Privacy Policy

1. Who we are

1.1 BlinkFix is run by BlinkFix Ltd, a company registered in England and Wales (company no. 13505930), registered office 27 Old Gloucester Street, London WC1N 3AX, United Kingdom ("BlinkFix", "we", "us"). We are the controller of the personal data described in this policy, except where section 1.4 says otherwise. Contact us about privacy at [email protected] or by post at the address above.

1.2 This policy covers the BlinkFix app for iPhone and Android, the websites blinkfix.me (including app.blinkfix.me) and enterprise.blinkfix.me, the BlinkFix Enterprise app, our emails and our support. It applies to customers, people who run or work at an establishment, delivery companies and their drivers, suppliers, channel partners, BlinkFix Enterprise users, people who contact us, and business contacts.

1.3 Establishments (the restaurants, food trucks, local cooks and shops on BlinkFix) receive the details they need to fulfil your order or booking and are separate controllers of that data. They are responsible for how they use it. Delivery companies (independent businesses that deliver orders) and their drivers receive the details they need to deliver your order. They are also separate controllers of that data and may use it only to make the delivery and handle problems with it.

1.4 BlinkFix Enterprise. When an organisation (for example a chain of establishments) puts personal data about its staff, establishments or contacts into BlinkFix Enterprise, the organisation is the controller and BlinkFix processes that data for it as its processor, under our Data Processing Agreement. Questions about that data should go to the organisation first. The same applies to staff data an establishment enters in its staff tools.

1.5 Registration. Our registration with the UK Information Commissioner's Office has been applied for (application C2042936).

EU representative (Art. 27 GDPR)

We are based in the UK, so under Article 27 of the EU GDPR we have appointed a representative in the European Union. People in the EU and EU data protection authorities can contact our representative, instead of or as well as us, about anything to do with how we process personal data:

• Michał Michalek, EU representative of BlinkFix Ltd
• Poland (postal address on request at [email protected])
• Email: [email protected]
• Phone: +48 505 643 432

You can also contact us directly at [email protected].

2. What we collect

2.1 Information you give us

• Account: first and last name, display name, email address, phone number, date of birth (to check you are 18 or over), password (stored only as a secure hash), account type (customer or student), and your home address (country, region, city, postcode, street and number). We record when you accepted our terms and which version, and whether you accepted electronic receipts (you can change that in Settings › E-mails).
• Profile, if you add it: profile and background photos, saved addresses, allergies (see section 2.4), favourites, friends and friend requests, blocked users, language and display currency, look-and-feel settings (skins), and whether you want marketing emails.
• Orders and bookings: what you order, notes, pickup or delivery, the delivery address, table bookings (name, phone, number of people, notes), tips, split bills (the people in the split, their shares and whether they paid), promo codes, receipts, ratings and reviews, and any dispute (messages and photos). If you buy as a business: company name, VAT number and billing address for the invoice.
• Payments: card details are entered straight into Stripe's secure form and go to Stripe, not to us. We receive a reference to the payment, the last four digits and brand of a saved card, and the payment status.
• Wallet and payouts: if you receive money on BlinkFix (tips, recipe earnings, a returned car deposit, a delivery company's or a partner's share), the entries in your BlinkFix wallet, what is held and until when, your payouts, and the payout account Stripe holds for you.
• Content: recipes, photos, reels, stories and other videos, shopping lists, chat messages, reports you send, and skins you create. When you report a chat, the report includes up to the last 100 messages of that conversation so our team can review it.
• Videos you record in the app: the app records and cuts your video on your phone. BlinkFix receives only the finished parts you upload, never the raw recording. On the website you upload a finished video, and an establishment can also record one take with its browser's camera for an advert.
• Student plan: the university email address you confirm (and the 6-digit code we send to it, stored only as a hash), photos of your student card, what our automatic check read from the card (name, institution, validity date) and the result (see the Student Plan Terms).
• If you run an establishment: its name, legal name, type, address, phone, VAT or other tax number, currency, opening hours, cuisines, menus or products with photos, allergens and prices, delivery settings (including whether delivery companies may deliver), tables, promotions and adverts (budget, area, clicks), purchases from suppliers, staff and their roles, payout status, integrations you connect (their secrets are stored encrypted), and how it issues its fiscal receipts (the kind of connection, the details of its fiscal printer, software register or provider account, and its status) with the fiscal receipts and reports issued through BlinkFix. To receive payouts you give Stripe your identity and bank details during Stripe's onboarding. Where the law requires us to report sellers' income to tax authorities (see section 3), we also collect your tax identification number, your date of birth if you are an individual, and your company registration number.
• If you work at an establishment: your job and role, start and end dates, your PIN for the Establishment tablet (stored only as a hash), clock-in and clock-out times with any corrections, bonuses and tips received.
• If you run or work for a delivery company, a supplier or a channel partner (BlinkFix Enterprise): your company's details and the documents you upload for review; for a delivery company, your drivers (names, contact details, papers, shifts and the deliveries they make, with proof of hand-over), your wallet, payouts and BlinkFix's invoices to you; for a supplier, your catalogue, orders and invoices; for a channel partner, your referral code, the accounts you signed, your messages with them, your statements and the details Stripe holds for your payouts. If a delivery company asks a driver for a car deposit: the amount, its status and, if the company makes a claim, the photos and notes of both sides.
• BlinkFix Enterprise: your work email and its verification, your seat and job title, phone number, messages, files and document acceptances, and actions you take for your organisation.
• Support and contact form: name, email, phone, subject and message.
• AI features: what you write or dictate to the assistant and what you attach, if you use it; the description you type for an AI skin. See the AI Terms and Disclosure.

