Skip to main content

Mizi privacy

How does Mizi use your data?

This notice covers the Mizi app, digital menus and guest accounts. Technical facts are up to date; official contact details and retention periods still need to be finalized before public release.

Account deletion is available

Use Profile in the app or the account-deletion page. The [email protected] mailbox is not yet activated and verified; in-app support is available for other requests. This is not yet the final release notice.

01

Operator and scope

Mizi is a product of Abasoft GmbH.

This notice describes Mizi guest accounts, the mobile app, digital menus, orders, reservations and support. Each restaurant receives information relevant to providing its own order or reservation service.

Registered address: Abasoft GmbH, Rudolfplatz 3, 50674 Köln, Germany. The product display name is Mizi. Support mailbox activation is still pending.

02

Website forms

Submitting a contact request is your choice.

With your consent, the digital-menu contact form sends your name, phone, venue name and type, menu language and page path to the Mizi sales inbox to handle your request. Some demonstration forms only prepare information locally and transmit nothing; each form’s result distinguishes these states.

03

Accounts and sign-in

Browsing menus does not require an account.

Depending on your chosen sign-in method, we process your phone number or email, display name, account identifier and information needed to verify access. Passwords are stored as hashes.

Apple or Google sign-in provides a verified provider identifier and the information you choose to share in that flow. The token needed to revoke Apple access is stored encrypted. Device and session information supports secure access and abuse prevention.

04

Orders, reservations and optional information

Information is processed for the services you use.

Orders, items, prices, payment status and wallet records support fulfilment and dispute handling. Delivery also requires your address and chosen delivery point.

Saved addresses, favorites, reviews, support messages and notes you submit are associated with your account. Published review text is visible to other people.

Payment card entry takes place with the payment provider; Mizi processes transaction references and status. Do not include passwords, verification codes or card details in support messages.

05

Location and nearby reminders

Location permission is optional and can be changed in device settings.

Nearby restaurant searches send coordinates rounded to three decimal places to the search service. Your selected delivery point can be more precise and linked to an order.

Nearby menu reminders require your choice and the relevant permission, and can use background location while the app is closed. Stored-region checks run on your phone. Declining permission does not block menu browsing.

Maps, address search and routing use map services; map providers also receive network requests, including IP addresses and requested map-tile areas.

06

Camera, notifications and local storage

Permissions support their corresponding features.

The camera reads menu and table QR codes. Scan images are not stored as camera images to build a user profile.

Installation identifiers and push tokens support relevant notifications. You can disable notifications in device settings.

Secure sessions, language, preferences and menu caches are stored locally. The website stores language in a cookie and theme in browser storage. Sign-out and account deletion clear personal local data; public menu caches are not account data.

07

Access and service providers

Data supports service delivery and secure operation.

Restaurants and authorized staff receive information relevant to their services. Authorized support staff handle support requests.

Hosting, backups, Apple and Google sign-in, notifications, email, SMS, maps and payment providers participate depending on the features used. The final processor list and processing locations will be completed before public release.

The current app does not implement cross-app advertising tracking or advertising pixels. Infrastructure and SDK providers may process technical data needed to provide their services.

08

Retention and backups

Account deletion does not immediately erase all financial records and every backup.

After account deletion, profile and contact details, addresses and personal preferences are erased or anonymized, and previous sessions are invalidated. Necessary financial and security records are retained separately.

Restricted, encrypted backups may contain older data until their retention period ends. A separate erasure ledger reconciles completed deletions before a recovered service is reopened; immediate erasure from every historical copy is not claimed.

The exact retention periods and grounds for financial, audit and contact-request records still need to be specified in the final notice.

09

Delete your account

Start deletion from Profile in the app or from the web.

Deletion requires signing into the same account, recent authentication when needed, and explicit confirmation. Active orders or reservations, wallet balances, pending payments or sole restaurant ownership must first be resolved.

Sign-in grants and sessions are invalidated. Apple revocation is queued and retried during provider outages. An offline restaurant device receives erasure when it reconnects and synchronizes.

Go to account deletion
010

Your choices and requests

Manage editable account information and optional permissions.

You can correct editable account details, change location and notification permissions in device settings or delete your account. Use in-app support for access, correction or other data questions.

[email protected] is the planned support address; delivery is not confirmed until mailbox activation is verified. The response process will be completed before public release.

Open decisions

Remaining items before this notice is final

None will be replaced with sample text or guesses.

Owner required

Controller contact

Confirm an active, monitored request mailbox and response process.

Management

Owner required

Processors and retention

Finalize processing locations, lawful grounds and retention periods for each data category.

Management and legal

Document governance

Every data change must appear here before release.

A receiving form, analytics, third-party service, account system, or new environment triggers review. The notice receives an effective date only after legal review, owner approval, and Persian/English parity.

Last technical review: 1 November 2026Next review: before public submission