Privacy Policy
Last updated: 19 October 2026 · Flexi Corporation LLC, Tbilisi, Georgia
Who we are
marki (marki.ge) is a loyalty-card service run by Flexi Corporation LLC, Tbilisi, Georgia, the company responsible for your data. Businesses that use marki (salons, barbers and others) give the stamps and the rewards; we run the cards. This policy says what we collect, why, who sees it, and how to have it deleted.
What we collect
Your mobile number, which you confirm with a 4-digit code, and the language you use our pages in.
When you confirm your number in a browser, we save a random code in a cookie on that browser so it is recognised next time. We keep only a scrambled (hashed) form of it, and the browser's name and version as the browser reports them.
Your cards and stamps: at which business, which stand, and when. Your rewards: when they were given, and the name of the staff member who confirmed them.
If you add a card to Apple Wallet, your phone gives us an identifier for its Wallet and an address for notifications, so we can tell it when the card changes.
If you save a card to Google Wallet, Google keeps a copy of the card (the business, your stamps, the reward and the card's status; not your number) and updates it on your phone when we change it. Google tells us nothing about your phone.
For security: the time and IP address of each code request and of refused or suspicious actions (for example a wrong code), with the number involved.
What we never collect
Your name, email address, date of birth, payment details, contacts or advertising identifiers. We never read your phone's location. A wallet card may contain the business's address, so that your phone can show the card when you are nearby; that happens on your phone, and we learn nothing from it.
Why we process it
To run your cards: confirming your number, adding stamps, giving rewards and keeping wallet cards up to date. To keep it fair: limits on codes and stamps, and checks for copied stand links and guessed staff codes.
The service rests on our agreement with you (the Terms of Service); the fraud checks rest on our legitimate interest in keeping stamps fair for customers and businesses. No advertising, no profiling, no selling.
Cookies
mk_id recognises your browser after you confirm your number (400 days, renewed on each visit). mk_lang remembers your language (1 year). A session cookie keeps your tap while you confirm your number, and csrftoken protects our forms. No advertising or tracking cookies.
Who sees it
You see your own cards on our pages and in your wallet.
When you collect a reward, the staff member who confirms it sees the reward, your card, and your number with the middle digits hidden (for example +995 555 ** ** 56).
Businesses do not get access to your number. We may tell a business how many customers, stamps and rewards it has.
marki (Flexi Corporation) sees what it takes to run the service, and individual records when checking suspected fraud.
Service providers process data only on our behalf: DigitalOcean (our server and database, in Frankfurt, Germany), Apple (delivers updates to cards in Apple Wallet), Google (keeps cards saved to Google Wallet and delivers their updates), and the SMS provider that delivers your code. No one else.
How long we keep it
Your number, cards, stamps and rewards: until you ask us to delete them. A card's stamps expire 12 months after its last stamp. A browser that has not visited for 400 days is forgotten.
Records of codes sent, and of refused or suspicious actions, are deleted after 12 months. Web server logs (IP address, page, time) are deleted after 30 days. Database backups are kept 14 days.
Your rights
To get a copy of your data, correct it, delete it or object to its use, write to marki.support@gmail.com. We confirm the number is yours by sending it a code, and answer within 5 business days.
You can sign a browser out at any time: My cards → “Not your number? Sign out of this browser”.
Deleting removes your number, cards, stamps, rewards and remembered browsers at once. Records kept to fight fraud are deleted on the schedule above, and backups within 14 days. To remove a card from your wallet, delete it in Apple Wallet or Google Wallet; a card in Google Wallet is marked expired and emptied as soon as you delete your data with us.
If you think we handle your data unlawfully, you can complain to the Personal Data Protection Service of Georgia.
Children
marki is not meant for anyone under 16. We do not knowingly collect data from anyone under 16; if we learn that we have, we delete it.
Security
Every page travels encrypted (HTTPS). Codes and browser tokens are stored only in scrambled form. Wallet cards are signed, so they cannot be forged. Access to the data is limited to the marki team.
Changes to this policy
If we change what we collect or who sees it, we update this page. The date at the top always shows the latest version.
Contact
Flexi Corporation LLC, Tbilisi, Georgia. marki.support@gmail.com