This Privacy Policy explains how Ayoha Reward collects, uses, stores, shares and protects your personal data when you use the Ayoha Client App, website, membership card services, loyalty rewards, Ayoha Points, merchant vouchers, Ayoha Store, check-in features and related services.
Ayoha Reward is operated by NeoDataX Technology Sdn Bhd or its authorised platform operator.
By using Ayoha Reward, you agree that your personal data may be collected and processed in accordance with this Privacy Policy.
1. Information We Collect
We may collect the following types of information when you use Ayoha Reward:
1.1 Account Information
This includes:
- Name
- Email address
- Phone number
- Profile photo or avatar
- Login method, such as email login or Google sign-in
- Account status and verification status
1.2 Membership and Loyalty Information
When you subscribe to merchant membership cards or participate in loyalty programmes, we may collect:
- Membership card subscription details
- Membership number or subscriber ID
- Merchant membership status
- Stamp, point, voucher, discount, coupon, contest, event or referral activity
- Membership card validity and entitlement
- Loyalty progress and redemption history
1.3 Ayoha Points and Reward Activity
We may collect information related to your Ayoha Points, including:
- Points earned
- Points redeemed
- Points balance
- Check-in rewards
- Reward voucher redemption
- Prize or campaign participation
- Transaction history related to Ayoha Points
1.4 Merchant Interaction Data
When you interact with merchants on Ayoha Reward, we may collect:
- Merchants you view, follow, subscribe to or purchase from
- Check-in activity at participating merchants
- Merchant voucher usage
- Merchant membership card purchases
- Merchant loyalty programme participation
- Ayoha Store cart, order and payment activity
1.5 Location and Check-In Data
If you use check-in features, QR scan features or nearby merchant features, we may collect:
- Merchant location related to your check-in
- Check-in date and time
- QR scan activity
- Approximate location or location permission status, where required by the feature
We only use location-related information to support relevant app features such as merchant discovery, check-in validation, rewards and fraud prevention.
1.6 Payment Information
When you make payments through Ayoha Reward, we may collect:
- Payment amount
- Payment status
- Payment reference number
- Invoice or receipt information
- Payment provider name
- Transaction date and time
Ayoha Reward does not store your full debit card, credit card or online banking credentials. Payment processing may be handled by third-party payment providers such as Stripe or other supported payment gateways.
1.7 Notification and Device Information
If you enable notifications, we may collect:
- Notification permission status
- Notification preferences
- Device or browser push token
- In-app notification status
- Read or unread notification status
- Notification delivery logs
This allows us to send app notifications, merchant messages, order updates, reward alerts and important account notices based on your preferences.
1.8 Technical Information
We may automatically collect technical information such as:
- Device type
- Browser type
- Operating system
- IP address
- App usage logs
- Error logs
- Session activity
- Security logs
This information helps us maintain app security, improve performance and troubleshoot technical issues.
2. How We Use Your Information
We use your information for the following purposes:
- To create and manage your Ayoha account
- To allow you to subscribe to merchant membership cards
- To manage your membership cards, loyalty programmes and rewards
- To calculate and display Ayoha Points
- To process check-ins and reward eligibility
- To process Ayoha Store orders and payment transactions
- To show your merchant vouchers and reward redemptions
- To send in-app notifications and app notifications based on your preferences
- To provide customer support
- To improve app performance, security and user experience
- To detect fraud, abuse or suspicious activity
- To comply with legal, regulatory, audit or tax requirements
- To maintain accurate transaction and payment records
3. Merchant Access to Your Information
Ayoha Reward works with participating merchants.
When you subscribe to a merchant membership card, buy from a merchant, use a merchant voucher, check in at a merchant or join a merchant loyalty programme, that merchant may be able to view limited information related to your activity with that merchant.
