Skip to main content
Loyalty runs on customer data, so a customer has to consent before you can process it. Consent is a single source of truth across every Lobyco service — accept once in the app, and the answer is visible everywhere. The service exists to keep you compliant: it tracks acceptance of terms and privacy policies for GDPR and similar regimes, manages marketing opt-ins per channel, versions each document, serves localised content, and keeps a full audit trail of every acceptance and withdrawal.

​
Customer consents

Necessary consents are requested during sign-up and are mandatory — the customer cannot finish registering without them. They cover the data processing the products fundamentally depend on, such as membership itself and email from the preferred store. Optional consents unlock extra product-specific functionality. Some can be switched off again; some cannot.

​
Device consents

These break down into consents for sharing data with third parties, for accessing device and OS data, and for advertisement. On mobile they run through the Data Privacy Manager, which sets a privacy level on the device. Third-party SDKs then decide what user-identifiable data they may access based on that level.

​
Agreements versus opt-ins

Every consent has a type, and the type decides whether a customer can change their mind.
Once a customer accepts a specific version of an agreement, neither the customer nor an admin can set it back to not accepted. Design your support flows around that.

​
Versioning

Consents are versioned so you can change the wording without silently re-interpreting an old acceptance. When a new version of the terms is published, customers get a popup on next use telling them the terms have changed and asking them to accept before continuing. This is what makes the Terms & Conditions flow work: the customer reads them at sign-up, or later from Profile → Permissions → Terms & Conditions. Other consents are managed by the customer at Profile → Permissions.
Consents are soft-deleted. Deactivating one keeps the historical record, so a past acceptance is never lost.

​
What is recorded

Each consent carries a unique key (for example terms_and_conditions, marketing_consent), its version and revision, its type, active and expiry dates, publish status, and localised name and content per language. Against that, each customer’s record captures:
  • Acceptance — when and how it was given
  • Withdrawal — when and how it was withdrawn, for OptIn types
  • Activation source — the channel it came through, such as WEB, MOAPP or EMAIL
  • Metadata — IP address, user agent, campaign information and similar audit context
Rejection is tracked distinctly from silence, so an explicit “no” is distinguishable from never having been asked. Reactivation is supported — a customer can accept, withdraw and accept again — and optimistic concurrency control prevents two conflicting writes from racing. Single and bulk activation and withdrawal are both available, and consents can be queried by key, ID, status or type, including a query for exactly those consents still awaiting a customer’s acceptance. Admins create, edit and version consents in the Admin Tool, with a rich text editor, multi-language content and bulk import and export.

​
API reference

Endpoint documentation: Consent.
Last modified on August 12, 2026