Foody Privacy Policy

1. What this Policy Covers

Foody is designed to be a safe, privacy-minimal food discovery and discount service.

• We do not collect payment data, home addresses, personal IDs, or any sensitive data.
• Users visit restaurants physically and pay on-site.
• No orders or payments happen inside Foody.

This Privacy Policy explains what data we process, why, and what rights you have.

2. Data Controller

Nordics Tech Oy
Business ID: 3367353-5
Tampere, Finland
Email: info@nordics.tech

3. What Personal Data We Collect

We only collect the minimum needed to operate the app.

3.1 Required Data

Google Account login data:

• Email address
• Google Account ID (pseudonymous identifier)

We do not receive or store your Google password.

3.2 Optional Data (provided only if you choose)

• Name or nickname
• Phone number
• Profile photo
• Favorite cuisines
• Restaurant preferences or swipe history

Users can edit or delete optional data at any time.

3.3 Technical Data

Collected automatically for service functionality and security:

• Device model
• Operating system
• App version
• IP address (server logs)
• Crash logs and technical diagnostics

We do not use advertising identifiers.

4. What Data We Do NOT Collect

Foody does not collect, store, or process:

• Payment cards or IBAN
• Home address or delivery address
• Social security number or identity documents
• Age or date of birth
• Any health data
• Purchase history outside the app
• Third-party advertising tracking

5. Why We Process Data

We process your minimal data only for the following reasons:

5.1 Service Access and Account Management (GDPR Art. 6(1)(b))

• Logging you into Foody
• Keeping your account active
• Showing personalized restaurant campaigns

5.2 App Security and Performance (GDPR Art. 6(1)(f))

• Preventing abuse
• Fixing bugs
• Ensuring reliability
• Monitoring system performance

5.3 Communication (Optional) (GDPR Art. 6(1)(a))

If you opt in:

• Notifications about nearby campaigns
• Updates or service announcements

You can disable notifications anytime in the app settings.

6. Data Sharing

We do not sell or rent your data. We share data only with:

6.1 Service Providers

Strictly for app hosting and operations (e.g., cloud servers, analytics). They act under written GDPR Data Processing Agreements.

6.2 Legal Authorities

Only if required by law and only the minimum necessary.

We do not share personal data with restaurants.

7. Data Transfers

Your data is stored inside the EEA. If we ever use providers outside the EEA, transfers follow GDPR safeguards such as:

• EU Standard Contractual Clauses
• Adequacy decisions

8. Data Retention

We keep your data only as long as needed:

• Account data → deleted immediately when you delete your Foody account
• Technical logs → up to 90 days
• Optional profile data → deleted instantly when removed by the user

9. Your Rights

You have full GDPR rights:

• Right to access
• Right to rectification
• Right to delete your account
• Right to restrict processing
• Right to data portability (for data you provided)
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with the Finnish Data Protection Authority

Account deletion can be done directly inside the app.

10. Updates to This Policy

We may update this Privacy Policy to reflect changes in the app. We will notify you of major changes inside the app or on our website.