2.2 Information collected when you use BlinkFix

• Location, only if you allow it: your device's location while you use the app or website, to show establishments near you and fill in addresses. We save it as your "last location" and replace it each time. If you share your exact delivery point with a driver, that point is stored with the order.
• Devices: a push-notification token for each device you sign in on (the Enterprise app also stores the device's name). On the websites, the cookies described in our Cookie Policy.
• Camera and microphone, only if you allow them: used to take a photo, record a video or scan a code, and only while you do that. A recording stays on your phone until you upload the finished part.
• Online status: if you work at an establishment, whether you are online in the app is shown to your workplace.
• Face ID or fingerprint, if you switch it on: your phone checks your face or finger. BlinkFix never receives or stores it.
• Tablet sign-ins: at an establishment that uses an Establishment tablet, each PIN sign-in and clock-in (right or wrong), which tablet and when, and each PIN reset. The PIN itself is never logged.
• Purchases in the apps: for plans, tablet licences, advert budgets and AI credits bought through Apple or Google, the product, dates, status and the transaction record signed by Apple or Google. We never receive your Apple or Google payment details.
• Usage of AI: which model was used, how many tokens and when (not the conversation).
• Recipe, reel, story and advert interactions: likes, shares and clicks. A click is counted only when you are signed in, and it is charged to an advertiser, and can pay a recipe author, only when it ends in a finished purchase. Watching is never counted.
• Security: your IP address is used briefly to limit sign-in attempts and contact-form messages and to protect the service; our API does not store it in its logs. When you pay on the website, Stripe receives your IP address for fraud prevention and tax.
• Enterprise access log: which user viewed which establishment, per day.

We do not use analytics, advertising or crash-reporting SDKs in the apps, and we do not read your contacts, calendar or photo library beyond the photos you pick. Adding a booking to your calendar is done on your device.

2.3 From other people and companies

• Establishments: for example, an establishment you work at records your hours, or an establishment bans a customer from ordering.
• Other users: friend requests, messages, split-bill invitations, and reports about you.
• Organisations on BlinkFix Enterprise: an admin who gives you a seat or invites your establishment enters your email.
• Delivery companies: a company you drive for enters your name and contact details, and asks you for a car deposit if it uses one.
• Stripe (whether a payout account is verified and ready, payment and dispute outcomes), Apple and Google (purchase, renewal and refund notices).
• Public sources, for business contacts only: see section 9.

2.4 Allergies (health data)

Allergies are information about your health, a special category of data. We only store them if you add them to your profile, with your explicit consent, and use them only to warn you about dishes that contain them. You can remove them at any time. Allergen information on dishes comes from the establishments, so always check with the establishment.

