Loading
You joined a loyalty card, not a data platform. This is the whole of what KYP keeps about you, who can see it, and how to take it back.
Last updated 19 September 2026
A wallet is deliberately thin. Joining a shop needs a mobile number and nothing else; a name, an email address and a birthday are each optional and each asked for a stated reason.
No card or bank details. Shoppers never pay KYP anything, so there is nothing to store. If a shop takes payment, that happens at the counter and KYP is not part of it.
No location history. The marketplace can sort shops by distance, and it asks for your position only when you tap the button. That position stays in the browser tab and is never sent to KYP or kept.
No tracking of you across other websites, and no advertising profile.
A shop sees the members of that shop. It does not see the other shops you have joined, what you spend anywhere else, or that you are a member anywhere else at all. Each membership is separate.
Staff at a shop see your name, member code, and your progress and rewards at that shop, because that is what serving you at the counter needs.
KYP staff can see the data needed to run the platform and answer support, and privileged access is recorded.
Under the Data Privacy Act of 2012, the basis is the agreement you make when you join: a loyalty card cannot count your visits without recording them. Optional details — a birthday, an email address, a marketing channel — rest on your consent, which is why each one is optional and each one is reversible.
Your wallet and its history are kept while your account is open. Leave a shop and that membership's card closes; delete your account and the personal details go with it.
Some records are kept after that where the law requires it — a shop's own sales records are the shop's obligation, not yours to erase.
Sign-in codes are sent because you asked to sign in. Everything else is a choice you make per shop and can change at any time from Profile, in the wallet.
A shop can only reach you on a channel you left on. Turning one off takes effect immediately and does not need the shop's agreement.
The Data Privacy Act gives you the right to know what is held, to correct it, to object to how it is used, to have it erased, and to take a copy with you. All of it is in the wallet rather than behind an email request.
KYP runs on servers in Singapore, the nearest region to the Philippines, and the data is transferred there to be processed. It is not sold, and it is not shared with anyone beyond the providers that run the service — hosting, the SMS network that carries your sign-in code, and email delivery.
KYP is the party responsible for the personal information described here. Questions, requests and complaints go to privacy@kyp.ph and are answered on weekdays, Manila time.
If you are not satisfied with the answer, you may raise it with the National Privacy Commission.
If this notice changes in a way that affects what is collected or who sees it, the wallet will say so before the change applies to you, rather than quietly updating a page nobody re-reads.