1. Who is responsible for your data
The data controller for KamirUnify for End User is Kamir d.o.o., with registered address at Rimski put 37, 10373 Ivanja Reka, Croatia.
The developer and contact person for this application is Luka Trempetić. For privacy questions, rights requests, complaints, or other personal-data-related matters, contact us at [email protected].
2. What this policy covers
This Privacy Policy applies to the Android mobile application KamirUnify for End User, associated backend APIs, and related web resources that link to this policy.
It does not apply to third-party websites, mobile platforms, cloud services, or hardware providers that have their own privacy policies.
3. What personal data we process
| Category | Examples | Typical source |
|---|---|---|
| Account and identity data | Name, display name, email address, account status, login and session data | Provided by you or generated during account use |
| Device and app data | App version, operating system version, device model, push token, installation identifier, and technical diagnostics | Your device and app runtime |
| Uploaded face images | Face image or similar image content that you choose to upload through the app | Provided by you |
| Operational usage data | Notification event data, selected devices, user-device associations, and action logs needed to provide the service | Generated while you use the service |
| Security preference data | Whether local biometric login is enabled on your device | Your settings choice |
| Support and communications | Support messages, issue descriptions, and follow-up records if you contact us | Provided by you |
4. Why we use your data and legal bases
| Purpose | Examples | Legal basis |
|---|---|---|
| Provide the service | Authentication, account access, license validation, device access, event display, notifications, and account settings | Performance of a contract |
| Security and fraud prevention | Protecting accounts, preventing abuse, investigating suspicious activity, and maintaining audit trails | Legitimate interests; legal obligation where applicable |
| Push notifications | Delivering alert notifications that you enable within the app | Performance of a contract and/or consent where required |
| User-requested uploads | Processing face or photo uploads that you intentionally submit | Performance of a contract; your action in submitting the content |
| Support and troubleshooting | Answering support requests and resolving technical issues | Legitimate interests; performance of a contract |
| Legal compliance | Meeting accounting, security, lawful disclosure, and regulatory obligations | Legal obligation |
5. Who we share data with
- Hosting and infrastructure providers that operate backend services or store data on our behalf.
- Push notification providers, including Google Firebase Cloud Messaging, to deliver notifications.
- Technical service providers and processors who help us operate, secure, maintain, or support the service.
- Authorities, courts, regulators, or law enforcement where disclosure is legally required.
We do not sell personal data.
6. International transfers
Where personal data is transferred outside the European Economic Area, we rely on an appropriate lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses, or another transfer safeguard permitted by applicable law.
7. How long we keep data
We retain personal data only for as long as necessary for the purposes described in this policy, including operation of the service, account security, support, fraud prevention, and legal compliance.
- Account data is generally kept while your account remains active.
- Operational and security logs may be retained for a limited period needed for security, debugging, and audit purposes.
- Uploaded face images are generally retained for up to 2 minutes and are then automatically deleted.
- Uploaded face images are not publicly accessible.
- Some records may be retained longer where required by law, dispute handling, or legitimate security needs.
8. Security
We use appropriate technical and organisational measures designed to protect personal data, including encrypted transport where appropriate, access controls, secure authentication, and controls intended to reduce unauthorised access, loss, or misuse.
No system can guarantee absolute security. You should also protect your own device, use a strong account password, and keep your operating system updated.
9. Your rights
Subject to applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your data in certain circumstances;
- request restriction of processing in certain circumstances;
- object to certain processing based on legitimate interests;
- receive a portable copy of certain data;
- withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with your competent data protection authority. If you are in Croatia, that may include the Croatian Personal Data Protection Agency (AZOP), or the authority competent in your place of residence or work.
10. Push notifications
If you enable notifications, the app may process your push token and notification delivery metadata so that alerts can be sent to your device. Notification settings can usually be adjusted in the app and in your device operating system settings.
11. Biometric login
The app may offer local biometric login through your device operating system. This feature uses the biometric capabilities built into your device. KamirUnify for End User does not store your fingerprint or face template on its own servers solely because you enable local biometric unlock.
12. Children
KamirUnify for End User is not directed to children unless explicitly stated in the store listing or product documentation. If you believe a child has provided personal data unlawfully, contact us so that we can review and take appropriate action.
13. Account deletion
If your account is eligible for deletion, you may request deletion through the app and through our external account-deletion page at: [https://kamir-unify.online/account-deletion].
Some information may be retained where necessary for security, fraud prevention, dispute handling, lawful recordkeeping, or other legal obligations.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the “Last updated” date above.
15. Contact
If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at [email protected].
Controller: Kamir d.o.o.
Developer / contact person: Luka Trempetić
Address: Rimski put 37, 10373 Ivanja Reka, Croatia
Email: [email protected]