Privacy Policy

Effective Date: May 2025
Operator: Chilli Deals OÜ
Address: Mõisa 4, Tallinn, 13522, Estonia
Email: info@chilli.ee

Chilli Deals OÜ (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Chilli Plus mobile application (“App”).

We comply with the General Data Protection Regulation (GDPR) (EU 2016/679) and other applicable privacy laws.

1. What Data We Collect

We only collect minimal data necessary to operate and improve the App. This may include:

Device and usage data: Such as device type, operating system, and interaction events (anonymous analytics).
User profile data (if applicable): Name, email address, user ID, saved offers, and preferences.
Location data: Only if you opt in — used for sorting offers by proximity.

We do not collect sensitive personal data (e.g., health, biometrics, financial data) and we do not track users for advertising purposes.

2. Legal Basis for Processing (GDPR)

Under the GDPR, we rely on the following legal bases:

Consent — when you explicitly opt in to share location or save personal data.
Legitimate interest — for operating the App and improving user experience.
Contractual necessity — when processing is needed to deliver app features you use.

You may withdraw your consent at any time by deleting your data or uninstalling the App.

3. How We Use Your Data

Display relevant local offers
Sort deals based on user proximity (if location access is enabled)
Enable Apple Wallet / QR-code functionality
Improve app performance and usability
Detect and prevent misuse or bugs

We do not use your data for advertising, profiling, or third-party resale.

4. Data Storage and Security

All data is securely stored using modern encryption and cloud infrastructure. We apply:

HTTPS communication
Access control and audit logging
Encrypted databases and backups

We retain data only as long as needed for the above purposes, or until the user deletes it.

5. Your Rights Under GDPR

As an EU user, you have the right to:

Access the personal data we store about you
Correct inaccurate or incomplete data
Request deletion of your data (“right to be forgotten”)
Withdraw consent at any time
Lodge a complaint with your local data protection authority

To exercise your rights, contact us at info@chilli.ee.

6. Third Parties

We may use the following third-party services that comply with GDPR:

Apple Wallet (for pass generation)
Adalo (mobile platform backend)
Google Maps (for displaying merchant locations)

No personal data is shared with these services unless required for a feature you’ve activated (e.g., map view or Apple Wallet pass generation).

7. Children’s Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal data from anyone under this age.

8. Policy Updates

We may update this Privacy Policy periodically. Updates will be published in the App and/or on our website. Your continued use of the App after changes are made constitutes acceptance of the updated terms.

9. Contact Us

If you have questions or concerns regarding this Privacy Policy or our data handling practices, contact us at:

Chilli Deals OÜ
Mõisa 4, Tallinn, 13522, Estonia
Email: info@chilli.ee