Privacy Policy

Effective date: 17 June 2026

This Privacy Policy explains how Onyx Solutions (“us”, “we”, or “our”) collects, uses, and protects information in connection with the Käppi mobile application (the “App”). The App lets residents report the fill level of waste containers and request waste disposal for their housing.

We are committed to protecting your privacy. We do not use analytics or advertising tracking, we do not build profiles about you, and we do not sell your data.

By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

Who is responsible for your data

Onyx Solutions is the controller of the personal data processed through the App.

• Provider: Onyx Solutions
• Website: https://www.onyxsolutions.fi
• Contact: [email protected]

What information we collect and why

We collect only the information needed to operate the App and to keep the service free from misuse. Specifically:

• Your name (first and last name). Your name is attached to the waste reports and disposal requests you submit so that submissions can be attributed to a person. We use this to prevent spam, false reports, and other abuse, and to maintain accountability for requests.
• Photos. When you report a waste container, the App uploads the photo you take or select so the waste-collection service can assess the container.
• Address and location of the housing. When you select a housing address, the App uses an address-autocomplete service and submits an identifier for the chosen address with your report. This identifies the property a report relates to. The App does not track your continuous or background GPS location.
• Waste details. The waste type and the estimated fill level you report.
• Device information. Basic technical information about your device and the App version, submitted together with reports to help us operate and troubleshoot the service.
• Optional notes. Any free-text information you choose to add to a report.
• Crash and diagnostic data. If the App crashes or encounters an error, we receive technical crash reports (such as error messages, the state of the App at the time, device type, and operating-system version) through our crash-reporting provider. This helps us find and fix problems. We do not use this data for analytics or marketing.

Information stored on your device

Some information is stored locally on your device and stays there unless you submit it as part of a report. This includes your name, saved addresses, language and app preferences, and your history of submitted reports and disposal requests. You can remove this on-device information at any time using Settings → Delete app data.

What we do not do

• We do not use analytics SDKs or behavioural tracking.
• We do not use advertising identifiers or serve ads.
• We do not sell, rent, or trade your personal data.

Legal bases for processing (GDPR)

Where the EU General Data Protection Regulation applies, we rely on the following legal bases:

• Legitimate interests — operating the service, attributing reports to a person, and preventing spam, false reports, and abuse.
• Consent — where you voluntarily provide information (for example, optional notes and photos) and where consent is otherwise required. You may withdraw consent at any time by discontinuing use of the relevant feature.
• Compliance with legal obligations — where we are required by law to process or disclose information.

Who we share information with

We share information only as needed to provide the service:

• Waste-collection companies and property representatives. Your reports and disposal requests (including the photo, address, waste details, your name, and any notes) are made available to the parties responsible for the relevant housing so that they can act on the request.
• Service providers (processors) acting on our behalf, including:
  • our crash-reporting provider, which processes crash and diagnostic data so we can fix errors;
  • our address-autocomplete provider, used to look up and identify housing addresses;
  • our backend and hosting infrastructure, used to receive and store reports;
  • core mobile-platform services used to run the App.

These providers may only process data according to our instructions and for the purposes described above. We do not authorise them to use your data for their own purposes.

We may also disclose information where reasonably necessary to comply with a law, court order, or lawful request from a public authority, or to protect the rights, safety, and security of our users, the public, or Onyx Solutions.

International transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where that happens, we take steps to ensure an appropriate level of protection, such as relying on adequacy decisions or standard contractual clauses approved by the European Commission.

Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy — for example, to fulfil and document disposal requests, to prevent abuse, and to comply with legal obligations — after which it is deleted or anonymised. Crash and diagnostic data is retained only as long as needed to diagnose and fix issues. Data stored locally on your device remains until you delete the app data or uninstall the App.

How we protect your information

We take commercially reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data;
• restrict or object to certain processing;
• request portability of data you provided to us;
• withdraw consent where processing is based on consent.

To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, https://tietosuoja.fi).

Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will make the updated Policy available and update the effective date above. Your continued use of the App after changes take effect means you accept the updated Policy.

Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Onyx Solutions — [email protected]