About LoyaltyCards

A Privacy-First Digital Loyalty Card System  ·  Version 2.0.4+24  ·  Last Updated: August 16, 2026

LoyaltyCards is a digital stamp card system that replaces the paper punch card, without collecting anything about you. It's two apps working together: the Customer app is your digital wallet of loyalty cards, and the Business app is what a shop uses to issue and manage them. There's no server connecting them — they talk directly to each other via QR code, on the spot, and nothing leaves either device.

Why two apps? Separating "my cards" from "run my business" keeps each app simple and keeps a customer's wallet independent of any single business staying online, staying in business, or keeping a database intact. Your cards live on your phone; a business's signing keys live on theirs. Neither depends on a company's servers, because there aren't any.

Two Operation Modes

Every business picks one mode when they set up — it's a trade-off between speed and cryptographic proof, and the right choice depends on the reward value and how well a business trusts its regulars.

Express Mode — trust-based, like a physical card

The business displays a static, reusable QR code at checkout. Customers scan it themselves to add a stamp — no staff interaction needed. It's fast (about 2 seconds) and needs no hardware beyond a printed code, but it's honor-based: a determined customer could scan repeatedly. Each business sets a cooldown between stamps (5–60 seconds, 30 by default) to discourage casual abuse, though that's enforced locally on the customer's phone, not cryptographically.

Joe's Coffee Shop — Express Mode

Joe prints two QR codes and tapes them to the register: "Get Loyalty Card" and "Add Your Stamp." Sarah, a regular, scans the first on her first visit and the card appears in her wallet instantly. Every visit after that, she scans "Add Your Stamp" — total time, about 2 seconds. On her 10th visit her card is complete; she shows it to Joe and taps "Redeem Reward" — no scan needed, just a witnessed tap — gets her free coffee, and a fresh card is created automatically. It works because Sarah is a regular who values the reward and won't bother gaming a $5 coffee, and speed matters to Joe during the morning rush.

Secure Mode — cryptographically signed

The business generates a fresh, time-limited QR code (valid 1–2 minutes) from their own device for every stamp. Each one is signed with the business's private key and chained to the previous stamp, so it can't be forged or replayed. Redemption requires the business to scan the customer's completed card and validate the whole chain. It's slower (5–10 seconds) and needs a device at checkout, but nothing about it depends on trusting the customer.

Maria's Luxury Spa — Secure Mode

Maria keeps an iPad at reception. On Lisa's first $200 massage, Maria issues a card from the iPad and Lisa scans the QR it displays. Every visit after, Maria taps "Add Stamp," a time-limited QR appears, and Lisa scans it — each stamp is cryptographically signed. On Lisa's 5th visit, Maria taps "Redeem Card," scans Lisa's completed card, the whole signature chain is validated, and Lisa gets her free massage. A $200 reward justifies the extra few seconds, and Maria gets a genuine audit trail for her books.

Comparing the modes

FeatureExpress ModeSecure Mode
Speed~2 seconds5–10 seconds
HardwarePrinted QR onlyPhone/tablet required
Fraud preventionScan cooldown (5–60s)Cryptographic signatures
RedemptionSelf-serviceBusiness scans and validates
QR expiryNever (print once)1–2 minutes
Best forLow-value, high-trust, high-volumeHigher-value, any trust level

More Examples

A few more scenarios that show how the choice usually plays out in practice:

Privacy, By Design

Neither app asks for a name, email, phone number, or account. There's nothing to sign up for and nothing to log into. Cards live in a local database on the customer's phone; a business's configuration and signing keys live on theirs. Nothing is sent to us, because there's no "us" to send it to — there's no backend at all. See the full Privacy Policy for details.

Backing Up a Business

A business's signing keys are what make every customer's card valid — losing a device without a backup means starting over. The Business app supports backing up (print, email, or save to Files) and restoring to a new device, plus cloning to a second device (like a manager's iPad and a till) that shares the same identity. Full detail is in the Supplier Setup Guide.

Frequently Asked Questions

Is my data safe?There's no data to steal in the first place — everything stays on your device, and there are no servers to breach.
What if I lose my phone?Your cards are lost, the same as physical stamp cards would be. No personal data was ever collected, so there's nothing exposed — just reinstall and start fresh.
What if a business loses their device?With a backup: restore to a new device in seconds, every customer card stays valid. Without one: the business has to start over and re-issue cards.
Can a business switch modes later?Not without a full reset, which invalidates every card currently held by customers — choose carefully during setup.
Does it work without internet?Yes, completely — it's peer-to-peer via QR code, nothing needs a connection.
Can customers cheat in Express Mode?The scan cooldown discourages casual abuse but isn't cryptographically enforced — Express Mode is intentionally trust-based, the same as a physical stamp card. Businesses expecting determined fraud, or offering higher-value rewards, should use Secure Mode instead.

Getting Help

See the User Guide for step-by-step instructions, the Supplier Setup Guide for a deeper mode comparison, or the Support page for troubleshooting and contact details.

LoyaltyCards — Convenient. Private. Local.