Goovii apps privacy

What this policy covers

It covers the Goovii mobile apps: Goovii (for guests of venues), Goovii Бізнес (for owners) and Goovii POS (point of sale). Everything else is described in the general Privacy Policy at goovii.com/en/privacy.

Data controller: ORITOOL LLC, EDRPOU code 46152994, 32A Mykoly Amosova St, Vinnytsia, Ukraine. Email: [email protected].

Goovii — the guest app

Account data: email or phone number used to sign in with a one-time code, first name, last name, contact phone. Optionally — gender (you can choose “Prefer not to say”) and date of birth.

Activity at venues: orders, table bookings, purchases, loyalty points, gift certificates, order ratings.

Device: language, push notification token (Firebase Cloud Messaging) and platform (iOS or Android).

Location — only when you tap “Nearby”: the point is sent to sort venues by distance. It is not stored anywhere and is not written to logs.

Why: signing in, placing orders and bookings, loyalty and certificates, order status notifications. Marketing from a venue or Goovii is sent only with your separate consent, which you can turn off in your profile.

Who receives it: the venue you interact with — when you show your QR code at the counter, order or book, the venue receives your name, contact phone and profile details. Each venue keeps its own guest records.

Goovii Бізнес — the owner app

You sign in with your Goovii dashboard email and password; accounts are created in the dashboard, not in the app. The app shows your venue’s data (sales, shifts, receipts, stock) and stores a device token for push notifications.

Face ID / fingerprint is checked by the phone itself — biometric data never reaches us.

Goovii POS — the point of sale

The POS works with the venue’s data: products, receipts, shifts, guests, staff. Staff members sign in with a PIN.

The camera is used only to scan QR codes (guest, certificate). Bluetooth and the local network are used for receipt printers and card terminals.

Service providers

Google Firebase Cloud Messaging and Apple Push Notification service deliver notifications. Mailgun sends sign-in codes by email. monobank and LiqPay process online payments when a venue enables them: card details are entered on the bank’s page and we never see them. Cloudflare protects and delivers traffic.

We do not sell personal data or use it for third-party advertising. The apps contain no advertising identifiers and no third-party tracking.

Storage and security

Data is stored on servers in Ukraine and transferred only over encrypted connections (HTTPS). Sign-in codes are stored only as a hash and expire after 5 minutes.

Guest account data is kept for as long as the account exists.

Deleting your account

In the Goovii app: Profile → “Delete account”. Your email, phone, name and profile details are erased immediately and you are signed out on all devices. The link between your account and venues is removed. The guest record a venue keeps in its own accounting (purchases, points, and the name and phone you shared with it) stays with that venue — to delete it too, contact the venue or us.

To delete an account without the app, or a Goovii Бізнес account, email [email protected] from the address linked to the account.

Your rights and children

You can request a copy of your data, correct it, withdraw consent to marketing or delete your account, and you can complain to the Ukrainian Parliament Commissioner for Human Rights.

The apps are not intended for children under 13.

Questions — [email protected].