Privacy policy

What we collect

• Your mobile number. You sign in with your number. We send you a one-time login code by SMS or WhatsApp, and you type it in. We never ask for a password. Your number is saved with your account.
• Your name and email — only if you give them. The app does not ask for either today. If we add that later, it will be optional.
• Location — only when you ask for it. The deals page sorts offers by distance from a point in the city you choose. If you tap “Near me”, your browser asks your permission and gives us your position; we use it to sort that page and we remember your choice on your own device so you are not asked again every visit. Your position is not sent to our servers and not saved to your account. You can refuse, and the app works — it just sorts from the city centre instead. (Businesses are different: see “If you run a business” below.)
• The offers you claim and use. When you claim an offer we record which offer, which business, when you claimed it, and the 6-character code we gave you. When staff accept the code we record when it was used and which staff account accepted it. This is how the business checks the code is genuine, and how disputes get settled.
• Loyalty stamps. If a business runs a stamp card (for example “buy 5, get 1 free”), we keep count of your stamps and rewards at that business.
• Your WhatsApp choices, business by business. For each business, we record whether you said yes or no to hearing from them on WhatsApp, and when. We keep a history of every change so we can always show what you agreed to.
• How the app is used. We record events such as “signed up”, “claimed an offer”, and “searched for deals” so we can see what works and fix what doesn’t. Events about your own account (like signing up or claiming) are linked to your account. Searches are not.
• Sign-in cookies. We use cookies only to keep you signed in. We do not use advertising cookies or ad trackers.
• Technical logs. Like most websites, our hosting provider may keep standard request logs (such as IP address, browser type, and the page asked for) for a short time to run and secure the service.

What businesses can see

When you claim an offer, that business sees the claim. It appears in their numbers (how many people claimed, how many came in, how many came back), and their staff see your code when you show it to them.

If you tick “Send me offers from [business] on WhatsApp” when you claim, that business can see your mobile number (and your name, if you have given one) so they can message you. Right now, those messages are sent from the business’s own WhatsApp, so your number will be in their WhatsApp too.

This choice is made separately for each business. Saying yes to one business does not share your number with any other. The box starts unticked: you only get messages if you tick it yourself.

Businesses can only send WhatsApp campaigns through BachatLo to customers who said yes. The app checks this every time a campaign is built.

Changing your mind about WhatsApp messages

You can stop messages from a business at any time: sign in and go to Your account, where every business you said yes to has its own on/off switch. You can switch a business back on there too. If you can't sign in, email us at majamil999@gmail.com with your number and the business name, and we will turn it off. We keep a record of every change you make.

Turning messages off stops BachatLo from including you in any message a business sends after that. It cannot pull back a message already sent, and it cannot remove your number from a business’s own phone if they already have it.

Companies that help us run BachatLo

We use these services to run the app. They process your information only to provide that service to us:

• Supabase: our database and sign-in system.
• Twilio: sends your login code by SMS or WhatsApp.
• Netlify: hosts the website.
• Meta (WhatsApp): carries WhatsApp messages.
• Sentry: tells us when something breaks. We set it up to remove phone numbers, login codes and passwords before error reports are sent.
• Anthropic: helps businesses write draft promotional messages. Only the business’s own details (name, offer, goal) are sent. Customer details are not.

We do not sell your personal information.

How long we keep it, and how to delete it

We have not set fixed time limits yet. Today we keep your information for as long as you have an account.

To have your account and personal information deleted, email majamil999@gmail.com from any address and include the mobile number you signed in with. We may message that number to confirm the request is really from you. We will reply to confirm once it is done.

You can also email us to ask for a copy of what we hold about you, or to correct it.

If you run a business on BachatLo

When you list a business, this is what we keep and who can see it.

• Shown publicly to customers: your business name, category and description, your street address and city, your offers, and your business’s position on the map. The map position is used to show customers how far away you are.
• Your map pin is stored permanently. When you set up or edit your business, you can press “Use my current location”. Your browser then asks your permission and, if you allow it, shares your device’s position once. We save those coordinates as your business’s location until you change them in Business settings or ask us to delete your business. We do not track your location after that. You can also paste a Google Maps link or type the numbers instead.
• Kept private (not shown to customers): the owner’s name, the mobile number you sign in with, and your business WhatsApp number. Customers only see your WhatsApp number if you message them from it.
• Your average bill amount is private. If you enter it, it is used only to estimate your revenue on your own dashboard, always labelled as an estimate. It is never shown to customers or other businesses.
• Your account and activity: your offers and campaigns, the codes your staff accept, and your subscription details. Changes you make to your business details and offers are recorded in an internal log (who changed what, and when) so mistakes and disputes can be sorted out.

What you can see about customers

• Every claim of your offers: the code, when it was claimed, and whether it was used. Your dashboard shows totals such as how many customers came in and how many came back.
• The name and mobile number of customers who agreed to hear from your business on WhatsApp, so you can message them. You do not see the numbers of customers who didn’t agree.

You may only message customers who said yes to your business, and you must stop if they ask. The full rules are in our terms.

Changes to this policy

If we change what we collect or who sees it, we will update this page and the date at the top. If the change is significant, we will tell you in the app before it applies.