Privacy
Last updated 5 September 2026
Gellie is a referral tool for small shops. A shop puts up a QR code, a customer joins, and when they bring a friend the shop gives them something. To do that we hold a small amount of information about the people who join.
This page says exactly what we hold, who can see it, where it lives and how to get it removed. It is written plainly because a notice you cannot read is not one you have agreed to.
Who is responsible for your information
If you joined a shop's programme, that shop decides what to collect and what to do with it. Gellie stores and processes it on their behalf.
That matters for a practical reason: to correct or delete your details, the fastest route is to ask the shop. You can also write to us at edw.chydi@gmail.com and we will pass it on or act on it directly.
What we hold about a customer
Your name, so staff can find you at the counter.
Your phone number, for the same reason. It is the main way a shop identifies you.
Your email address, if the shop asks for one.
Your date of birth, only if the shop has turned that on.
Who invited you and who you have invited, because that is the whole point of a referral programme.
What you have earned and whether it has been handed over.
Purchase amounts, only if the shop records sales in Gellie. We never see a card number, a bank detail, or anything from a payment terminal — a member of staff types an amount by hand, or nothing is recorded at all.
A note, if staff wrote one about you. This is free text they typed, such as which friend you came in with.
If the shop asks you to confirm your number
Some shops turn on number confirmation. If yours has, you will be asked to send one WhatsApp message containing a code before you can join.
That message goes through Meta, who run WhatsApp. They deliver it to us and tell us the number it came from. We do not send you anything through WhatsApp — not then, and not afterwards. Meta's handling of the message is covered by their own terms.
While you are confirming, we hold the number you typed and the code, so we can match your message when it arrives. Once confirmed, we keep the number the message came from, because that is the number we know is yours.
If you start and do not finish, we delete it. Those records expire after 30 minutes and are removed. We do not keep the phone number of somebody who never joined.
A shop can also confirm your number by hand — if you have no WhatsApp, staff can vouch for you at the counter. We record who did that.
What we hold about a shop
The shop's name, its web address on gellie.app, the terms of its programme, and a login email and password for the owner and each staff member. Passwords are stored hashed by our authentication provider and are never visible to us.
We also keep a record of who did what — who counted a visit, who handed over a reward, who voided a sale. That is what makes a shared counter accountable, and a shop owner can see it.
What we do not do
We do not sell your information, and we do not share it with advertisers.
We do not run advertising or analytics trackers on our pages. There is no Google Analytics, no Facebook pixel, no third-party script watching you read this.
We do not send you marketing. The only emails we send at all go to shop owners, about their own account.
One shop cannot see another shop's customers. That separation is enforced in the database itself, not only in the app.
Where your information is stored
Our database is hosted by Supabase, in a data centre in Seoul, South Korea. Our website runs on Vercel, which serves pages from locations around the world.
If your shop uses number confirmation, the message you send passes through Meta (WhatsApp) before reaching us.
This means information about you leaves Indonesia and is stored abroad. We are telling you plainly because it is the sort of thing a privacy notice usually buries. Both providers are subject to contractual obligations to protect the data they hold for us.
Cookies
Two, and neither of them watches you.
A login cookie, only for shop owners and staff, so you stay signed in. Customers who join a programme are never asked to log in and get no login cookie.
A language cookie, holding one word — "en" or "id" — so the site stays in the language you picked.
How long we keep it
While the shop is using Gellie, we keep your record so the programme works — a reward earned last year is one you can still be given.
If a shop stops using Gellie, we delete its data, including its customers, 12 months after the account becomes inactive.
You can ask to be removed sooner, at any time, and we will do it.
Your rights
You can ask what we hold about you, ask us to correct it, and ask us to delete it.
Ask the shop, or write to edw.chydi@gmail.com. We will answer within 30 days. There is no charge.
Deleting your record means your referral history goes with it — including rewards you have not yet been given. We will say so before we do it.
Children
Gellie is not built for children. Shops should not add anybody under 17 to a programme. If you believe we hold information about a child, write to edw.chydi@gmail.com and we will remove it.
Changes
If we change this notice we will change the date at the top. If a change matters — if we start collecting something new, or move where data is stored — we will tell shop owners by email rather than quietly editing this page.
Contact
edw.chydi@gmail.com