Wallegram Cashier — Privacy Policy
Effective: 30 August 2026
Who this policy is for
Wallegram Cashier is a staff app. It is used by employees of venues that run a Wallegram loyalty programme — cafés, restaurants and shops that keep their own till — and it requires an account issued by that venue. It is not a payment terminal and takes no money: the venue’s own till does that. Cashier records what a customer spent so their loyalty balance stays correct.
This policy covers the Cashier app and the wallegram.com services behind it. If you are a customer of one of those venues rather than an employee, the policy that applies to you is at wallegram.com/privacy.
Data we collect
Your staff account: the email address and password you sign in with, your name and role as your venue registered them, and the branch you are working at. Your venue creates and manages this account; you do not register yourself.
Customer identifiers you enter: to find a customer you scan their code or type a card number or phone number. The app sends that to our servers to look up the membership. The customer details you then see — name, tier, balance — belong to your venue and are shown to you only for the sale in front of you.
Sales you record: the bill amount, any bonus spent, the time, the branch, and your staff account as the person who recorded it. That last part is deliberate: a sale can be reversed, and the record has to show who did what.
Technical data: a session token stored on the device to keep you signed in, the start time of your current shift, and standard server logs (IP address, timestamps) kept for security and reliability. The app contains no advertising or analytics software and does not use an advertising identifier.
Camera: used only to read a code at the moment you scan. No photograph is stored on the device or sent anywhere.
Sales made offline: a sale rung up without a connection is held on the device and sent as soon as the connection returns, then removed from the device. This is the only customer data the app keeps locally, and only until it has been delivered.
How we use it
To sign you in, to identify the customer at the counter, to work out what a sale earns and what bonus may be spent, to notify the customer of the bonus they earned, to show you your own shift and let a mistake be reversed, and to keep the service secure. We do not sell personal data and we do not use it for third-party advertising.
Who is responsible for the customer data
The venue that employs you decides what customer data it holds and why; it is the controller of that data. Wallegram operates the software and processes that data on the venue’s instructions. Each venue sees only its own customers and its own sales — never another venue’s.
Sharing
Sales and customer data are shared only between the venue and the customer they belong to. Infrastructure providers (cloud hosting, push notification delivery) process data on our behalf under contract. We disclose data to authorities only where the law requires it.
Retention & deletion
Your staff account exists while your venue keeps it; an administrator can deactivate it, which ends your access immediately. Sales records belong to the venue and are kept for its own accounting, including the record of who entered them. Signing out clears the session and any local data from the device.
To request access to, correction of or deletion of your own staff data, ask your venue’s administrator, or write to us at the address below.
Your rights & contact
You may request access, correction or deletion of your personal data at info@wallegram.com. We answer within 30 days.