1. Two parties, two roles#
- We, Verimly (Verimly), Newtonplein 20 A, 2562 JT 's-Gravenhage, The Netherlands, run Knownbee and are the controller of your Knownbee account: your sign-in details, member code, devices, settings and the terms you accepted. Contact: privacy@verimly.com.
- Each place you are a member of is the controller of its own card for you: your customer profile with that place, your visits, orders, points, stamps and rewards, and gift cards it issued. We process that data on the place’s behalf, under an agreement with the place. The app shows who the controller is and links to the place’s privacy notice before you join.
- A place only sees its own card for you. It never sees which other places you are a member of.
2. What we process for your account#
| Data | Purpose | Legal basis |
|---|---|---|
| Email address and/or mobile number, and when you verified them | Signing you in and finding the cards and gift cards that places registered for you | Contract (art. 6(1)(b) GDPR) |
| Name (optional), language, member code | Showing your account and identifying you at places | Contract |
| One-time codes and sign-in links (stored only in hashed form) | Signing you in securely | Contract |
| Sessions: device type (for example “iPhone”), platform, app or browser version, when it was last used | Keeping you signed in and letting you see and end sessions | Contract; legitimate interest in security (art. 6(1)(f)) |
| Accepted terms and privacy notice versions, with date | Recording what you agreed to | Legal obligation and legitimate interest |
| How each card looks to you: colour, pattern, nickname, pinned | Showing your wallet the way you set it up; places do not see it | Contract |
| Notification settings and, once notifications are available, the push token of your device | Sending you notifications you asked for, such as a stamp added or a reward ready | Contract |
| Wallet links (stored only in hashed form) | Adding your member card to Apple Wallet or Google Wallet | Contract |
| Single-use gift card codes (stored only in hashed form) | Letting you pay with a gift card at the till | Contract |
| Your approximate location, only if you allow it, while you look for places | Showing places near you and sorting them by distance. Rounded on your phone to about 100 metres and sent with that search only; we do not keep it with your account or keep a history of it | Consent, given through your phone’s location prompt; you can withdraw it in your phone’s settings at any time |
| The city or region of your network address, when you open the map without sharing your location | Opening the map near you. Determined by our hosting provider for that request and not stored | Legitimate interest |
| Records of messages sent (recipient only as a keyed hash, never the contents) | Preventing abuse and investigating delivery problems | Legitimate interest |
| Technical logs: network address, time and requested address of each request to our servers | Security, preventing abuse (for example too many sign-in attempts) and fixing errors | Legitimate interest |
You can look around in Discover and on the pages of places without an account. We then only process the technical data of each request (network address, time, requested page), as listed above.
The app keeps a few things on your phone so it works as you expect: your sign-in tokens (in the phone’s secure storage), your theme, whether you already answered the location question, and whether you chose to look around without an account. They are needed for the app to work, stay on your phone and are removed when you sign out or delete the app. Knownbee contains no advertising or analytics trackers and does not use your phone’s advertising identifier.
Knownbee makes no decisions about you based solely on automated processing that have legal or similarly significant effects.
3. If a place registered you before you used Knownbee#
When a place that uses Verimly registers you as a customer with your email address or phone number, for example when you book a table, order online, receive a gift card or join its loyalty programme at the till, we create a reserved Knownbee identity. It contains no contact details, no consents and no sessions; the place holds your details on its own customer profile. This lets you find that place’s card when you sign in later. The identity is not active, nothing is accepted on your behalf, and we do not contact you through it.
When you sign in to Knownbee with a verified email address or number that a place registered, we show you which places registered you, and their cards appear in your account after you accept the terms. If the place erases your profile before you sign in, the reserved identity is removed too.
4. What places receive#
When you join a place, the place receives your name and the contact details you used, sees that you use Knownbee, and records your visits, orders, points, stamps and rewards for its loyalty programme. If you agree to receive news and offers from a place, that place may contact you; you can switch this off per place in the app at any time. Places do not receive your member codes for other places, your other memberships, how your cards look in your wallet, or your session and device information.
5. Who else receives data#
We do not sell your data, and we do not use it for advertising.
- Our hosting providers: Google Cloud (Netherlands), where your account is stored, and Vercel, which serves our website, including the terms and this notice when you open them in the app.
- Bird B.V. (Netherlands), which sends sign-in codes, gift cards and messages from places by email and text message. A message waiting to be sent holds the recipient and contents only until it is sent.
- Apple (Apple Maps, on iPhone) or Google (Google Maps, on Android), which draw the map in the app. They receive the map area you look at and your device’s network address under their own privacy policies, never your account details. Directions open in your phone’s maps app.
- Apple or Google, only if you add your member card to Apple Wallet or Google Wallet. The card (your name and member code) is then stored in your wallet under their privacy policies.
- Authorities, only where we are legally required.
6. How long we keep data#
| Data | Retention |
|---|---|
| Your Knownbee account | Until you delete it, or after 3 years of inactivity following a notice to you |
| One-time codes and sign-in links | Valid for 10 minutes, deleted at the latest one day after expiry |
| Single-use gift card codes and wallet links | Valid for 5 minutes, replaced by the next one |
| Sessions | Signed out after 90 days without use |
| Messages waiting to be sent | Recipient and contents cleared once sent; the remaining record is deleted after 90 days |
| Records of messages sent | 12 months |
| Cards held by places | Determined by each place; erased when you leave the place or delete your account |
7. Your rights and controls#
- Download your data: in the app you can download everything in your Knownbee account, or what one place holds about you.
- Leave a place: the place’s customer profile for you is erased. Financial records of past purchases are kept by the place without your name and contact details.
- Delete your account: after confirming with a one-time code, your account and your profiles at all places are erased.
- Change your name, email address, phone number and language in the app; change your member code if you think someone else is using it, and sign out other devices.
- You also have the right to correct your data, to restrict or object to processing, and to withdraw consent at any time. For a place’s card, you can also contact the place directly. Email privacy@verimly.com for anything you cannot do in the app; we answer within one month.
- You may lodge a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) or the data protection authority in your country.
8. Deleting your account#
In the app: Profile, then Delete account. We send a one-time code to the email address or phone number on your account; once you enter it, your Knownbee account and your customer profiles at all places are erased straight away.
Without the app: email privacy@verimly.com from the email address on your account, or tell us the phone number on your account, and ask us to delete your Knownbee account. We confirm that the account is yours with a one-time code, erase it within 30 days (usually much sooner) and tell you when it is done.
What is kept: places keep records of past purchases without your name and contact details where the law requires them; records of messages sent (recipient only as a keyed hash, never the contents) are kept for up to 12 months to prevent abuse. Points, stamps, rewards and gift card balances held through Knownbee can no longer be used.
9. Security and transfers#
Your account is stored in the European Union. Codes, links and tokens are stored only as hashes, and all connections are encrypted. Some providers, such as Vercel, Apple and Google, are based in the United States or may access data from there; such transfers rely on the EU–U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses. More details are on our Security and Subprocessors pages on verimly.com.
10. Age and changes#
Knownbee is intended for people aged 16 and over. If you believe a child under 16 has created an account, email privacy@verimly.com and we will delete it.
We may update this notice. If a change matters to you, the app shows it and asks you to accept it before you continue. The current version is always in the app and on our website.