Privacy Policy

Who we are

Fav Limited (“Fav Limited”, “we”, “us”, “our”) operates the FavPass consumer app. FavPass lets members view loyalty passes, bookings, and account information connected to businesses that use FavCRM.

Questions about this policy or your data: [email protected].

Definitions

• App — the FavPass mobile application.
• Account — your FavPass member sign-in used to access the App.
• Personal Data — information that identifies you or can reasonably be linked to you.
• Service — the App and related support we provide for FavPass users.

Data we collect

Depending on how you use FavPass, we may collect:

• Account and profile — email address, name, phone number, profile photo (if you upload one), language preference, and sign-in credentials (including passkeys managed on your device).
• Bookings and loyalty — reservations, passes, points, tiers, and related activity supplied by merchants you interact with through FavPass.
• Location — approximate or precise location when you grant permission, used to show nearby studios, classes, and spas.
• Calendar — only when you choose to add a booking or event to your device calendar (write-only access).
• Notifications — push notification tokens and delivery metadata so we can send booking and account alerts you enable.
• Device and usage — device type, operating system, app version, diagnostic logs, and interaction data needed to operate and secure the Service.

We do not knowingly collect personal data from children under 13.

How we use your data

• Provide and maintain your FavPass account, passes, and bookings.
• Authenticate you and protect against fraud or abuse.
• Send service-related notifications you request or enable.
• Improve reliability, performance, and support for the App.
• Comply with legal obligations and enforce our terms.

How we share data

We may share Personal Data with:

• Merchants you visit — businesses whose passes or bookings you access through FavPass, as part of the service they provide to you.
• Service providers — hosting, analytics, email, and support vendors that process data on our instructions and under appropriate safeguards.
• Legal and safety — when required by law, to protect rights and safety, or in connection with a merger or asset sale (with notice where required).

We do not sell your Personal Data.

Retention

We keep Personal Data only as long as needed for the purposes above, including while your account is active. After an approved deletion request, we delete or anonymize FavPass account data within 7 days, except where we must retain specific records (for example bookings, invoices, or payment history) for legal, tax, fraud-prevention, or dispute resolution purposes. We describe retention on our account and data deletion page.

Security and transfers

We use commercially reasonable safeguards for data in transit and at rest. Data may be processed in Hong Kong and other locations where we or our providers operate. By using FavPass, you understand your data may be transferred to jurisdictions with different data protection laws.

Your choices and rights

• Update profile information in the App where available.
• Revoke location, calendar, photo, or notification permissions in device settings.
• Request deletion of your FavPass account and associated personal data — see Delete account & data.
• Contact us at [email protected] for access or other privacy requests.

Account and data deletion

You can request deletion of your FavPass account and associated personal data in the App or on the web. Full instructions, timelines, and what we delete or retain are on our dedicated page:

https://favcrm.io/favpass/delete-account

Changes

We may update this policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may also be communicated in the App or by email where appropriate.

Contact

Fav Limited — FavPass
Email: [email protected]
Account deletion: favcrm.io/favpass/delete-account