Privacy Policy

1. Data we collect

We collect the minimum data required to operate the service:

• Account data — Full name, email address and phone number — to create your account, verify your identity and contact you.
• Push notification token — A technical device identifier issued by your operating system, used solely to deliver notifications to your device; it does not by itself reveal your identity.
• Technical usage data — Limited data needed for security and reliable operation (for example sign-in times and error logs).

2. How we use your data

We use your data only for the following purposes:

• Authentication & account management — Secure sign-in, account protection and delivery of the service you request.
• Notifications — Sending service alerts and reminders to your device through the push token.
• Communication — Responding to your requests and service-related messages.

3. Legal basis

We process your data on the basis of: performance of our agreement with you to provide the service; your explicit consent for notifications; and our legitimate interest in securing the service and preventing fraud. You may withdraw consent at any time.

4. Data sharing & third parties

We do not sell your data and do not share it with any third party for their own purposes. We run no third-party advertising or analytics trackers.

Push notifications are technically routed through operating-system providers (Apple and Google) for the sole purpose of delivering the message to your device. Our data is hosted on private infrastructure that we control.

5. Data retention

We keep your data for as long as your account is active, or as needed to provide the service and meet our legal obligations. When you delete your account, your personal data is erased or anonymised within a reasonable period, unless the law requires us to retain it for a set time.

6. Data security

We apply appropriate technical and organisational measures to protect your data: encryption in transit, strict least-privilege access control, and continuous security monitoring.

7. Your rights

You may exercise the following rights at any time:

• Right of access — Know what data we hold about you and obtain a copy.
• Right to rectification — Correct or update inaccurate or incomplete data — directly from your account or on request.
• Right to erasure — Request deletion of your account and personal data.
• Right to withdraw (retract) consent — Cancel your consent to processing or to notifications, without affecting prior lawful processing.
• Right to object & restrict — Object to certain processing or ask us to restrict it.
• Right to data portability — Receive your data in a machine-readable format.

8. How to exercise your rights

You can edit your account data or delete your account directly in the app. You may also contact us at the address below, and we will respond within a reasonable time. You also have the right to lodge a complaint with the competent supervisory authority.

9. Children’s privacy

Our services are not directed to children below the legal age without parental consent. If we learn that we have collected a minor’s data without the required authorisation, we will delete it.

10. Changes to this policy

We may update this policy from time to time. We publish the updated version on this page with a revised effective date, and we notify you of any material change through appropriate means.