1. Who we are
The controller of your personal data is:
- ProMenu Oy
- Business ID: 3661412-7
- Lintukorvenkuja 1 A 1, 02660 Espoo, Finland
- Email: hello@blizzapp.com
This policy covers the Blizzapp customer app, the Blizzapp courier app, the business back-office and the websites blizzapp.com, promenuapp.com and book365.app. When you order or book on a business's own ProMenu or Blizz365 website or app, that business is responsible for its own relationship with you, and we process the data on its behalf.
2. What data we process
- Account details: name, phone number, email and language.
- Addresses and location: delivery addresses and, with your permission, your device's location to show places nearby. For couriers, location while they are online or on a job.
- Orders and bookings: what you ordered or booked, where, when, prices and notes to the business or courier.
- Payment details: payment status and amount, and the card type and last four digits. We never see or store your card number – it is handled by our payment provider Stripe.
- Reviews and support: ratings you give, support chat messages and photos you attach.
- Device and usage data: device type, app version, notification token, and error and security logs.
- For couriers also: what is needed to check identity and right to work, vehicle, and a bank account for payouts.
3. Why we process it
- To provide the service (contract): creating your account, passing orders and bookings on, delivery, payments, refunds and support.
- Legal obligations: bookkeeping, tax and requests from authorities.
- Legitimate interest: keeping the service safe, preventing fraud and improving the service with aggregated data.
- Consent: location from your device and marketing notifications. You can withdraw consent at any time in your device settings or the app.
4. Who we share it with
We never sell personal data. We share it only where the service needs it:
- The business you order from or book with: name, phone number, the order and, where needed, the address.
- The courier: first name, delivery address, phone number for the delivery and your instructions.
- Service providers processing data for us: Amazon Web Services (servers in Stockholm, EU), Stripe (payments), text message and email services for sign-in codes and receipts, and Apple and Google for app notifications.
- Authorities, where the law requires it.
Where data leaves the EU (for example to a provider operating in the United States), the transfer relies on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
5. How long we keep it
- Account details for as long as your account exists.
- Bookkeeping records (receipts, payments) for six years after the end of the financial year, as the Finnish Accounting Act requires.
- Courier location history for up to 12 months, unless it is needed to settle a dispute.
- Support conversations for up to two years after they end.
6. Your rights
You have the right to access your data, correct it, delete it, restrict or object to its processing, and take it to another service. You can delete your account yourself in the app or ask us by email – see Delete your account.
You can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) if you believe your data is processed unlawfully.
7. Security
Data travels encrypted, and only people who need it for their work can access it. Each business's data is kept separate from others' in the database.
8. Children
The service is meant for people aged 16 or over. Couriers must be at least 18.
9. Changes and contact
We update this policy when the service changes and tell you about important changes in the app. Questions: hello@blizzapp.com.