Last updated: October 9, 2026
Casa Apps Inc. ("Casa Apps", "we", "us") builds apps for Shopify merchants, including Casa Loyalty. This policy explains what personal information we collect, how we use and share it, and the choices you have.
In short
Shoppers at stores using our apps: we process your information on behalf of the store you shop with. That store decides how your information is used, so please read its privacy policy too.
Merchants and their staff: we collect account, billing and usage information to run and improve our apps.
Website visitors and support users: we collect contact details and basic usage information when you visit our website or contact us.
1. Information We Collect
Who | What we collect |
Shoppers at stores using our apps | Name, email address, phone number, physical address, Shopify customer ID, order and purchase details, loyalty points, rewards, referrals and tier status, date of birth if the store offers birthday rewards, and device and usage data such as IP address and browser type |
Merchants and their staff | Store name and URL, name, email address, plan and billing details (payments are handled by Shopify; we do not collect card details), app settings, and how you use our apps |
Website visitors and support users | Name, email address, messages you send us, and usage data such as IP address, device, browser and pages visited |
We may also collect business contact information, such as a store owner's name and work email, from public sources like store websites, to contact businesses about our apps.
2. How We Use Information
We use personal information to:
provide, run and support our apps, including tracking points and rewards and showing them to shoppers;
send program emails and messages that merchants set up;
communicate with merchants about their accounts, updates and support;
send merchants and business contacts information about our apps, which they can opt out of at any time;
understand how our apps and website are used, and improve them;
protect against fraud, abuse and security risks; and
comply with the law.
We process information because it is needed to provide our services under our contracts, because we have a legitimate interest in running and improving our business, or because you have given consent where the law requires it. We may also create anonymised and aggregated data that does not identify anyone, and use it for any purpose.
3. Shoppers at Stores Using Our Apps
When you shop at a store that uses our apps, the store is responsible for your information and we process it on the store's behalf, under our Data Processing Addendum with that store. We use it only to provide our apps to the store, not for our own marketing.
If you want to access, correct or delete your information, or have questions about how it is used, please contact the store directly. If you contact us, we will pass your request to the store.
4. How We Share Information
We do not sell personal information or share it for targeted advertising. We share it only with:
Service providers that help us run our apps, such as Amazon Web Services (hosting and email delivery), Intercom (customer support), Sendtray (email delivery) and Google Analytics (measuring visits to our Shopify App Store listings). They may use the information only to provide services to us.
Merchants, who receive information about their own shoppers and program activity.
Shopify and other platforms our apps connect to, as needed to provide the apps.
Authorities or others where the law requires it, or to protect our rights, users or the public.
A buyer or successor if we are involved in a merger, acquisition or sale of assets.
5. Cookies
We use cookies and similar technologies, such as local storage, on our website and in our storefront widgets. Some are needed for our apps to work, for example to show a shopper their points balance. Others help us remember preferences and provide chat support on our website. We also use Google Analytics on our Shopify App Store listings to understand how merchants find and install our apps. See our Cookie Policy for details.
You can control cookies through your browser settings, although blocking some may stop parts of our apps from working. Our website does not respond to "Do Not Track" signals.
6. Where Information Is Stored
We store information in the United States, and our team may access it from other countries, including India. Privacy laws in these countries may differ from those where you live. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we use legal safeguards such as the European Commission's Standard Contractual Clauses.
7. Retention and Security
We keep personal information only as long as needed for the purposes in this policy, to run our business and to meet legal requirements. Shopper and store data is deleted after a merchant uninstalls our apps, as described in our Data Processing Addendum. Deleted information may remain in backups for a limited time before it is automatically removed.
We use physical, technical and organisational safeguards suited to the sensitivity of the information, and our apps are hosted on Amazon Web Services. No system is completely secure, so we cannot guarantee the security of information sent to us electronically.
8. Your Rights
Depending on where you live, you may have the right to:
access the personal information we hold about you;
correct or delete it;
object to or restrict how we use it, including for marketing;
receive a copy in a portable format; and
withdraw consent where we rely on it.
If you have a concern about how we handle your information, please email privacy@casaapps.com first and we will work with you to resolve it. If you are in the European Economic Area or the United Kingdom and are not satisfied with our response, you also have the right to complain to your local data protection authority. California residents can use the same email to ask what information we hold about them or to have it deleted.
To make a request, email privacy@casaapps.com. We may need to verify your identity first. If your request is about information a store holds, we will refer you to that store. You can stop receiving our marketing emails at any time using the unsubscribe link in any email.
9. Other Information
Children
Our apps and website are not meant for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
Third-party sites
Our website and apps may link to other sites and services, such as Shopify. Their own privacy policies apply, and we are not responsible for them.
Changes
We may update this policy from time to time. We will post the new version on this page with a new date, and tell merchants by email about significant changes.
Contact us
Privacy questions and requests: privacy@casaapps.com
Support: support@casaapps.com