3. Why we use it, and our legal bases

UK and EU data protection law requires a legal basis for each use:

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects, with one exception: the Student plan check (a university email code and, if you choose it, an AI model reading your student card) can approve the Student plan's free establishment automatically. The AI can only approve; it never rejects. A card it cannot confirm waits for a person, and only a person rejects it. It is necessary for the contract you ask for (Article 22(2)(a) of the UK and EU GDPR). If you disagree with the result, write to [email protected]: a person reviews it, and you can give your point of view and contest the decision (see the Student Plan Terms). Moderation and dispute decisions are made by people, with one limit. When someone reports a reel, story or advert video, an automatic safety check looks at it once. If the check flags the video, the video is taken down at once and sent to a person. We do not think this has a legal or similarly significant effect on you, because the video is hidden, not deleted, and your account is not touched, but we tell you anyway: you are told why, you can ask for a review by a person, and a person decides whether the video comes back or is taken down for good.

4. Who sees your data

• Establishments you order from, book or tip: your name, phone number, order, notes, delivery address and, if you send it, your delivery pin. The person you tip sees the tip.
• Delivery companies and their drivers: if your order is delivered by a delivery company, that company and its driver see your name, phone number, order, notes, delivery address and, if you send it, your delivery pin. They are separate controllers and may use it only to make the delivery and handle problems with it.
• Suppliers and delivery companies, for establishments: when an establishment buys from a supplier, the supplier sees the establishment's name, address, contact details and the order. A delivery company that brings it sees the same, as far as the delivery needs.
• Channel partners: anyone who opens a partner's link or types its code sees the partner's name ("Invited by"). A partner sees the name of each company it signed and, for a brand, how many establishments it has. It can write to the head-office admins of a brand it signed and to the owner and managers of an establishment it signed, who can block it. It does not see orders, customers, staff, hours, pay or documents. BlinkFix gives partners no list of businesses and no contact details of businesses or people.
• Delivery companies that ask for a car deposit: the company sees the deposit's status and, if it makes a claim, the photos and notes of both sides. BlinkFix staff see them to decide a disputed claim.
• Other users: your display name and profile photo appear on recipes and reviews you publish. Friends see your profile and the messages you send them. People in a split bill see your name, your share and whether you paid.
• Your workplace: if you work at an establishment, its owner and managers see your hours, clock-ins, tablet sign-ins, bonuses and online status. If the establishment is company-owned in a chain on BlinkFix Enterprise, the chain's head office sees this too; for franchise establishments it does not.
• Head office of the brand you work for: if you work at an establishment that belongs to a brand using BlinkFix Enterprise (including a franchise), that brand's head office may message you through BlinkFix to ask for feedback. For this it sees your name, role and establishment only, not your phone, email, address, hours, pay, tips or documents, and the owner of your establishment does not see these messages. You can reply, ignore them, block that head office or report a message, and you can switch head office messages off in Work › More (Head office messages).
• Establishments' own systems: an establishment can connect its own CRM (HubSpot, Pipedrive, Salesforce), till (Square, Clover) or accounting software (Xero, QuickBooks), and use API keys and webhooks. If an establishment you order from has switched on contact sync, your name, email and phone are sent to its CRM; tills receive your name and order. The establishment is responsible for that use.
• Fiscal systems and tax authorities, for establishments: where an establishment issues its fiscal receipts through BlinkFix (a fiscal printer, a certified software register, a cloud fiscal service or an e-invoicing service, as the law of its country requires), we send the sales its country's rule asks to be recorded to that system, and through it to the tax authority of that country where its law requires the sale to be reported: the order number, the items, prices, VAT, how it was paid, the time and the establishment's details. We do not send your name, contact details or address, or a company name you give for an invoice. If you ask for a business invoice with a Polish NIP at an establishment whose fiscal printer is connected in BlinkFix, that NIP is sent to the printer, which prints it on the fiscal receipt, as Polish law allows at the buyer's request. The one exception is the United Arab Emirates: if you are a business there and ask the establishment for a tax invoice (by paying as a business with your UAE tax registration number), your tax registration number, registered name and business address are sent in the e-invoice to the establishment's e-invoicing provider, and through it to the Federal Tax Authority, once the UAE e-invoicing mandate applies (planned from 2027). No other tax number you give is sent, and if that changes this policy will say so first. We do this for the establishment, which is responsible for its fiscal records; for this BlinkFix is the establishment's processor (Merchant Terms 11.8). Where BlinkFix itself contracts the cloud fiscal service for a country, that provider is BlinkFix's sub-processor, working for the establishment, and is listed in section 5 before it receives any data.
• Our service providers (processors), who process data only on our instructions and under contract: see section 5 and the Sub-processors list.
• Stripe also acts as a separate controller for its own legal duties (anti-money-laundering, fraud prevention and payout onboarding).
• Apple and Google for purchases made through their stores; they act as independent sellers under their own privacy policies.
• Tax authorities: where the law requires platforms to report the income of sellers (see section 3), we report the details in section 2 about establishments and delivery companies paid through BlinkFix, and tell them what we reported.
• Authorities, courts and advisers when the law requires it, to protect people's safety, or to defend our rights; and a buyer of our business if BlinkFix is ever sold (they would have to respect this policy).
• BlinkFix staff can access data only as their job needs; access to sensitive items (such as student ID photos and Enterprise chats) is logged.

We do not sell personal data, we do not share it with advertisers or data brokers, and there are no third-party advertising trackers in BlinkFix. Establishments can pay to promote their listing inside BlinkFix; promoted listings are chosen by area, not by a profile of you.

5. Our service providers

Product details for shops can come from Open Food Facts, and currency rates from the European Central Bank; we send them no personal data. Establishments' own integrations (section 4) are chosen by the establishment, not by us. A cloud fiscal service that BlinkFix contracts for a country (section 4) is added to this table and to the Sub-processors list before it receives any data. The up-to-date list, including what changes are planned, is on the Sub-processors page.

6. International transfers

We are based in the UK and our servers run in Germany, but some providers are in the USA or other countries. When your data leaves the UK or the EEA, we rely on an adequacy decision (the UK and the EU recognise each other; both recognise Canada for commercial organisations, which covers our email server; the EU–US Data Privacy Framework and its UK Extension cover certified US companies), or on the European Commission's standard contractual clauses together with the UK International Data Transfer Addendum, with extra safeguards where needed. You can ask us for a copy of the safeguards at [email protected]. A sale that an establishment issues through BlinkFix goes to the fiscal system and the tax authority of the establishment's own country (section 4). Where that country is outside the UK and the EEA and no adequacy decision covers it, that transfer is made only because it is necessary for the purchase you make from that establishment (Article 49(1)(b) of the UK GDPR and of the EU GDPR), and only the sale data listed in section 4 goes. A fiscal service provider that BlinkFix contracts outside the UK and the EEA receives data only under one of the safeguards above.

7. How long we keep it

8. Your rights

Under UK and EU data protection law you have the right to:

• get a copy of your personal data;
• have wrong data corrected (most of it you can edit in your profile);
• have your data deleted;
• restrict how we use it, or object to uses based on legitimate interests, including profiling;
• object to direct marketing at any time, which we always respect;
• receive the data you gave us in a machine-readable format and have it sent to another company;
• withdraw consent at any time (for location, allergies, the AI assistant and marketing), without affecting what we did before.

To use your rights, email [email protected] from the address on your account, or use Get a copy of my data in the app. We may ask you to confirm who you are. We reply within one month (extendable by two months for complex requests, in which case we tell you). It is free unless a request is clearly unfounded or excessive.

You can complain to the UK Information Commissioner's Office (ico.org.uk) or, in the EU, to the data protection authority where you live or work (in Poland, the Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl). We would like the chance to help first.

If you live in the European Economic Area. The rights above also come from the EU GDPR as it applies in the EEA. Our EU representative (section 1) covers all EEA countries. You can complain to the data protection authority of the country where you live or work.

