Fudica

Privacy Policy

Last updated: 2026-01-01

1. Who we are

FUDICA LTD (“Fudica”, “we”) provides a SaaS platform for restaurant omavalvonta (self-control) records. We act as a data controller for our marketing site visitors and account holders, and as a data processor for end-user data uploaded by our customers.

2. Data we collect

  • Account data — full name, email, restaurant name, language preference, hashed password.
  • Operational data — temperature readings, cleaning checklists, deviation records, signatures of the worker who recorded them. Stored only while your subscription is active and for legal-retention purposes.
  • Billing data — handled by Stripe; we receive the customer ID, subscription state, and tax data, never card numbers.
  • Technical data — IP, user-agent, page-view timestamps for security and basic analytics.

3. Legal basis (GDPR Art. 6)

  • Contract (Art. 6(1)(b)) — for providing the service to paying customers.
  • Legal obligation (Art. 6(1)(c)) — to retain records demanded by Finnish food safety legislation.
  • Legitimate interests (Art. 6(1)(f)) — security logging, fraud prevention.
  • Legitimate interest (Art. 6(1)(f)) — Google Analytics visit measurement and Meta Pixel advertising measurement on the marketing site, including server-side purchase confirmation with hashed contact details (Conversions API) (see §7).

4. Where the data lives

All data is hosted in the EU on Supabase Cloud (Helsinki region eu-north-1). Email delivery uses Resend (EU region). Payments are processed by Stripe (Ireland). Operational and account data is not intentionally transferred outside the EEA. Marketing measurement tools described in §7 may transfer usage data outside the EEA under the EU–US Data Privacy Framework and standard contractual clauses.

5. Retention

Records of self-control entries are kept while the subscription is active plus a minimum of 1 year after termination (Ruokavirasto recommendation: 2 years). On request we will export your data and then permanently delete it within 30 days.

6. Your rights

Under GDPR you may request access, rectification, erasure, restriction, or portability of your personal data, and you may object to processing. Email privacy@fudica.com. You can also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

7. Cookies

The marketing site uses one functional cookie to remember your language. We load Google Analytics (Google Ireland Ltd) to measure visits and the Meta Pixel (Meta Platforms Ireland Ltd) to measure the effectiveness of our advertising; both set their own cookies and are not gated by the cookie notice. When you purchase a subscription, we also send Meta a server-side confirmation of the purchase (Conversions API) containing hashed contact and billing details (e.g. email, name, billing area) for advertising measurement and attribution. You can object to this processing at any time (see §6) and block these tools with browser settings or extensions; the site remains fully functional without them. The product app uses authentication cookies set by Supabase.

Questions? Email legal@fudica.com · FUDICA LTD.