1. Who We Are
This Privacy Policy explains how Helemai ("Helemai", "we", "us", or "our"), a company registered in Serbia, collects, uses, and protects personal data through the Vodio mobile application and related services (the "Service"). Helemai is the data controller for the personal data described below.
2. Data We Collect
| Category | Examples |
|---|---|
| Account information | Full name, email address, phone number, profile photo, language preference |
| Event and attendance data | Events and subevents you organize or attend, your role (organizer, admin, attendee), notices and messages sent within events |
| Device information | Push notification device tokens (used to deliver notices), device platform |
| Content you upload | Attachments, logos, and photos associated with organizers or events |
We do not knowingly collect personal data from individuals under 18. The Service is intended for adults only.
3. How We Use Your Data
We use personal data to:
- Create and manage your account and authenticate you;
- Operate event itineraries and deliver notices between organizers and attendees;
- Send push notifications and transactional or invitation emails related to your use of the Service;
- Maintain the security and integrity of the Service;
- Comply with legal obligations.
4. Legal Basis for Processing (GDPR)
Where the General Data Protection Regulation (GDPR) applies, we process personal data on the following bases: performance of a contract (to provide the Service you signed up for), legitimate interests (such as securing the Service and improving reliability), and consent (such as your acceptance of these policies and, where applicable, push notifications).
5. Third-Party Service Providers
We use the following third-party processors to operate the Service. These providers process personal data on our behalf and under contractual data-protection obligations:
| Provider | Purpose |
|---|---|
| Google Firebase / Google Cloud Platform | Authentication, database (Firestore), file storage, backend hosting (Cloud Functions, Cloud Run) |
| Firebase Cloud Messaging | Delivery of push notifications to your device |
| Mailgun | Delivery of transactional emails and app-install invitations |
These providers may process data on infrastructure located outside Serbia or the European Economic Area. Where this occurs, we rely on the provider's standard contractual clauses or equivalent safeguards for international data transfers.
6. Data Retention
We retain account and event data for as long as your account is active and as needed to provide the Service. If you request deletion of your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required to comply with a legal obligation, resolve disputes, or enforce our agreements. Data imported to create events (e.g. from uploaded files) is retained only temporarily and subject to shorter, configurable retention periods before being deleted.
7. Your Rights
Subject to applicable law, including the GDPR (for individuals in the European Economic Area) and the Serbian Law on Personal Data Protection, you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request erasure of your personal data;
- Request a portable copy of your data;
- Object to or request restriction of certain processing;
- Withdraw consent at any time, where processing is based on consent;
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at legal@helemai.rs.
8. Security
We use industry-standard technical and organizational measures, including encryption in transit, access controls, and the security infrastructure provided by Google Firebase/Google Cloud, to protect personal data against unauthorized access, loss, or misuse. No system is completely secure, and we cannot guarantee absolute security.
9. Children's Privacy
The Service is not directed at children and requires users to be at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by a new version number and effective date at the top of this page, and, where required, we will ask you to re-accept the updated policy before continuing to use the Service.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at legal@helemai.rs.