Toimii app privacy
For staff using the Toimii app to manage submissions
The Toimii app lets staff at a Toimii-powered business view and act on incoming submissions — bookings, orders, and contact requests. This page explains what the app collects about you, the customer information it shows you, and how it's all handled.
Who's responsible
The business you work for is the data controller for the submissions you handle — they decide what's collected from their customers and how it's used. Toimii Digital operates the app and processes your account and device data as a processor, only to run the service on the business's behalf.
What the app collects about you
To sign you in and notify you, the app processes:
- Your name — the name you entered when you joined the team from an invite.
- A device identifier and a push-notification token — generated on your device so we can alert you when a new submission arrives.
- Your device platform (iOS or Android) and your notification preferences.
- A session token, stored securely on your device (Apple Keychain / Android Keystore), so you stay signed in.
Customer information you see
When you open a submission, the app shows you the customer's name, email, and phone number so you can respond — including tap-to-call and tap-to-email. The app doesn't collect this from you: it comes from the business's own forms, and is handled as described on the visitor privacy page.
How visitor information is handled
How your data is used
Your data is used only to operate the app — to sign you in, send you notifications, and show you the submissions for your location. There are no ads, no tracking across apps or the web, no analytics or crash-reporting SDKs, and nothing is sold.
Where it's stored
Your account and device data are stored in the EU — Toimii uses AWS Europe (Stockholm). Your session token is stored only on your device, in secure storage (Apple Keychain / Android Keystore).
Notifications and third parties
Push notifications are delivered through Apple (APNs) and Google (FCM), and routed via Expo's push service. The push token identifies your device only so a notification can reach it — it carries no customer data to third parties.
Keeping and deleting your data
You can delete your account and personal data at any time — in the app under Settings → Delete account, or from the web page below. Deletion removes your access and scrubs your name and contact details, and is completed within 30 days.
Your rights
Under the GDPR you can ask to access, correct, or delete your data. You can act in the app or contact us — and you also have:
- Right of access — request a copy of your data
- Right to rectification — correct inaccurate data
- Right to erasure — delete your account and data
- Right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuojavaltuutettu)
Contact
For questions about how the Toimii app handles your data, you can reach us at:
Toimii Digital
Email: support@toimii.io
Last updated: July 8, 2026