Codi Privacy Policy

Who we are

Codi operates a mobile and web app connecting independent Lisbon venues with nearby customers through time-limited offers.

Contact: hello@codi.app

What we collect

From users: email address, password, approximate/precise location (with permission), redemption history.

From venues: business name, address, category, hours, description, login credentials, offer details, redemption records.

Why we collect it

To show relevant offers nearby, let venues manage offers, confirm and log redemptions, and improve the app.

Legal basis

Contract (to provide the service), consent (location access, withdrawable anytime), legitimate interest (basic analytics).

Who we share it with

Our hosting/database provider (Supabase). We do not sell personal data. Venues only see a redemption code and timestamp, not your email or activity.

How long we keep it

Account data is kept while your account is active. Redemption history is kept for a limited period for fraud prevention, then anonymised or deleted.

Your rights

Under GDPR you can access, correct, delete, or export your data, object to processing, and withdraw consent at any time. Use the tools in your account settings, or contact us at hello@codi.app.

Changes

We may update this policy as the app evolves.