Privacy policy

Loywin is run by ENTELXCORE SINGLE MEMBER P.C. (ENTELXCORE ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε.), a company registered in Greece. We are the controller of your personal data.

• Registered office: Rizountos 51, 16777 Elliniko, Attica, Greece
• G.E.MI. number: 195125103000 · VAT number (AFM): 803350763
• Email: info@entelxcore.com
• Company information: https://entelxcore.com/company-info

We collect only what we need to run Loywin:

• Account details: your name, email address and password, and your home city if you add it. Your password is handled by our sign-in provider and stored only in a scrambled (hashed) form that we can’t read.
• Points activity: your balance, the points you earn and spend, at which shop and when, the codes you claim, and the vouchers you unlock and use.
• Receipt photos: the photo you send, the total and date you enter, and the shop’s decision, with its note if it turns the photo down.
• Business applications: if you apply to bring a shop to Loywin, the shop’s name, category and city, any address, phone number, website and message you add, and our decision.
• Shop details: if you run a shop, its listing, offers and codes. The listing is public in the app.
• Usage information: at most once a day, the date you last used the app, the platform (web, iOS or Android) and the app version.
• Your email choice: whether you want offers by email, and when you last chose.
• Messages to us: what you send through the contact form (your name, email address, topic and message) or by email.
• Technical data: when you use the app or this website, our hosting providers process your IP address, browser details and the pages or files requested, to deliver them and keep them secure.

• To provide Loywin: create and run your account, record points, receipt photos and vouchers, send you account emails (such as confirming your address or resetting your password), and show you shops and offers. Legal basis: our contract with you (Article 6(1)(b) GDPR).
• To review business applications and run shop accounts. Legal basis: steps you ask us to take before an agreement, and the agreement itself (Article 6(1)(b)).
• To keep Loywin fair and secure: prevent misuse of codes, receipts and vouchers, and fix problems. Legal basis: our legitimate interest in a service that works and can be trusted (Article 6(1)(f)).
• To understand how Loywin is used, from the daily usage information above. We use no analytics or advertising tools for this. Legal basis: our legitimate interest in improving the service (Article 6(1)(f)).
• To send you offers and news by email, only if you turn on Offers by email. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time in your profile.
• To answer your messages. Legal basis: our legitimate interest in replying to you, or steps you ask us to take (Article 6(1)(f) and (b)).
• To meet legal obligations, such as handling your data-protection requests. Legal basis: legal obligation (Article 6(1)(c)).

• Shops: a shop sees the receipt photos, totals and dates you send it, and the vouchers you present at its till. Shops don’t see your email address or your points balance.
• The Loywin team: authorised staff who run the platform, for example to review applications, deliver Loywin prizes, answer support requests and carry out account deletions.
• Service providers that process data on our behalf, under data-processing terms: Google (Firebase Authentication, Cloud Firestore and Cloud Storage), which stores and secures account and app data; and Netlify, which hosts the Loywin web app and this website and receives contact-form messages.
• Public authorities, when the law requires it.

We don’t sell your data, and we don’t use advertising or analytics trackers.

Google and Netlify may process data outside the European Economic Area, including in the United States. Such transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

• Account details, points activity, receipt photos, vouchers and business applications: for as long as your account exists.
• After you delete your account: we erase your data within one month. Vouchers you used may be kept in a form that no longer identifies you, so shops’ statistics stay correct, along with a record that the deletion happened.
• Messages to us: for as long as we need them to deal with your request and any follow-up.
• Hosting logs: for the short periods set by our hosting providers.

Under the GDPR, you have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict certain processing, or object to processing based on our legitimate interests;
• receive the data you gave us in a portable format;
• withdraw your consent at any time, without affecting processing that already happened.

To use any of these rights, email info@entelxcore.com. We reply within one month. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr, Kifisias 1–3, 115 23 Athens).

Loywin is for people aged 18 or over. We don’t knowingly collect data from anyone younger. If you believe someone under 18 has created an account, contact us and we’ll delete it.

This website sets no cookies and uses no analytics. The Loywin app keeps your sign-in session on your device so that you stay signed in. This is strictly necessary for the app to work, so it needs no consent.

Data travels over encrypted connections (HTTPS). Access rules decide who can read what: your profile and points history are visible only to you and the Loywin team, and a receipt photo only to you, the shop you sent it to and the Loywin team.

We’ll update this page when our practices change, and change the date at the top. If a change is significant, we’ll tell you in the app or by email before it applies.

Questions about this policy or your data: info@entelxcore.com.