Privacy Policy

Kapoot — Infrastructure Disruption Alerts
Last updated: March 24, 2026

Orbit Solutions ("we", "us", "our") operates the Kapoot mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Device Identifier
We generate an anonymous device identifier using Firebase Installation ID. This identifier is not linked to your name, email, Apple ID, or Google account. It is used solely to associate your subscriptions and deliver push notifications to your device.

Location Subscriptions
When you subscribe to a city, district, or street, we store that subscription on our server linked to your anonymous device identifier. This allows us to match disruptions to your locations and send relevant notifications.

Push Notification Token
If you enable push notifications, we receive a Firebase Cloud Messaging (FCM) token from your device. This token is used exclusively to deliver disruption alerts. We store it linked to your anonymous device identifier.

Approximate Location (Optional)
If you choose to use the "Use current location" feature during setup, the App requests access to your device's location services to determine your city and district. This location data is processed on-device and is not transmitted to or stored on our servers. We only store the city/district name you select.

Language Preference
We store your selected language (Croatian or English) to deliver notifications in your preferred language.

2. Information We Do Not Collect

• We do not collect your name, email address, phone number, or any personal contact information.
• We do not require account creation or login.
• We do not collect precise GPS coordinates or continuous location tracking.
• We do not collect browsing history, usage analytics, or behavioral data.
• We do not collect financial or payment information.
• We do not use advertising identifiers (IDFA/GAID).
• We do not track you across other apps or websites.

3. How We Use Your Information

• Deliver disruption alerts: We match your subscribed locations against scraped infrastructure disruption data from Croatian utility companies and send you relevant push notifications.
• Maintain your subscriptions: We store your location subscriptions so they persist across app restarts.
• Deliver localized content: We use your language preference to send notifications in Croatian or English.

4. Data Sources

The App displays publicly available infrastructure disruption information scraped from Croatian utility company websites, including but not limited to:

• HEP ODS (electricity disruptions)
• Municipal water utility companies across Croatian cities

We do not modify this information. We reformat and aggregate it for mobile consumption.

5. Third-Party Services

Firebase (Google)
We use Firebase Cloud Messaging for push notification delivery and Firebase Installation ID for anonymous device identification. Firebase may collect certain technical data as described in Firebase's Privacy Policy.

We do not use any other third-party analytics, advertising, or tracking services.

6. Data Storage and Security

• Your data is stored on secure servers hosted by Render (render.com) with a PostgreSQL database.
• All communication between the App and our servers is encrypted using HTTPS/TLS.
• API access is protected by API key authentication.
• We retain your data only as long as it is needed to provide the service. Inactive device tokens are automatically cleaned up when push notification delivery fails.

7. Data Retention and Deletion

• Your subscriptions and push notification tokens are retained as long as they are active.
• You can remove individual subscriptions at any time within the App.
• You can disable push notifications at any time in the App settings or your device settings, which triggers token removal from our server.
• Uninstalling the App effectively removes your association with our service, as the anonymous device identifier is no longer active. Inactive records are periodically cleaned up.
• To request complete deletion of your data, contact us at the email address below.

8. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect information from children. Since we do not collect personal information from any users, there is no special risk to children using the App.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the data we hold about your device identifier
• Request deletion of your data
• Withdraw consent for push notifications at any time

To exercise these rights, contact us at the email address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through an App update or in-app notice. The "Last updated" date at the top reflects the most recent revision.

11. Contact Us

If you have questions about this Privacy Policy or wish to request data deletion, contact us at:

Orbit Solutions
Email: privacy@orbit-solutions.io

Kapoot by Orbit Solutions. This privacy policy applies to the Kapoot mobile application available on iOS and Android.