MojaUsluga Android app privacy policy

1. Scope

This policy covers the MojaUsluga Android app. The mojausluga.hr website has a separate website privacy policy. There are no ads, paid placement, accounts, payments or cloud sync in the app.

2. Data stored in the app

You can use the app without a MojaUsluga account and without enabling optional analytics or crash reporting. Favorites, Notes, Therapy, recent searches and app preferences stay on the device. Notes can include PDF, JPG and PNG documents. Therapy includes medication schedules, dose history, stock information and reminder preferences.

During normal use, this data is not sent to us or synchronized with a MojaUsluga account. Android cloud backup is disabled. The app does not add a separate password or database-encryption layer, so protection also depends on Android's app isolation and the security of your device.

Notes, Therapy data and attached documents may contain health or other sensitive information. The app stores them locally only when you choose to create or import them. You can delete individual records and attachments, clear app data or uninstall the app.

3. Optional analytics and crash reports

Firebase Analytics and Firebase Crashlytics are separate optional features. Both are off by default and can be enabled or withdrawn independently in Settings.

If you enable Analytics, Google may process an app-instance identifier, a masked IP address used to derive approximate location, basic app, device, operating-system and language information, and automatic app-lifecycle and session events. Automatic screen reporting, detailed location and device collection, Google signals, advertising identifiers and ads personalization are disabled. We do not set an Analytics user ID or user properties. Custom events use coarse facts such as a result-count range and exclude user-entered content.

If you enable Crashlytics, Google may receive crash, application-not-responding and non-fatal diagnostic reports, including stack traces, installation and session identifiers, time, app version, operating-system and device information. The app adds only fixed technical diagnostic codes. Analytics and Crashlytics parameters do not contain Therapy or medication data, Notes, reminders, search text, provider identity, addresses or location, feedback content or email.

Withdrawing a setting stops future collection on that device. Data already received by Google is not deleted merely by changing the switch.

4. Online features and location

Directory browsing, search, profiles, address lookup and Nearby require an internet connection. We may process the search term, entered place or address, IP address and request content needed to return and protect the feature.

Nearby asks for location permission only after you choose to use your current location. The app does not request background location. Your location or an address you enter is transmitted securely to calculate results. Raw coordinates are not retained in persistent app storage or in MojaUsluga application records.

The optional feedback form sends the category, message, language, app version, Android build number, a random request identifier and an email only if provided. A submission without an email address cannot receive an email reply. A provider-information report sends the provider, reason, message and a random request identifier. Standard network information is processed for delivery, duplicate prevention and abuse control. Do not include health or other sensitive information.

Android map view and directions use Google Maps, which may process location and technical information under Google's Privacy Policy.

5. Export, reminders and Therapy

You create a backup or export manually. It contains Favorites, Notes, documents attached to Notes, Therapy entries, medication schedules, dose history, stock information and medication history. It does not contain recent searches, app preferences or technical notification identifiers. The backup is not encrypted with a password. You choose its destination through Android. The app removes its temporary package after the action. Copies that you previously saved or shared remain at their destination until you delete them.

Notification permission is optional. Notes and Therapy reminders are scheduled locally and use generic text.

Therapy does not diagnose or treat a condition, validate medicine or dose information, check interactions or replace advice from a physician or pharmacist.

6. Legal bases, directory data and controller

Optional Firebase Analytics and Crashlytics rely on consent (Article 6(1)(a) GDPR). Requested directory, search, profile and address results rely on our legitimate interest in providing the service (Article 6(1)(f)); optional foreground location relies on consent. Feedback, reports and directory accuracy rely on our legitimate interests in responding and maintaining the directory.

The app shows professional directory data from official and public records, practice websites, professional directories, publicly available business information and submitted corrections.

The data controller is VIRTO, obrt za informatičke i digitalne usluge, owned by Tomislav Vorih, Podgora Krapinska 94, Krapina, Croatia, OIB 91404144561. Contact info@mojausluga.hr.

7. Service providers and transfers

Cloudflare supports network delivery and security, netcup provides the European Union mobile API and backend database, Google provides support email, optional maps, Analytics and Crashlytics, and the Virto support system handles requests.

Cloudflare or Google may process data outside the European Economic Area. Transfers rely on an applicable adequacy decision, including the EU-US Data Privacy Framework for participating organizations, or European Commission standard contractual clauses and safeguards. We do not sell personal or health-related data.

8. Retention and deletion

• App data remains on the device until edited or deleted, app data is cleared or the app is uninstalled.
• Feedback and directory reports are kept for up to 3 years after closure.
• Application and server logs are kept for up to 90 days.
• Optional app Analytics user-level and event-level data is kept for up to 14 months.
• Firebase Crashlytics keeps crash traces and associated identifiers for 90 days.

9. Your rights, security and contact

You may have rights to access, correct, delete, restrict or receive your data, object, withdraw consent and complain. App data normally stays on your device, so we cannot inspect or delete it remotely.

Data in transit is protected, but no online service or device storage is completely secure. Contact info@mojausluga.hr or the Croatian Personal Data Protection Agency at azop.hr.