Privacy Policy

Technical & Usage Data (automatic)

• Internet Protocol (IP) address
• Device type, model, and operating system version
• App usage data (screens viewed, time spent, interactions)
• Crash reports and diagnostic information

Location Data (with your permission)

The Application may request access to your device's approximate or precise location to provide location-based features such as identifying nearby stores or regional pricing.

• Collected only after you explicitly grant permission
• Used solely to provide and improve location-based features
• Controlled entirely via your device's system settings — revoke access at any time

Any location data used for analytics is anonymised and aggregated before processing.

• To operate and deliver core Application functionality
• To diagnose errors, crashes, and performance issues
• To analyse usage patterns and improve the Application
• To comply with applicable legal obligations
• To protect the security and integrity of the Application

The Application uses Google Firebase, a platform provided by Google LLC. Firebase may collect and process:

• Device identifiers and tokens
• App usage and engagement data
• Crash logs and performance diagnostics

Firebase acts as a data processor on our behalf under a Data Processing Agreement (DPA) with Google. Data processed by Firebase may be transferred to and stored on Google's servers, which may be located outside the European Economic Area (EEA). Google relies on Standard Contractual Clauses (SCCs) as the legal mechanism for such transfers, in accordance with GDPR Article 46.

For more information, see Google's Privacy Policy and Firebase's data processing terms.

If you are located in the EEA or United Kingdom, please be aware that some of your data may be processed in countries outside your region, including the United States, where Google Firebase infrastructure operates.

These transfers are safeguarded by:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Google's compliance with applicable data transfer frameworks

If you are located in the EEA, we process your personal data under the following legal bases:

For legitimate interests processing, we have assessed that our operational purposes are proportionate and do not override your fundamental rights.

Data may be shared only in the following limited circumstances:

• With Google Firebase, as a data processor, to provide Application functionality
• With law enforcement or regulatory authorities, if required by applicable law or valid legal process
• To protect the rights, property, or safety of the Service Provider or users, where legally permitted

All third-party processors are contractually required to process data securely and only for the stated purpose.

We retain collected data only for as long as necessary:

• Usage & diagnostic data — up to 12 months from collection
• Crash logs — up to 6 months, or until the underlying issue is resolved
• Anonymised location data — up to 12 months

You may request deletion of your personal data at any time by contacting us. We will respond within 30 days, subject to any legal retention requirements.

If you are located in the EU or EEA, you have the following rights under the General Data Protection Regulation:

For Croatian residents, the relevant authority is AZOP — Agencija za zaštitu osobnih podataka.

To exercise any of these rights, contact: covic.marin1@gmail.com. We will respond within 30 days.

The Application is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16.

If you believe a child has provided us with personal information without parental consent, please contact us immediately at covic.marin1@gmail.com and we will take prompt steps to delete it.

We implement reasonable technical, administrative, and organisational measures to protect your information against unauthorised access, loss, or misuse. These include relying on Google Firebase's secure infrastructure and limiting data collection to what is necessary.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

We may update this Privacy Policy periodically. When we make material changes, we will update the effective date at the top of this document. For significant changes affecting your rights, we will provide notice within the Application where feasible.

Where consent is required for new processing, we will request it separately rather than relying on continued use of the Application.

For any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact: