Politika privatnosti

1. Ko smo

Aplikaciju Collectory razvija i održava Nebojša Raičević (Talista), Srbija. Za sva pitanja o privatnosti piši na info@talista.rs.

2. Koje podatke prikupljamo

• Nalog: email adresa i lozinka (lozinka se čuva samo u šifrovanom obliku, niko je ne može pročitati).
• Profil: korisničko ime, prikazano ime (opciono) i država.
• Kolekcija: kartice i sličice koje uneseš, njihova stanja, beleške i slike koje sam dodaš.
• Berza: oglasi (naslov, opis, cena, slike, načini slanja i plaćanja), poruke sa drugim korisnicima, dogovori, ocene, prijave, blokiranja i omiljeni oglasi.
• Obaveštenja: tehnički token telefona, da bismo ti slali obaveštenja o novim porukama.
• Krediti: evidencija kupljenih i potrošenih kredita. Plaćanje obavlja Google Play; mi ne vidimo i ne čuvamo podatke o tvojoj kartici.
• Tehnički zapisi: naši serveri automatski beleže osnovne tehničke podatke (npr. IP adresu i vreme pristupa) radi bezbednosti i otklanjanja grešaka.

Ne prikupljamo tvoju lokaciju, kontakte, niti podatke za reklame. Aplikacija nema reklame i ne koristi analitiku praćenja.

3. Zašto koristimo podatke

• da bi aplikacija radila: čuvanje tvoje kolekcije, prijava, oglasi i poruke;
• da bismo ti poslali kod za potvrdu naloga ili promenu lozinke i obaveštenja o porukama;
• radi bezbednosti: sprečavanje prevara, obrada prijava i blokiranja.

4. Šta vide drugi korisnici

Drugi korisnici vide tvoje korisničko ime, državu, aktivne oglase, ocene i broj završenih dogovora. Poruke vidite samo ti i osoba sa kojom se dopisuješ. Ako podeliš album linkom, sadržaj tog albuma može da vidi svako ko ima link, dok deljenje ne isključiš. Tvoja email adresa se nikome ne prikazuje.

5. Kome prosleđujemo podatke

Podatke ne prodajemo. Koristimo samo usluge neophodne za rad aplikacije:

• Supabase – baza podataka, prijava i čuvanje slika;
• Expo – ažuriranja aplikacije i isporuka obaveštenja;
• Google (Firebase Cloud Messaging, Google Play) – isporuka obaveštenja na Android i plaćanje kredita;
• Adriahost – hosting sajta i slanje emailova.

Neki od ovih servisa mogu da čuvaju podatke na serverima van Srbije, uz zaštitu predviđenu njihovim uslovima.

6. Koliko dugo čuvamo podatke

Dok ti je nalog aktivan. Kada obrišeš nalog, tvoji podaci se brišu odmah, a iz rezervnih kopija najkasnije u roku od 30 dana.

7. Tvoja prava

Imaš pravo da vidiš, ispraviš i obrišeš svoje podatke. Većinu toga možeš sam u aplikaciji (Profil). Nalog brišeš u Profil → Obriši nalog ili prema uputstvu na stranici Brisanje naloga. Za sve ostalo piši na info@talista.rs. Imaš i pravo da podneseš pritužbu Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti.

8. Deca

Aplikacija nije namenjena deci mlađoj od 13 godina. Korisnici mlađi od 18 godina smeju da koriste Berzu (oglase, poruke i dogovore) samo uz saglasnost roditelja.

9. Izmene

Ako promenimo ovu politiku, novu verziju objavićemo na ovoj stranici, sa novim datumom.

Privacy Policy

1. Who we are

Collectory is developed and operated by Nebojša Raičević (Talista), Serbia. For any privacy question, write to info@talista.rs.

2. Data we collect

• Account: email address and password (the password is stored only in hashed form; nobody can read it).
• Profile: username, display name (optional) and country.
• Collection: the cards and stickers you add, their status, notes and photos you upload.
• Marketplace: listings (title, description, price, photos, shipping and payment options), messages with other users, deals, ratings, reports, blocks and favorites.
• Notifications: a technical device token used to send you notifications about new messages.
• Credits: a record of purchased and spent credits. Payments are processed by Google Play; we never see or store your card details.
• Technical logs: our servers automatically log basic technical data (e.g. IP address and access time) for security and troubleshooting.

We do not collect your location, contacts or advertising data. The app has no ads and no tracking analytics.

3. Why we use your data

• to run the app: storing your collection, sign-in, listings and messages;
• to send you verification or password reset codes and message notifications;
• for safety: preventing fraud and handling reports and blocks.

4. What other users can see

Other users can see your username, country, active listings, ratings and number of completed deals. Messages are visible only to you and the person you are talking to. If you share an album by link, anyone with the link can view that album until you turn sharing off. Your email address is never shown to anyone.

5. Who we share data with

We do not sell your data. We only use services needed to run the app:

• Supabase – database, sign-in and photo storage;
• Expo – app updates and notification delivery;
• Google (Firebase Cloud Messaging, Google Play) – Android notification delivery and credit payments;
• Adriahost – website hosting and email sending.

Some of these services may store data on servers outside Serbia, protected under their own terms.

6. How long we keep data

For as long as your account is active. When you delete your account, your data is deleted immediately, and from backups within 30 days at the latest.

7. Your rights

You have the right to access, correct and delete your data. You can do most of this yourself in the app (Profile). Delete your account in Profile → Delete account or follow the steps on the Delete account page. For anything else, write to info@talista.rs. You also have the right to lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or with your local data protection authority.

8. Children

The app is not intended for children under 13. Users under 18 may use the marketplace (listings, messages and deals) only with a parent's consent.

9. Changes

If we change this policy, we will publish the new version on this page with a new date.