litz

Privacy Policy

Effective 15 July 2026

1. Who we are

Strategic Success Lab d.o.o. (“Blitz”, “we”, “us”) operates the Blitz mobile application — a ride-hailing connector that links riders with independent drivers in Bosnia & Herzegovina and neighbouring markets.

We are the data controller for the personal data described in this policy. Contact us at ronald@strategicsuccesslab.com with any questions.

2. What we collect

We collect only what is necessary to operate the service:

  • Name:provided during sign-up.
  • Phone number:used for account creation and OTP verification.
  • Precise location:collected during the app session to find your pickup point, show nearby drivers, and share your live position with your assigned driver during a ride.
  • Device identifiers:push notification token, stored to deliver ride and support notifications.
  • In-app communications:messages sent between rider and driver during a ride; support ticket content.
  • Usage data:ride history in anonymised form retained for billing integrity.
  • Driver verification data:taxi carrier licence number, taxi driver ID number, annual vehicle sticker number, vehicle details and photos, and typical driving availability provided by driver applicants.

We do not collect payment card data. Fares are settled directly between riders and drivers, currently in cash. Direct card payment to participating drivers is coming soon and will be handled by the driver, not Blitz. Driver platform fees are invoiced separately via the web portal.

3. How we use your data

  • Create and manage your account
  • Match you with a nearby driver and share your pickup location with them
  • Provide turn-by-turn routing and live ETA
  • Calculate and display the ride fare
  • Enable in-app messaging between rider and driver during a ride
  • Send push notifications about ride status and support replies
  • Investigate safety incidents and support requests
  • Verify driver and taxi registrations with the relevant local authority
  • Comply with legal obligations

4. Location data

Location is collected only while the app is in use (foreground or active ride foreground service). We do not track your location when the app is closed or in the background outside of an active ride.

Your precise location is shared with your assigned driver only for the duration of the trip. It is not stored beyond what is needed to complete the ride record.

5. Who we share your data with

We share personal data only where necessary:

  • Your assigned driver — name and live pickup location, for the duration of the trip
  • Supabase — database and authentication infrastructure (EU-hosted)
  • SMS provider — phone number, to deliver OTP verification codes
  • Expo / Apple / Google — push notification token, to deliver ride alerts
  • Google Maps — pickup and destination coordinates for routing and ETA

We do not sell your data. We do not share it with advertisers or data brokers.

6. How long we keep your data

When you delete your account, your name, phone number, saved places, documents, and support history are permanently deleted. Ride records are retained in anonymised form (no name, no phone) as required for billing integrity and legal compliance.

Push tokens and location data are deleted with your account or when you uninstall the app, whichever comes first.

7. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your account and personal data — use the in-app Settings → Delete account, or our web deletion page (available even after uninstalling the app)
  • Object to or restrict certain processing
  • Lodge a complaint with your national data protection authority

To exercise any right other than deletion, email us at ronald@strategicsuccesslab.com. We respond within 30 days.

8. Security

All data is encrypted in transit using TLS. Database access is restricted to authenticated services using least-privilege credentials. We do not store OTP codes — they expire immediately after use.

9. Children

Blitz is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it immediately.

10. Changes to this policy

We will notify you via the app or email if we make material changes. The effective date at the top of this page will always reflect the latest version. Continued use of the app after a change means you accept the updated policy.

11. Contact

Strategic Success Lab d.o.o.
ronald@strategicsuccesslab.com

© 2026 Strategic Success Lab d.o.o.. All rights reserved.