using multiple accounts to circumvent rules, or attempting to access another user’s or store’s data.

Where suspected activity may pose a risk, we may temporarily restrict certain account functions during investigation — without prior notice where protecting the platform, users, or stores so requires — reviewing the restriction within a reasonable period, in accordance with the Terms of Use and the law.

BTAGTI does not, as part of its normal functions, request highly sensitive personal data such as medical information, biometric data, or religious beliefs, and we ask users not to send unsolicited sensitive information via ratings or contact channels. If you send sensitive data on your own initiative, we may delete it; receiving it is neither a commitment to process it as a special category nor consent to receive it. If we ever add a feature requiring a new or sensitive data category, we will explain it and obtain the required consents.

The service is intended for users aged 18 or above; younger users must use it with the consent and under the responsibility of a guardian or legal representative — consistent with the Terms of Use. If we learn that personal data was provided in violation of legal requirements applicable to minors, we may delete it or take appropriate action.

BTAGTI may contain links to or integrations with stores’ websites, digital wallets, or other third-party services. We do not control these parties’ independent privacy practices; when you use an external service, the information it processes independently is governed by its own policies and terms.

If a merger, acquisition, sale, transfer, or legal restructuring involving BTAGTI or Adwaa Munira Fashion Design Company (AM Design Co.) occurs in the future, data may transfer to the entity continuing to operate the service, in accordance with the law and appropriate data-protection measures. If this materially changes how your data is handled, we will provide appropriate notice where required.

We may update this policy from time to time to reflect changes in the service, features, technical infrastructure, or legal requirements, publishing the updated version with its number and effective date in the app or on our website. If a change is material and significantly affects how your data is used, we will provide appropriate notice suited to its nature. Updates take effect upon publication, and your continued use of the service after that constitutes acceptance.

BTAGTI handles personal data in accordance with the laws, regulations, and requirements applicable in the State of Kuwait; the relevant regulatory framework includes the Data Privacy Protection Regulation issued by the Communication and Information Technology Regulatory Authority (CITRA) under Resolution No. 26 of 2024. Nothing in this policy shall be construed as diminishing the rights the law grants users. The courts of Kuwait have jurisdiction over any dispute, in line with the Terms of Use.

This policy was drafted in Arabic; any translation is for convenience only, and the Arabic text prevails in case of conflict.

For any privacy or data question or complaint, or to request access, correction, or account deletion:

BTAGTI — Operated by Adwaa Munira Fashion Design Co. (AM Design Co.)
State of Kuwait
Phone/WhatsApp: +965 6009 0695 (WhatsApp is the approved written channel for documenting requests)
Website: batagti.com · Account-deletion page

The channels listed in this section are the only approved channels for privacy requests and notices; notices received through other means are not recognized.