Privacy Policy

Information you provide directly:

• Phone number — collected when you join a loyalty program, used to identify your account and deliver SMS communications
• Name — if provided voluntarily during enrollment or through a Merchant's signup flow
• Gift card claim data — information provided when claiming or checking the balance of a gift card

Information collected automatically:

• Transaction and earning history — points earned and redeemed, rewards claimed, visit timestamps, and purchase amounts (where shared by the Merchant's point-of-sale system)
• Gift card activity — balance, transactions, and usage history
• Device identifiers — device library identifiers and push tokens used to deliver and update your Apple Wallet pass
• Usage data — pages or screens viewed, features accessed, and session timestamps within the Maiz web experience

Information we do not collect:

We do not collect payment card numbers, bank account information, or other financial account details. All payment transactions are processed directly by the Merchant's point-of-sale system.

• To operate, maintain, and improve your loyalty account and digital pass
• To process point earnings, redemptions, and reward fulfillment
• To send transactional and promotional SMS messages on behalf of the Merchant (with your consent)
• To personalize your AI voice ordering experience linked to your loyalty account (with your consent)
• To deliver and update your Apple Wallet pass via push notifications
• To provide Merchants with aggregated, anonymized analytics about their loyalty program
• To detect, investigate, and prevent fraud, abuse, and security incidents
• To comply with applicable legal obligations

We do not sell your personal information to third parties. We do not use your information to build advertising profiles or serve targeted ads.

If you are a loyalty Member and use a Merchant's AI-powered telephone ordering service, we use your loyalty membership ID to recognize you and personalize your experience. Your phone number is used only to look up your membership at the start of a call and is not stored after that lookup is complete.

We may associate the following with your loyalty account to reduce friction on future calls:

• Vocabulary preferences — shorthand terms or nicknames you use for menu items
• Ordering patterns — your typical order, preferred customizations, or common add-ons

This data is used solely to improve your ordering experience at that Merchant. It is not sold, shared with advertising networks, transferred to other Merchants, or used to build advertising profiles.

Call interactions are not recorded or stored beyond what is necessary to fulfill your order and update your loyalty preferences, unless you are explicitly notified otherwise at the time of the call. You may request deletion of all voice personalization data linked to your account at any time by contacting us at dev@aulki.com. Deletion requests are processed within 30 days.

We do not sell your personal information. We share your information only in the following limited circumstances:

• Merchants — the Merchant whose loyalty program you have enrolled in can view your loyalty activity, points history, and redemption records for the purpose of administering their program.
• Service providers — we engage trusted third-party vendors to help us operate the Service, including Supabase (database and authentication), Telnyx (SMS delivery), and Apple (Wallet pass delivery). These providers are contractually prohibited from using your information for any purpose other than providing services to us.
• AI processing — voice ordering interactions may be processed by AI infrastructure. AI providers are contractually prohibited from using your data for model training.
• Legal requirements — we may disclose information if required to do so by law, subpoena, court order, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers — in the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via SMS prior to your information becoming subject to a different privacy policy.

• Loyalty account data — retained for as long as your account is active. Deleted within 90 days of an account deletion request.
• Transaction history — retained for 2 years after the transaction date, then deleted.
• Voice personalization data — retained until you request deletion or your loyalty account is closed.
• Gift card records — retained for 7 years to comply with financial recordkeeping requirements.
• SMS consent records — retained for 4 years as required by applicable telemarketing law.

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information, subject to legal retention obligations
• Portability — request your data in a structured, machine-readable format
• Opt-out of SMS — reply STOP to any message at any time
• Delete voice data — request deletion of ordering preferences linked to your loyalty account

California residents (CCPA/CPRA): You have the right to know, delete, and opt out of the sale or sharing of your personal information. We do not sell or share your personal information as defined under California law. To submit a request, contact us at dev@aulki.com. We will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at dev@aulki.com. We will respond within 30 days (or 45 days where permitted by law).