Privacy Policy

1. Legal Basis for Processing (EU/EEA Users)

As Oninfinite is established in Finland, we process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Finland's Data Protection Act (Tietosuojalaki). Our legal bases include: performance of a contract (creating your account, processing orders and payments), compliance with legal obligations (e.g. financial record-keeping), and legitimate interest (e.g. fraud prevention, platform security).

2. Information We Collect

• Identity & contact information (all users): full name, email address, mobile phone number
• Authentication data: Google sign-in (email, name, Google ID) or one-time codes sent for email/phone sign-in (not retained after use or expiry)
• Courier-specific information: government ID, date of birth, profile photo, driving licence, vehicle registration and insurance documents, inspection status, declared assistant information, work-permit/business-registration documents
• Location data: courier GPS location while Online or on an active delivery, and pickup/destination locations entered per order
• Order & payment information: order history, amounts, payment status, and Stripe transaction references — we never store your card number, CVV, or expiration date
• Device & notification data: device tokens used to deliver push notifications via Firebase Cloud Messaging

3. How We Collect Information

• Directly from you, during sign-up, profile completion, or when placing an order
• Automatically, through the app (e.g. location data while a courier is active)
• From third-party sign-in providers (such as Google), only with your explicit permission

4. How We Use Your Information

• Create and manage your account and authenticate you
• Verify courier/driver eligibility, including document review and compliance with transport regulations
• Calculate order pricing and delivery routes, and match orders with the nearest eligible courier
• Provide live delivery tracking to customers and couriers
• Process payments and courier payouts
• Send notifications related to orders, payments, and your account
• Prevent fraud and misuse (e.g. enforcing platform-wide phone number uniqueness)
• Comply with legal obligations (e.g. retaining financial records)

5. Sharing Information With Third Parties

We share your information only as necessary with the following service providers. We do not sell your information to third parties for advertising purposes.

• Stripe — customer payment processing and courier payouts (Stripe Connect)
• GraphHopper — route and real driving-distance calculation
• Nominatim (OpenStreetMap) — address search and geocoding
• Firebase Cloud Messaging (Google) — push notification delivery
• Meta WhatsApp Business Cloud API — one-time code (OTP) delivery
• Resend — one-time code delivery via email
• SMS provider — OTP fallback when WhatsApp is unavailable

6. Location Privacy

A courier's location is only recorded while they are Online or on an active delivery — never while Offline. A courier's live location is only visible to the customer of their currently assigned order, never to other customers. Admin Panel access to location data is restricted by role-based permissions. Live location data is stored in a fast in-memory cache (Redis) and periodically synced to our persistent database (PostgreSQL/PostGIS).

7. Security

• All communication is encrypted via HTTPS
• Authentication and access are controlled via JWT tokens
• Card details are never stored on our servers — handled entirely within Stripe's PCI DSS-compliant scope
• Sensitive data (passwords, session tokens, card details, national ID numbers) is never included in push notifications
• Notification registration and location updates are only accepted from authenticated users
• Logging out revokes your device's notification registration

8. Data Retention

• Financial records and transactions are retained for a minimum of 6 years from the end of the relevant accounting year, per Finland's Accounting Act (Kirjanpitolaki)
• Courier verification documents (ID, licence, insurance) are retained for the duration of your active courier status plus a limited period afterward
• General account and profile data is retained while your account is active, and for a limited period after deletion to prevent fraud and handle outstanding disputes
• If you delete your account, the phone number/email associated with it remains blocked from new sign-ups for a period, to prevent misuse

9. Your Rights

Depending on the laws of your jurisdiction, you may have the right to access the personal data we hold about you, correct inaccurate data, change your phone number or email from within your account, and request deletion of your account. You can opt out of non-critical notifications — critical notifications related to order status, payments, payouts, and document expiry cannot be disabled, for operational and legal reasons. To exercise any of these rights, contact us below. If you are not satisfied with how we handle your personal data, you also have the right to lodge a complaint with Finland's Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), or with your local supervisory authority if you reside elsewhere in the EU/EEA.

10. Children's Privacy

Our services are not intended for individuals under 18, and we do not knowingly collect information from anyone under that age.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via in-app notification or email.

12. Contact Us

For questions about this policy or how we process your personal data, contact us below. This document should be read together with the Terms of Service and, if applicable, the Courier Recruitment Rules & Cooperation Terms.