If you live in the United States. We collect the categories of information listed in section 2 (identifiers; commercial information such as orders; precise location if you allow it; health information if you add allergies; account log-in details; content you post). We collect them to run BlinkFix, as section 3 explains. We do not sell personal information, we do not share it for advertising across other businesses, and we do not use it for targeted advertising. We use sensitive information (precise location, allergies, log-in details) only to give you the service you asked for. Depending on your state, you have the right to know and get a copy of your information, to correct it, to delete it, to move it to another company, and to appeal if we refuse a request. We will not treat you worse for using these rights. You can use an authorised agent. Use the contact above. We answer within 45 days and may extend that once by 45 days.

If you live in the United Arab Emirates. Where the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data applies to our processing of your data, you have the rights of access, correction, deletion, restriction, objection, data portability and withdrawing consent, and you can complain to the UAE Data Office. When we send your data outside the UAE we use the safeguards in section 6.

9. Business contacts

To grow BlinkFix we contact establishments: restaurants, food trucks, cooks and shops. We may hold the business contact details of the people who run or work for them (name, role, work email and phone) from public sources such as the business's own website and listings, from lists we import, or from research tools including AI with web search (Google Gemini). We use them only to offer BlinkFix to the business, based on our legitimate interests, and every email has an unsubscribe link. We send marketing emails to individuals who are not contacting us as part of a business only with their consent. If you ask us to stop, we stop and keep your email on a do-not-contact list so that it is never used again. We do not give these contact details to channel partners or to anyone else.

10. Marketing and notifications

• We send newsletters and offers by email only if you opt in. Every email has an unsubscribe link, and you can change your choice in your profile.
• Account emails (codes, receipts while you accept electronic receipts, invoices, security and legal notices) are part of the service and are sent even if you have not opted in to marketing.
• You control push notifications in your device settings. To stop only the "new establishment near you" notifications, email us. BlinkFix Enterprise has per-organisation notification settings.

11. Cookies

Our websites use only cookies and browser storage that are strictly necessary (signing in, your language and currency choices, and fraud prevention on payment pages), so there is no cookie banner. Details are in the Cookie Policy. The apps do not use cookies and keep your sign-in in the iOS Keychain or Android Keystore.

12. AI

The AI assistant and AI skins are optional and ask for your consent before anything is sent. They use Google's Gemini models on the paid tier, and your data is not used to train AI models. For the Student plan, an AI model reads the student card you upload, through the same provider, as part of the check you ask for (see the Student Plan Terms). One check does not need your consent: when someone reports a reel, story or advert video, BlinkFix sends its poster and three still pictures (no sound) to the same provider once, to check that the video is safe. The pictures are not kept. See the AI Terms and Disclosure.

13. Children

BlinkFix is for adults: you must be 18 or older to create an account. Establishments sell alcohol through BlinkFix, every account can pay by card and open an establishment that receives payouts, and users can message each other. We ask for your date of birth when you register and refuse sign-ups under 18. If we learn that an account belongs to someone under 18, we close it and delete its data. If you think a child has given us data, email [email protected].

14. How we protect your data

All traffic is encrypted in transit (HTTPS/TLS). Passwords and PINs are stored as hashes, integration secrets are encrypted, sign-in tokens are kept in secure device storage or http-only cookies, student ID photos are kept in a private store and opened only through short-lived links, and access to production data is limited to the people who need it and logged for sensitive items. No system is perfectly secure; if a breach is likely to put you at risk, we will tell you and the regulator as the law requires.

15. Deleting your account

You can delete your account yourself in the app (Me → Your details → Account → Delete account), on the website (Profile → Delete account), or by email. The steps, and what is kept, are on the Delete account page. Plans you pay BlinkFix for by card are cancelled when the account is deleted. Subscriptions bought through Apple or Google must be cancelled in your store account; deleting your BlinkFix account does not cancel them.

16. Changes to this policy

We update this policy when BlinkFix or the law changes. The date and version at the top show the latest version. If a change matters, we tell you in the app or by email before it applies.

17. Contact

BlinkFix Ltd, 27 Old Gloucester Street, London WC1N 3AX, United Kingdom · [email protected] · Support