Kapoot

Privacy Policy

Kapoot — Infrastructure Disruption Alerts
Last updated: April 9, 2026

Orbit Solutions ("we", "us", "our") operates the Kapoot mobile application and the kapoot.app website (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Mobile App

Device Identifier. We generate an anonymous device identifier using Firebase Installation ID. It is not linked to your name, email, Apple ID, or Google account. It is used solely to associate your subscriptions and deliver push notifications.

Location Subscriptions. When you subscribe to a city, district, or street, we store that subscription on our server linked to your anonymous device identifier.

Push Notification Token. If you enable push notifications, we receive a Firebase Cloud Messaging (FCM) token and store it linked to your anonymous device identifier.

Language Preference. We store your selected language (Croatian or English) to deliver notifications in your preferred language.

Website (kapoot.app)

Functional Cookies. We use two small first-party cookies — kapoot_city (your chosen city) and kapoot_lang (Croatian or English) — to remember your preferences across visits. These are strictly necessary functional cookies under the ePrivacy Directive and do not require consent. They are stored on your own device, never sent to third parties, and expire after one year.

Server Logs. Our hosting provider (Render) records standard HTTP access logs including your IP address. These are used only for operational purposes (debugging, security, abuse prevention) and are retained for a short period.

No analytics, no ad tracking, no third-party scripts. The website does not load Google Analytics, Facebook Pixel, or any tracking code.

2. Information We Do Not Collect

  • We do not collect your name, email address, or phone number.
  • We do not require account creation or login.
  • We do not collect precise GPS coordinates or continuous location tracking.
  • We do not collect browsing history, usage analytics, or behavioral data.
  • We do not collect financial or payment information.
  • We do not use advertising identifiers (IDFA/GAID).
  • We do not track you across other apps or websites.

3. How We Use Your Information

  • Deliver disruption alerts: We match your subscribed locations against scraped infrastructure disruption data from Croatian utility companies and send you relevant push notifications.
  • Maintain your subscriptions: We store your location subscriptions so they persist across app restarts.
  • Deliver localized content: We use your language preference to render the site and send notifications in Croatian or English.

4. Data Sources

The Service displays publicly available infrastructure disruption information scraped from Croatian utility company websites, including:

  • HEP ODS (electricity disruptions)
  • Municipal water utility companies across Croatian cities

We do not modify this information. We reformat and aggregate it for readable consumption.

5. Third-Party Services

Firebase (Google). The mobile app uses Firebase Cloud Messaging for push notification delivery and Firebase Installation ID for anonymous device identification. See Firebase's Privacy Policy.

Render (hosting). Our servers and database are hosted by Render. Standard access logs apply.

We do not use any other third-party analytics, advertising, or tracking services.

6. Data Storage and Security

  • Your data is stored on secure servers hosted by Render (render.com) with a PostgreSQL database.
  • All communication is encrypted using HTTPS/TLS.
  • API access is protected by API key authentication.
  • We retain data only as long as needed. Inactive device tokens are automatically cleaned up when delivery fails.

7. Data Retention and Deletion

  • Your subscriptions and push tokens are retained as long as they are active.
  • You can remove individual subscriptions at any time within the App.
  • You can disable push notifications at any time, which triggers token removal from our server.
  • Uninstalling the App effectively removes your association with our service.
  • To request complete deletion of your data, contact us at the email below.
  • Website cookies can be cleared at any time from your browser settings.

8. Children's Privacy

The Service is not directed at children under the age of 13. Since we do not collect personal information from any users, there is no special risk to children using the Service.

9. Your Rights

Depending on your jurisdiction (including GDPR in the EU), you may have the right to:

  • Access the data we hold about your device identifier
  • Request deletion of your data
  • Withdraw consent for push notifications at any time

To exercise these rights, contact us at the email address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision.

11. Contact Us

If you have questions or wish to request data deletion, contact us at:

Orbit Solutions
Email: hello@kapoot.app