Privacy Policy

Totohost mobile app (iPhone and Android)

1. Data Controller

TOTOHOST d.o.o., Croatia. Privacy-related inquiries: podrska@totohost.hr.

2. What data we collect

The app serves existing TOTOHOST.HR clients and displays data the client already entrusted to TOTOHOST when signing up. The mobile client itself adds:

• Sign-in: email and password of the client account (transmitted over TLS 1.3, stored only as an access token — in the iOS Keychain on iPhone, in EncryptedSharedPreferences on Android)
• Biometrics (Face ID / Touch ID / fingerprint): biometric data stays on the device only; the app never receives or forwards it
• Push notifications: device identifier (APNs token on iOS, FCM token on Android) and the user-selected UI language (hr or en) — used solely to deliver alerts about new support replies or payments in the matching language
• Technical identifiers: operating system and app version (for compatibility)
• Ticket attachments: photos and files the client voluntarily attaches to a support ticket

The app uses no trackers, analytics SDKs, ads or advertising identifiers (IDFA on iOS or Advertising ID on Android).

3. Purpose of processing

• Authentication and access to client data (hosting, domains, invoices, tickets)
• Delivering notifications about new events on the account
• Enforcing security measures (2FA, biometric unlock)

4. Data sharing

Data is shared only with the following processors required for core functionality:

• Apple Push Notification service (APNs) — Apple Inc., for push delivery to iOS devices
• Firebase Cloud Messaging (FCM) — Google LLC, for push delivery to Android devices
• CorvusPay / PayPal — only when the client chooses card/PayPal payment. The handoff goes directly to the provider; the app never stores card data

Data is not sold to third parties and is not used for third-party marketing.

5. Retention

Session tokens on the device persist until sign-out or uninstall. Client-account data is retained per statutory periods (10 years for financial records, other data per TOTOHOST.HR Terms of Service).

6. Your rights

• Right of access to your data
• Right to correct inaccurate data
• Right to delete the account (see section 7)
• Right to lodge a complaint with the supervisory authority (AZOP, azop.hr)

7. Data deletion — how to request

Two ways to request deletion of your personal data and client account:

1. Inside the app: open More → Settings → Close account (available to signed-in clients).
2. By email: send a request from the account's email address to podrska@totohost.hr.

Deleted immediately: contact details (name, address, phone, VAT ID), active session tokens on all devices, biometric preferences, and push identifiers.

Retained: accounting records (issued invoices and quotes) are kept for 10 years (Croatian Accounting Act), and support communication history and technical records for 5 years. These records are pseudonymised — direct links to the person are removed, but the record itself remains due to legal obligation.

Processing time: requests are processed within 30 days of receipt.

8. Security

All app-server communication runs over HTTPS (TLS 1.3). Authentication tokens are stored encrypted in the iOS Keychain (hardware-backed) or Android EncryptedSharedPreferences (Android Keystore). Passwords are hashed (bcrypt) server-side.

9. Policy changes

These terms take effect on the app's publication date. Any future changes will appear on this page.