Privacy Policy

DEMO, operating get-demo-app.com, is the controller of the personal data described on this page. For anything here — access, a correction, a question, a deletion request — email info@get-demo-app.com.

• Your contact — email or mobile number

  The email or 8-digit Bahrain mobile number you enter to claim a drop or check your wallet. This is your identity in DEMO — there's no separate account, password, or signup screen behind it.

• Your claim and redemption history

  Which drops you claimed, when, and whether you showed up at the counter to redeem them. This is the actual product — DEMO exists to prove footfall instead of guessing it, so this history is kept for as long as your account is active.

• Push notification subscription — only if you turn it on

  If you tap to enable notifications, we store your browser's push address and the moment you agreed to receive them, so we can tell you about the next drop. Nothing else is sent. You can turn this off at any time in your browser or device settings, and doing so removes your subscription from our side too.

• A one-off email receipt — only if you claim with an email

  If you claim using an email address, we send one copy of your code to that address so you don't lose it if you close the tab. It's sent once per claim, it isn't a mailing list, and claiming never signs you up for one.

• Your code, kept on your device

  Your claim code and wallet balance are cached in your browser's local storage so they're still there if you refresh the page or come back later. This stays on your device — it isn't something we read back from anywhere else.

• Your IP address, briefly

  Used only to stop one device from repeatedly hammering the claim button. It's checked in memory at the moment of the request and isn't stored alongside your claims.

• Product analytics — only where enabled

  Some deployments of DEMO use PostHog to understand how the app is used and, where session recording is switched on, to capture on-screen activity (taps, scrolls, what's visible on the page) so we can find and fix problems faster. This is kept separate from your claim contact by design — it isn't linked to your email or mobile number. Because a session recording can capture whatever is on screen, including text typed into a field, treat any form on this site the way you would any other website.

Your data is stored with Supabase, our database provider, on infrastructure outside Bahrain. We are completing formal verification of the hosting location against the PDPL's approved-jurisdictions list; until that closes, we apply the safeguards the PDPL requires for personal data processed across borders, and this section will name the confirmed location once verification is settled.

Claiming a drop or checking your wallet never enrolls you in marketing. The only marketing-adjacent thing we do is the push notification described above, and only after you explicitly tap to turn it on. You have an absolute right to object to direct marketing at any time under the PDPL — turning off notifications, or emailing us, is all it takes.

Participating venues only see aggregated activity at their own counter — how many redemptions, when, and the code being redeemed. They don't receive your email or mobile number.

DEMO's own operations team can look up a contact's claim and redemption history where it's needed to run the service: helping with a claim that went wrong, resolving a dispute with a venue, or investigating abuse of a drop. That's the minimum access needed to run a service where your contact doubles as your account, and it isn't shared onward.

We don't sell personal data, and we don't share it with anyone outside DEMO for advertising or any other purpose.

• Access

  Ask what we hold about your contact.

• Correction

  Fix a wrong email or mobile number.

• Object to direct marketing

  An absolute right — we can't refuse it.

• Withdraw consent

  For anything we hold consent for, such as push notifications.

• Deletion

  Ask us to remove your data.

All of these work the same way: email info@get-demo-app.com.

We keep your claim and redemption history for as long as the service operates, since it's what your wallet balance and claim history are built from. Push subscriptions are removed automatically the moment you turn notifications off — you don't need to separately ask for that part. For anything else, email us and we'll delete what we can.

As a customer, DEMO doesn't use tracking cookies. Your claim code and wallet balance live in your browser's local storage, which stays on your device and isn't sent to us on every request — only when you use it. Venue and admin staff signing in to run drops or the counter use a session cookie, which applies only to staff accounts, never to customers.

If this policy changes in a way that matters, we'll update the date at the top. A significant change — like a new use of your data — gets a clearer notice, not just a quiet date bump.