Privacy Policy

ASAP Company SNC ("ASAP", "we"), based in Lausanne, Suisse, operates the ASAP App mobile application and service (the "Service"). This policy describes the personal data we collect, the purposes of processing, and your rights under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the GDPR.

1. Data we collect

We collect: (a) account data (email, name, phone, hashed password); (b) transaction data (orders, amounts, payment method — handled by Stripe); (c) location data when you use the app to find nearby food trucks; (d) push notification tokens; (e) reviews and favorites you submit; (f) technical data (device type, OS, language).

2. Purposes

Your data is used to: perform the contract (process orders, identify you, contact you), improve the Service, prevent fraud, and comply with our legal obligations (notably tax).

3. Legal basis

Processing is based on the performance of the contract (FADP art. 31 §2 lit. a / GDPR art. 6 §1 b), your consent for push notifications and geolocation (GDPR art. 6 §1 a), and our legitimate interest in security and improvement of the Service.

4. Sharing with third parties

We share strictly necessary data with: Stripe (payments), Supabase (database hosting — data stored in the EU), Mapbox (maps), Firebase Cloud Messaging (push notifications), and the food trucks you order from (name, order number, pickup code).

5. Retention

We retain your data as long as your account is active, plus the legal retention period for commercial records (10 years for Swiss accounting data). You may delete your account at any time from the app.

6. Your rights

You have the right to access, rectify, delete, restrict processing, port, and withdraw consent at any time. To exercise these rights contact us at privacy@asap-app.ch.

7. Security

Your data is encrypted in transit (TLS 1.2+) and at rest. Passwords are hashed with bcrypt. Production data access is restricted and logged.

8. Cookies and identifiers

The app uses secure local storage to keep your session. No third-party tracking cookies are used.

9. Changes

We may update this policy. Material changes will be notified in the app. The version in force is dated below.

Contact

Questions: privacy@asap-app.ch. General support: support@asap-app.ch.

v2026-04-26