Privacy policy

Who we are

JustIn WalkIn (“we”) operates the JustIn WalkIn mobile app and website — location-based offers from local shops, redeemed in person with a single-use code. We are based in Basel, Switzerland. Contact for anything in this policy: lestakm@gmail.com.

The short version

Your precise location never leaves your phone. Nearby-deal detection and the decision to show a notification run entirely on your device. Our servers only ever receive discrete actions you take — opening a deal, redeeming a code, following a shop.

What we collect

Account: your email address and sign-in credentials (handled by Supabase; if you use Google sign-in we receive your email and name from Google).

Profile, only what you choose to add: display name, avatar, age, postcode. Age and postcode are used for offer eligibility and coarse demographics and are stored only after you consent in the app.

Activity: deals you open, codes you redeem (including the purchase amount the staff enters), shops you follow, interests you pick, loyalty stamps, referral codes you use.

Device: a push-notification token, if you enable followed-shop notifications.

We do NOT collect: your movement history, background location, contacts, or advertising identifiers. The geofence check happens on-device and is never transmitted.

Why we process it (legal bases)

To run the service — accounts, offers, redemptions, loyalty (performance of contract).

With your consent — push notifications, demographic fields (age/postcode), marketing. Every consent is separate and can be withdrawn in the app at any time.

Legitimate interest — fraud prevention (rate limits, anomaly flags, bans) and aggregated, non-identifying statistics.

Where your data lives and who sees it

Data is stored in the EU (Supabase, Frankfurt). The website runs on Vercel. Push notifications are delivered through Expo's notification service (transfers safeguarded by standard contractual clauses).

Shops see the redemptions made at their own locations (time, deal, amount, code reference) — never your email or profile. Platform administrators can access data for moderation, fraud review and support.

We do not sell personal data, run third-party advertising, or use tracking cookies on the website.

Retention & deletion

Your data is kept while your account exists. Delete your account any time in the app (Profile → Danger zone) or at justinwalkin.com/delete-account: the account is erased and redemption records are anonymized (kept without identity for shops' accounting). Fraud-prevention records may be retained where the law allows.

Your rights

Access, correction, deletion, portability, restriction, and withdrawal of any consent — write to the contact above or use the in-app controls. You can complain to the Swiss FDPIC or your local EU data-protection authority.

Age

JustIn WalkIn is for people 16 and older.

Changes

We'll post any material change here and, when it affects your rights, notify you in the app. Effective: 6 July 2026.