This may include:
- Your name
- Membership status with that merchant
- Membership card subscription details
- Loyalty progress
- Voucher usage
- Store order information
- Check-in activity
- Relevant contact details, where needed for service fulfilment
Merchants cannot automatically view all Ayoha users. A merchant may only access customer information that is relevant to their own merchant account and customer relationship.
4. How We Share Your Information
We may share your personal data with:
- Participating merchants you interact with
- Payment gateway providers
- Technology and hosting providers
- Customer support providers
- Delivery or fulfilment partners, where applicable
- Professional advisers, auditors or compliance providers
- Government authorities, regulators or law enforcement agencies where required by law
We do not sell your personal data to third parties.
5. App Notifications and Merchant Messages
Ayoha Reward may send you notifications related to:
- Membership updates
- Voucher and reward alerts
- Ayoha Store orders
- Merchant messages
- Campaign announcements
- Security alerts
- Account activity
You can manage your notification preferences in the app.
Some important notifications, such as security alerts, payment status or account-related notices, may still be sent where necessary to protect your account or complete a service you requested.
If you disable device notifications, you may still receive messages in your in-app notification inbox if the feature is enabled.
6. Cookies, Local Storage and PWA Data
Because Ayoha Reward may operate as a Progressive Web App (PWA), we may use cookies, browser storage, cache storage or similar technologies to:
- Keep you signed in
- Remember app preferences
- Improve loading speed
- Support offline or cached app behaviour
- Maintain cart, session or notification state
- Improve security and fraud prevention
You may clear browser storage through your browser settings, but some app features may not work properly after doing so.
7. Data Security
We take reasonable technical and organisational steps to protect your personal data against unauthorised access, loss, misuse, disclosure, alteration or destruction.
These steps may include:
- Access control
- Authentication
- Database security rules
- Encryption where appropriate
- Audit logs
- Role-based access control
- Secure payment processing through approved payment providers
However, no digital platform can guarantee absolute security. You are responsible for keeping your login credentials safe and notifying us immediately if you suspect unauthorised access to your account.
8. Data Retention
We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy.
Some information may be retained for a longer period where required for:
- Payment records
- Accounting and tax purposes
- Legal compliance
- Audit records
- Dispute resolution
- Fraud prevention
- Platform security
When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely archive it.
9. Cross-Border Data Processing
Some of our technology providers, cloud services, payment gateways or support tools may process data outside Malaysia.
Where data is transferred or processed outside Malaysia, we will take reasonable steps to ensure that your personal data remains protected in accordance with applicable data protection requirements.
10. Your Rights
Subject to applicable laws and verification requirements, you may request to:
- Access your personal data
- Correct inaccurate or incomplete personal data
- Update your account information
- Withdraw consent for selected processing activities
- Disable selected notifications
- Request deletion of certain personal data
- Ask questions about how your personal data is used
Some requests may be limited where we are required to retain information for legal, payment, audit, security or operational reasons.
11. Children and Young Users
Ayoha Reward is intended to be used responsibly.
If you are below the age required by applicable law to provide consent on your own, you should use Ayoha Reward with permission from your parent or legal guardian.
We do not knowingly collect personal data from children where such collection is not permitted by law.
12. Third-Party Links and Merchant Content
Ayoha Reward may contain links, offers, stores, vouchers or content provided by participating merchants or third-party services.
We are not responsible for the privacy practices, content or policies of third-party websites, merchants or external services. You should review their privacy policies before providing personal data to them.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we make changes, we may update the version number, effective date or notify users through the app where appropriate.
Your continued use of Ayoha Reward after the updated Privacy Policy becomes effective means you accept the updated policy.
14. Contact Us
If you have any questions, requests or complaints about this Privacy Policy or how your personal data is handled, you may contact us at:
15. Important Notice
This Privacy Policy applies to the Ayoha Client App and related Ayoha Reward platform services.
It does not replace separate terms, policies or notices that may apply to specific merchants, payment gateways, promotions, loyalty campaigns or third-party services.