1. Data controller
Ekstremac doo Kragujevac, Laze Marinkovica 27a, 34000 Kragujevac, Serbia. For any question about your data: privatnost@odrastamo.com.
2. What data we process
- Account
- Name and e-mail from Apple or Google sign-in, language and appearance.
- Album
- The child's name and date of birth, photos, dates and notes. We remove the location and device details from a photo before upload.
- Members
- Who is invited to the album, with which role, and who added which photo.
- Subscription
- Plan, status, dates and transaction number. Card details are seen only by Paddle, Apple or Google, never by us.
- Notifications
- The device token for the reminder and the team's messages, only if you turn them on.
- Feedback and e-mail news
- The text of the message, the app version and the system; your e-mail for news, if you sign up.
3. Why and on what basis
To provide the service you chose (contract); to charge and issue receipts (contract and legal obligation); to send the reminder and news (your consent, which you can withdraw at any time); to fix errors and keep things secure (legitimate interest). We don't sell data or use it for ads.
4. Who else processes data
Supabase (database and storage), Cloudflare (storing and delivering photos), Vercel (the odrastamo.com website and Vercel Web Analytics), Paddle (payments on the web, as an independent controller for payment data), Apple and Google (sign-in and store purchases), RevenueCat (subscription status from the stores), Firebase Cloud Messaging (notifications), Google Analytics and Firebase (visit statistics for the site and the app), Resend (e-mails about gifts and album invitations) and Mailchimp (e-mail news). Each of them gets only what it needs for that job.
5. Transfers outside the European Union
When one of these partners processes data outside the EU, it does so under the European Commission's standard contractual clauses or another safeguard recognized by law.
6. How long we keep data
For as long as the account exists. A deleted photo, album or account is gone at once, and from backups within 30 days at the latest. We keep purchase records as long as accounting law requires. We delete feedback after two years.
7. Children
Odrastamo is for parents and guardians. A child doesn't open an account, and all we know about a child is what the parent enters: name, date of birth and photos.
8. Cookies
On odrastamo.com we use cookies for sign-in, language and appearance, and the _ga cookie for Google Analytics, which counts visits and recognizes a returning visitor. Vercel Web Analytics counts visits without cookies. There are no advertising cookies. During payment Paddle uses its own cookies for secure checkout and fraud prevention.
9. Your rights
You have the right to access, correct, delete and port your data, the right to object and to withdraw consent. You do most of this yourself in Profile; for the rest write to privatnost@odrastamo.com and we reply within 30 days. You can also lodge a complaint with the data protection authority in your country.
10. Security
Transfers are encrypted, and photos are in private storage and open only through your account and the accounts of invited members. Not even our team sees the photos.
11. Changes
We announce important changes by e-mail or in the app at least 30 days in advance. We send earlier versions on request.