SAP Loyalty

SAP Loyalty App

Privacy Policy

Effective and last updated: October 8, 2026

This Privacy Policy explains how SAP Loyalty ("we", "us", or "our") collects, uses, shares, and protects personal information when you use the SAP Loyalty App and related web services.

1. Information we collect

  • Account information: email address, nickname, language, email verification status, and a one-way password hash. We do not store passwords in plain text.
  • Creator account information: linked TikTok creator identifiers, username, Open ID, public avatar, follower count, and other public or authorized account information.
  • Service activity: task claims and submissions, selected products, videos and commerce performance, points history, reward redemptions, and fulfillment information.
  • Technical and security information: IP address, browser or WebView User-Agent, login time, session cookies, and server logs needed to secure the service.
  • Information you provide: messages sent to support and materials you choose through the system file picker.

2. How we use information

  • Create and verify accounts, stay signed in, and link or switch between creator accounts.
  • Provide product selection, tasks, data synchronization, points, notifications, and reward redemption.
  • Review task submissions, process redemption orders, provide customer support, and send necessary service-related emails.
  • Prevent fraud, misuse, and unauthorized access, troubleshoot technical issues, and improve our services.
  • Comply with legal obligations and enforce our service rules.

3. App permissions and device access

The app provides services through the system WebView. The system file picker accesses only the files selected by the user when selecting or uploading materials. The current version does not request permissions for background location access, contacts, advertising identifiers, or cross-app tracking.

4. How we share information

We do not sell personal information. We disclose only the information needed to authorized operations staff; cloud hosting, email, storage, and security providers; and platform or partner interfaces used to synchronize creator or commerce data. We may also disclose information when required by law, to protect users, or to secure the service.

5. Retention and security

We retain information as needed to provide the service, resolve disputes, and meet audit and legal obligations. We use measures such as access controls, encryption in transit, password hashing, and activity auditing. No system can guarantee absolute security, so please protect your account credentials.

6. Your choices and account deletion

You can review and update certain account settings, manage notifications, and contact us to request access, correction, or deletion. You can request account deletion in the App under “Me → Delete account”. After deletion, your email is de-identified, your password is invalidated, and all sessions are signed out. Service records may be retained where needed for transactions, points, audits, fraud prevention, or dispute resolution.

7. Children’s privacy

The service is not directed to children under 18. If you believe a child provided personal information without guardian consent, please contact us.

8. International processing

We and our service providers may process information outside your country or region. We will take reasonable measures to protect such information in accordance with applicable laws.

9. Changes to this policy

We may update this policy when features or legal requirements change. We will communicate material changes through the App, website, or another appropriate channel and update the date above.